Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 861768 Details for
Bug 1057761
Can't discover iSCSI target
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
audit.log
audit.log (text/plain), 5.46 MB, created by
Vitor de Lima
on 2014-02-11 11:00:32 UTC
(
hide
)
Description:
audit.log
Filename:
MIME Type:
Creator:
Vitor de Lima
Created:
2014-02-11 11:00:32 UTC
Size:
5.46 MB
patch
obsolete
>type=CRED_DISP msg=audit(1390560178.651:79228): pid=3663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560178.661:79229): pid=3665 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560178.661:79230): pid=3665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560178.661:79231): pid=3665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560178.691:79232): pid=3665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560178.691:79233): pid=3665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560178.701:79234): pid=3683 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560178.701:79235): pid=3683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560178.701:79236): pid=3683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560178.711:79237): pid=3683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560178.711:79238): pid=3683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560189.091:79239): pid=3698 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560189.091:79240): pid=3698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560189.091:79241): pid=3698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560189.091:79242): pid=3698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560189.091:79243): pid=3698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560189.101:79244): pid=3700 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560189.101:79245): pid=3700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560189.101:79246): pid=3700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560189.131:79247): pid=3700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560189.131:79248): pid=3700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560189.151:79249): pid=3717 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560189.151:79250): pid=3717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560189.151:79251): pid=3717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560189.161:79252): pid=3717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560189.161:79253): pid=3717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560199.401:79254): pid=3734 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560199.401:79255): pid=3734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560199.401:79256): pid=3734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560199.401:79257): pid=3734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560199.401:79258): pid=3734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560199.411:79259): pid=3736 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560199.411:79260): pid=3736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560199.411:79261): pid=3736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560199.431:79262): pid=3736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560199.431:79263): pid=3736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560199.451:79264): pid=3753 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560199.451:79265): pid=3753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560199.451:79266): pid=3753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560199.461:79267): pid=3753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560199.461:79268): pid=3753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560210.031:79269): pid=3770 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560210.031:79270): pid=3770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560210.031:79271): pid=3770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560210.031:79272): pid=3770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560210.031:79273): pid=3770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560210.051:79274): pid=3772 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560210.051:79275): pid=3772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560210.051:79276): pid=3772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560210.071:79277): pid=3772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560210.071:79278): pid=3772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560210.091:79279): pid=3789 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560210.091:79280): pid=3789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560210.091:79281): pid=3789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560210.091:79282): pid=3789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560210.091:79283): pid=3789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560250.731:79284): pid=3825 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560250.731:79285): pid=3825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560250.731:79286): pid=3825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560250.731:79287): pid=3825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560250.731:79288): pid=3825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560250.751:79289): pid=3827 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560250.751:79290): pid=3827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560250.751:79291): pid=3827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560250.771:79292): pid=3827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560250.771:79293): pid=3827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560250.791:79294): pid=3844 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560250.791:79295): pid=3844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560250.791:79296): pid=3844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560250.791:79297): pid=3844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560250.791:79298): pid=3844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560261.001:79299): pid=3863 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560261.001:79300): pid=3863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560261.001:79301): pid=3863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560261.001:79302): pid=3863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560261.001:79303): pid=3863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560261.011:79304): pid=3866 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560261.011:79305): pid=3866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560261.011:79306): pid=3866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560261.051:79307): pid=3866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560261.051:79308): pid=3866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560261.071:79309): pid=3884 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560261.071:79310): pid=3884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560261.071:79311): pid=3884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560261.071:79312): pid=3884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560261.071:79313): pid=3884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560271.281:79314): pid=3901 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560271.281:79315): pid=3901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560271.281:79316): pid=3901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560271.281:79317): pid=3901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560271.281:79318): pid=3901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560271.301:79319): pid=3903 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560271.301:79320): pid=3903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560271.301:79321): pid=3903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560271.321:79322): pid=3903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560271.321:79323): pid=3903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560271.331:79324): pid=3920 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560271.331:79325): pid=3920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560271.331:79326): pid=3920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560271.341:79327): pid=3920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560271.341:79328): pid=3920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560292.321:79329): pid=3944 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560292.321:79330): pid=3944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560292.321:79331): pid=3944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560292.321:79332): pid=3944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560292.321:79333): pid=3944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560292.331:79334): pid=3946 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560292.331:79335): pid=3946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560292.331:79336): pid=3946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560292.381:79337): pid=3946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560292.381:79338): pid=3946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560292.391:79339): pid=3963 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390560292.391:79340): pid=3963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560292.391:79341): pid=3963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560292.401:79342): pid=3963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560292.401:79343): pid=3963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560301.351:79344): pid=3978 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D7420676C757374657266732031302E31302E32372E36343A666373746F72616765202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A666373746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560301.351:79345): pid=3978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560301.351:79346): pid=3978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560301.411:79347): pid=3978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560301.411:79348): pid=3978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560302.801:79349): pid=4029 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560302.801:79350): pid=4029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560302.801:79351): pid=4029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560302.811:79352): pid=4029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560302.811:79353): pid=4029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560302.821:79354): pid=4031 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560302.821:79355): pid=4031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560302.821:79356): pid=4031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560302.851:79357): pid=4031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560302.851:79358): pid=4031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560302.871:79359): pid=4049 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390560302.871:79360): pid=4049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560302.871:79361): pid=4049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560302.871:79362): pid=4049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560302.871:79363): pid=4049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560364.001:79364): pid=4102 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560364.001:79365): pid=4102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560364.001:79366): pid=4102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560364.001:79367): pid=4102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560364.001:79368): pid=4102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560364.021:79369): pid=4104 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560364.021:79370): pid=4104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560364.021:79371): pid=4104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560364.061:79372): pid=4104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560364.061:79373): pid=4104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560364.091:79374): pid=4122 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390560364.091:79375): pid=4122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560364.091:79376): pid=4122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560364.101:79377): pid=4122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560364.101:79378): pid=4122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560374.591:79379): pid=4139 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560374.601:79380): pid=4139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560374.601:79381): pid=4139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560374.601:79382): pid=4139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560374.601:79383): pid=4139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560374.621:79384): pid=4141 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560374.621:79385): pid=4141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560374.621:79386): pid=4141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560374.671:79387): pid=4141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560374.671:79388): pid=4141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560374.691:79389): pid=4158 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560374.691:79390): pid=4158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560374.701:79391): pid=4158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560374.711:79392): pid=4158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560374.711:79393): pid=4158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560395.041:79394): pid=4187 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560395.041:79395): pid=4187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560395.041:79396): pid=4187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560395.051:79397): pid=4187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560395.051:79398): pid=4187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560395.071:79399): pid=4190 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560395.071:79400): pid=4190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560395.071:79401): pid=4190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560395.101:79402): pid=4190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560395.101:79403): pid=4190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560395.131:79404): pid=4208 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560395.131:79405): pid=4208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560395.131:79406): pid=4208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560395.141:79407): pid=4208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560395.141:79408): pid=4208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560425.731:79409): pid=4237 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560425.731:79410): pid=4237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560425.731:79411): pid=4237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560425.731:79412): pid=4237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560425.731:79413): pid=4237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560425.751:79414): pid=4239 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560425.751:79415): pid=4239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560425.751:79416): pid=4239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560425.781:79417): pid=4239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560425.781:79418): pid=4239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560425.791:79419): pid=4256 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560425.791:79420): pid=4256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560425.791:79421): pid=4256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560425.801:79422): pid=4256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560425.801:79423): pid=4256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1390560432.101:79424): avc: denied { execute } for pid=4279 comm="glusterd" name="tune2fs" dev="dm-1" ino=2232948 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1390560432.101:79424): arch=80000015 syscall=11 success=no exit=-13 a0=10008bfdca8 a1=1fffe401f8a0 a2=100087cd920 a3=6269 items=0 ppid=1126 pid=4279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_CMD msg=audit(1390560446.291:79425): pid=4292 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560446.291:79426): pid=4292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560446.291:79427): pid=4292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560446.301:79428): pid=4292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560446.301:79429): pid=4292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560446.311:79430): pid=4294 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560446.311:79431): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560446.311:79432): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560446.341:79433): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560446.341:79434): pid=4294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560446.351:79435): pid=4311 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560446.351:79436): pid=4311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560446.351:79437): pid=4311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560446.361:79438): pid=4311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560446.361:79439): pid=4311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560477.131:79440): pid=4347 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560477.131:79441): pid=4347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560477.131:79442): pid=4347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560477.141:79443): pid=4347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560477.141:79444): pid=4347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560477.151:79445): pid=4349 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560477.151:79446): pid=4349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560477.151:79447): pid=4349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560477.181:79448): pid=4349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560477.181:79449): pid=4349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560477.191:79450): pid=4366 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560477.191:79451): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560477.191:79452): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560477.201:79453): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560477.201:79454): pid=4366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560497.681:79455): pid=4389 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560497.681:79456): pid=4389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560497.681:79457): pid=4389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560497.681:79458): pid=4389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560497.681:79459): pid=4389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560497.701:79460): pid=4391 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560497.701:79461): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560497.701:79462): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560497.731:79463): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560497.731:79464): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560497.751:79465): pid=4410 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560497.751:79466): pid=4410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560497.751:79467): pid=4410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560497.751:79468): pid=4410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560497.751:79469): pid=4410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560508.011:79470): pid=4427 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560508.011:79471): pid=4427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560508.011:79472): pid=4427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560508.011:79473): pid=4427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560508.011:79474): pid=4427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560508.021:79475): pid=4429 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560508.021:79476): pid=4429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560508.021:79477): pid=4429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560508.051:79478): pid=4429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560508.051:79479): pid=4429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560508.061:79480): pid=4447 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560508.061:79481): pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560508.061:79482): pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560508.071:79483): pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560508.071:79484): pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560528.381:79485): pid=4470 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560528.381:79486): pid=4470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560528.381:79487): pid=4470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560528.381:79488): pid=4470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560528.381:79489): pid=4470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560528.391:79490): pid=4472 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560528.391:79491): pid=4472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560528.391:79492): pid=4472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560528.421:79493): pid=4472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560528.421:79494): pid=4472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560528.441:79495): pid=4489 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560528.441:79496): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560528.441:79497): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560528.441:79498): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560528.441:79499): pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560548.911:79500): pid=4513 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560548.911:79501): pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560548.911:79502): pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560548.911:79503): pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560548.911:79504): pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560548.921:79505): pid=4515 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560548.921:79506): pid=4515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560548.921:79507): pid=4515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560548.951:79508): pid=4515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560548.951:79509): pid=4515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560548.961:79510): pid=4532 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560548.961:79511): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560548.961:79512): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560548.971:79513): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560548.971:79514): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560589.801:79515): pid=4577 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560589.801:79516): pid=4577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560589.801:79517): pid=4577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560589.811:79518): pid=4577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560589.811:79519): pid=4577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560589.821:79520): pid=4579 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560589.821:79521): pid=4579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560589.821:79522): pid=4579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560589.841:79523): pid=4579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560589.841:79524): pid=4579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560589.861:79525): pid=4596 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560589.861:79526): pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560589.861:79527): pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560589.871:79528): pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560589.871:79529): pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560601.371:79530): pid=4613 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D7420676C757374657266732031302E31302E32372E36343A666373746F72616765202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A666373746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560601.371:79531): pid=4613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560601.371:79532): pid=4613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560601.421:79533): pid=4613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560601.421:79534): pid=4613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560640.631:79535): pid=4692 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560640.631:79536): pid=4692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560640.631:79537): pid=4692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560640.631:79538): pid=4692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560640.631:79539): pid=4692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560640.651:79540): pid=4694 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560640.651:79541): pid=4694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560640.651:79542): pid=4694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560640.681:79543): pid=4694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560640.681:79544): pid=4694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560640.691:79545): pid=4711 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560640.691:79546): pid=4711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560640.701:79547): pid=4711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560640.701:79548): pid=4711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560640.701:79549): pid=4711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560661.361:79550): pid=4735 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560661.361:79551): pid=4735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560661.361:79552): pid=4735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560661.361:79553): pid=4735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560661.361:79554): pid=4735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560661.381:79555): pid=4737 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560661.381:79556): pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560661.381:79557): pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560661.401:79558): pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560661.401:79559): pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560661.421:79560): pid=4754 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560661.421:79561): pid=4754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560661.421:79562): pid=4754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560661.431:79563): pid=4754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560661.431:79564): pid=4754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560702.571:79565): pid=4792 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560702.571:79566): pid=4792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560702.571:79567): pid=4792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560702.571:79568): pid=4792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560702.571:79569): pid=4792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560702.591:79570): pid=4794 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560702.591:79571): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560702.591:79572): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560702.641:79573): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560702.641:79574): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560702.661:79575): pid=4812 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560702.661:79576): pid=4812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560702.671:79577): pid=4812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560702.681:79578): pid=4812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560702.681:79579): pid=4812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1390560732.481:79580): avc: denied { execute } for pid=4841 comm="glusterd" name="tune2fs" dev="dm-1" ino=2232948 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1390560732.481:79580): arch=80000015 syscall=11 success=no exit=-13 a0=10008bfecd8 a1=1ffff001c7e0 a2=100087cd920 a3=6269 items=0 ppid=1126 pid=4841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_CMD msg=audit(1390560733.311:79581): pid=4844 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560733.311:79582): pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560733.311:79583): pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560733.311:79584): pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560733.311:79585): pid=4844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560733.331:79586): pid=4846 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560733.331:79587): pid=4846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560733.331:79588): pid=4846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560733.811:79589): pid=4846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560733.811:79590): pid=4846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560733.831:79591): pid=4863 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560733.831:79592): pid=4863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560733.831:79593): pid=4863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560733.831:79594): pid=4863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560733.831:79595): pid=4863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560754.591:79596): pid=4886 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560754.591:79597): pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560754.591:79598): pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560754.591:79599): pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560754.591:79600): pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560754.611:79601): pid=4888 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560754.611:79602): pid=4888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560754.611:79603): pid=4888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560754.651:79604): pid=4888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560754.651:79605): pid=4888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560754.671:79606): pid=4905 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560754.671:79607): pid=4905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560754.671:79608): pid=4905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560754.671:79609): pid=4905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560754.671:79610): pid=4905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560775.161:79611): pid=4930 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560775.161:79612): pid=4930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560775.161:79613): pid=4930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560775.171:79614): pid=4930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560775.171:79615): pid=4930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560775.181:79616): pid=4932 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560775.181:79617): pid=4932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560775.181:79618): pid=4932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560775.201:79619): pid=4932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560775.201:79620): pid=4932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560775.221:79621): pid=4950 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560775.221:79622): pid=4950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560775.221:79623): pid=4950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560775.231:79624): pid=4950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560775.231:79625): pid=4950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560805.591:79626): pid=4980 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560805.591:79627): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560805.591:79628): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560805.591:79629): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560805.591:79630): pid=4980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560805.611:79631): pid=4982 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560805.611:79632): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560805.611:79633): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560805.641:79634): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560805.641:79635): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560805.651:79636): pid=5000 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560805.661:79637): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560805.661:79638): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560805.661:79639): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560805.661:79640): pid=5000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560825.961:79641): pid=5023 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560825.961:79642): pid=5023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560825.961:79643): pid=5023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560825.961:79644): pid=5023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560825.961:79645): pid=5023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560825.971:79646): pid=5025 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560825.981:79647): pid=5025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560825.981:79648): pid=5025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560826.001:79649): pid=5025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560826.001:79650): pid=5025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560826.021:79651): pid=5042 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560826.021:79652): pid=5042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560826.021:79653): pid=5042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560826.021:79654): pid=5042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560826.021:79655): pid=5042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560876.931:79656): pid=5086 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560876.931:79657): pid=5086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560876.931:79658): pid=5086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560876.931:79659): pid=5086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560876.931:79660): pid=5086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560876.951:79661): pid=5088 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560876.951:79662): pid=5088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560876.951:79663): pid=5088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560876.981:79664): pid=5088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560876.981:79665): pid=5088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560877.001:79666): pid=5105 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390560877.001:79667): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560877.001:79668): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560877.001:79669): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560877.001:79670): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560887.221:79671): pid=5123 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560887.221:79672): pid=5123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560887.221:79673): pid=5123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560887.221:79674): pid=5123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560887.221:79675): pid=5123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560887.231:79676): pid=5125 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560887.231:79677): pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560887.241:79678): pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560887.261:79679): pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560887.261:79680): pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560887.271:79681): pid=5142 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560887.281:79682): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560887.281:79683): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560887.281:79684): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560887.281:79685): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560897.871:79686): pid=5159 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560897.871:79687): pid=5159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560897.871:79688): pid=5159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560897.871:79689): pid=5159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560897.871:79690): pid=5159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560897.881:79691): pid=5161 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560897.881:79692): pid=5161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560897.881:79693): pid=5161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560897.911:79694): pid=5161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560897.911:79695): pid=5161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560897.931:79696): pid=5178 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560897.931:79697): pid=5178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560897.931:79698): pid=5178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560897.931:79699): pid=5178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560897.931:79700): pid=5178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560901.351:79701): pid=5188 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D7420676C757374657266732031302E31302E32372E36343A666373746F72616765202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A666373746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560901.351:79702): pid=5188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560901.351:79703): pid=5188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560901.401:79704): pid=5188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560901.401:79705): pid=5188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1390560901.631:79706): pid=5237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390560901.631:79707): pid=5237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390560901.631:79708): login pid=5237 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=80 >type=USER_START msg=audit(1390560901.641:79709): pid=5237 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390560901.641:79710): pid=5237 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390560901.651:79711): pid=5237 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390560901.651:79712): pid=5237 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1390560908.121:79713): pid=5249 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560908.121:79714): pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560908.131:79715): pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560908.131:79716): pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560908.131:79717): pid=5249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560908.141:79718): pid=5251 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560908.141:79719): pid=5251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560908.141:79720): pid=5251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560908.171:79721): pid=5251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560908.171:79722): pid=5251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560908.181:79723): pid=5269 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560908.181:79724): pid=5269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560908.181:79725): pid=5269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560908.191:79726): pid=5269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560908.191:79727): pid=5269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560918.741:79728): pid=5285 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560918.741:79729): pid=5285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560918.741:79730): pid=5285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560918.741:79731): pid=5285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560918.741:79732): pid=5285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560918.751:79733): pid=5287 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560918.751:79734): pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560918.751:79735): pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560918.781:79736): pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560918.781:79737): pid=5287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560918.801:79738): pid=5304 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560918.801:79739): pid=5304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560918.801:79740): pid=5304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560918.801:79741): pid=5304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560918.801:79742): pid=5304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560928.991:79743): pid=5327 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560928.991:79744): pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560928.991:79745): pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560928.991:79746): pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560928.991:79747): pid=5327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560929.011:79748): pid=5329 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560929.011:79749): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560929.011:79750): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560929.041:79751): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560929.041:79752): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560929.051:79753): pid=5346 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560929.051:79754): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560929.051:79755): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560929.061:79756): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560929.061:79757): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560939.461:79758): pid=5363 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560939.461:79759): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560939.461:79760): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560939.461:79761): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560939.461:79762): pid=5363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560939.471:79763): pid=5365 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560939.471:79764): pid=5365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560939.471:79765): pid=5365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560939.501:79766): pid=5365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560939.501:79767): pid=5365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560939.511:79768): pid=5382 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390560939.521:79769): pid=5382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560939.521:79770): pid=5382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560939.521:79771): pid=5382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560939.521:79772): pid=5382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560959.841:79773): pid=5406 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560959.841:79774): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560959.841:79775): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560959.841:79776): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560959.841:79777): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560959.851:79778): pid=5408 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560959.851:79779): pid=5408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560959.851:79780): pid=5408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560959.881:79781): pid=5408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560959.881:79782): pid=5408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560959.891:79783): pid=5425 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390560959.891:79784): pid=5425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560959.891:79785): pid=5425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560959.901:79786): pid=5425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560959.901:79787): pid=5425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560970.141:79788): pid=5440 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560970.141:79789): pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560970.141:79790): pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560970.141:79791): pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560970.141:79792): pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560970.151:79793): pid=5442 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560970.151:79794): pid=5442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560970.151:79795): pid=5442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560970.191:79796): pid=5442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560970.191:79797): pid=5442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560970.211:79798): pid=5459 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560970.211:79799): pid=5459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560970.211:79800): pid=5459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560970.211:79801): pid=5459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560970.211:79802): pid=5459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560990.731:79803): pid=5490 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560990.731:79804): pid=5490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560990.731:79805): pid=5490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560990.741:79806): pid=5490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560990.741:79807): pid=5490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560990.761:79808): pid=5492 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390560990.761:79809): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560990.761:79810): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560990.801:79811): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560990.801:79812): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390560990.831:79813): pid=5509 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390560990.831:79814): pid=5509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390560990.831:79815): pid=5509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390560990.841:79816): pid=5509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390560990.841:79817): pid=5509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561031.711:79818): pid=5545 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561031.711:79819): pid=5545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561031.711:79820): pid=5545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561031.711:79821): pid=5545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561031.711:79822): pid=5545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561031.741:79823): pid=5548 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561031.741:79824): pid=5548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561031.741:79825): pid=5548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561031.791:79826): pid=5548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561031.791:79827): pid=5548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561031.811:79828): pid=5566 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561031.811:79829): pid=5566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561031.811:79830): pid=5566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561031.821:79831): pid=5566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561031.821:79832): pid=5566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1390561032.871:79833): avc: denied { execute } for pid=5587 comm="glusterd" name="tune2fs" dev="dm-1" ino=2232948 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1390561032.871:79833): arch=80000015 syscall=11 success=no exit=-13 a0=10008bfdca8 a1=1fffe4020490 a2=100087cd920 a3=6269 items=0 ppid=1126 pid=5587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_CMD msg=audit(1390561082.881:79834): pid=5624 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561082.881:79835): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561082.881:79836): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561082.881:79837): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561082.881:79838): pid=5624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561082.901:79839): pid=5626 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561082.901:79840): pid=5626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561082.901:79841): pid=5626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561082.931:79842): pid=5626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561082.931:79843): pid=5626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561082.951:79844): pid=5643 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561082.951:79845): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561082.951:79846): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561082.961:79847): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561082.961:79848): pid=5643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561093.361:79849): pid=5658 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561093.361:79850): pid=5658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561093.361:79851): pid=5658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561093.361:79852): pid=5658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561093.361:79853): pid=5658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561093.371:79854): pid=5660 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561093.371:79855): pid=5660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561093.371:79856): pid=5660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561093.401:79857): pid=5660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561093.401:79858): pid=5660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561093.411:79859): pid=5677 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561093.411:79860): pid=5677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561093.411:79861): pid=5677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561093.421:79862): pid=5677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561093.421:79863): pid=5677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561103.981:79864): pid=5695 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561103.981:79865): pid=5695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561103.981:79866): pid=5695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561103.981:79867): pid=5695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561103.981:79868): pid=5695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561103.991:79869): pid=5697 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561103.991:79870): pid=5697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561103.991:79871): pid=5697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561104.021:79872): pid=5697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561104.021:79873): pid=5697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561104.041:79874): pid=5714 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561104.041:79875): pid=5714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561104.041:79876): pid=5714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561104.041:79877): pid=5714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561104.041:79878): pid=5714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561124.371:79879): pid=5743 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561124.371:79880): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561124.371:79881): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561124.381:79882): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561124.381:79883): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561124.391:79884): pid=5746 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561124.391:79885): pid=5746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561124.391:79886): pid=5746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561124.421:79887): pid=5746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561124.421:79888): pid=5746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561124.431:79889): pid=5764 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561124.431:79890): pid=5764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561124.441:79891): pid=5764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561124.441:79892): pid=5764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561124.441:79893): pid=5764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561134.671:79894): pid=5780 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561134.671:79895): pid=5780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561134.671:79896): pid=5780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561134.671:79897): pid=5780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561134.671:79898): pid=5780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561134.681:79899): pid=5782 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561134.681:79900): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561134.681:79901): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561134.711:79902): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561134.711:79903): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561134.731:79904): pid=5801 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561134.731:79905): pid=5801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561134.731:79906): pid=5801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561134.731:79907): pid=5801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561134.731:79908): pid=5801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561145.121:79909): pid=5817 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561145.121:79910): pid=5817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561145.121:79911): pid=5817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561145.121:79912): pid=5817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561145.121:79913): pid=5817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561145.131:79914): pid=5819 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561145.131:79915): pid=5819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561145.131:79916): pid=5819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561145.151:79917): pid=5819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561145.151:79918): pid=5819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561145.171:79919): pid=5837 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390561145.171:79920): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561145.171:79921): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561145.181:79922): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561145.181:79923): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561165.581:79924): pid=5860 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561165.581:79925): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561165.591:79926): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561165.591:79927): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561165.591:79928): pid=5860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561165.601:79929): pid=5862 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561165.601:79930): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561165.601:79931): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561165.631:79932): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561165.631:79933): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561165.641:79934): pid=5880 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561165.641:79935): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561165.641:79936): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561165.651:79937): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561165.651:79938): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561175.881:79939): pid=5903 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561175.881:79940): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561175.881:79941): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561175.881:79942): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561175.881:79943): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561175.891:79944): pid=5905 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561175.891:79945): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561175.891:79946): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561175.921:79947): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561175.921:79948): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561175.941:79949): pid=5923 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561175.941:79950): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561175.941:79951): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561175.941:79952): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561175.941:79953): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561186.361:79954): pid=5940 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561186.361:79955): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561186.361:79956): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561186.361:79957): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561186.361:79958): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561186.371:79959): pid=5942 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561186.371:79960): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561186.371:79961): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561186.411:79962): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561186.411:79963): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561186.421:79964): pid=5959 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561186.421:79965): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561186.421:79966): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561186.431:79967): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561186.431:79968): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561197.161:79969): pid=5976 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561197.161:79970): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561197.161:79971): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561197.161:79972): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561197.161:79973): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561197.181:79974): pid=5978 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561197.181:79975): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561197.181:79976): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561197.211:79977): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561197.211:79978): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561197.221:79979): pid=5995 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561197.221:79980): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561197.221:79981): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561197.231:79982): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561197.231:79983): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561201.491:79984): pid=6008 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D7420676C757374657266732031302E31302E32372E36343A666373746F72616765202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A666373746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561201.491:79985): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561201.491:79986): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561201.551:79987): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561201.551:79988): pid=6008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561228.291:79989): pid=6077 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561228.291:79990): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561228.291:79991): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561228.301:79992): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561228.301:79993): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561228.311:79994): pid=6079 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561228.311:79995): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561228.311:79996): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561228.341:79997): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561228.341:79998): pid=6079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561228.351:79999): pid=6096 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561228.351:80000): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561228.351:80001): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561228.361:80002): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561228.361:80003): pid=6096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561238.581:80004): pid=6119 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561238.581:80005): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561238.581:80006): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561238.581:80007): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561238.581:80008): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561238.591:80009): pid=6121 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561238.591:80010): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561238.591:80011): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561238.621:80012): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561238.621:80013): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561238.641:80014): pid=6138 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561238.641:80015): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561238.641:80016): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561238.651:80017): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561238.651:80018): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561249.041:80019): pid=6154 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561249.041:80020): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561249.041:80021): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561249.051:80022): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561249.051:80023): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561249.061:80024): pid=6156 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561249.061:80025): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561249.061:80026): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561249.081:80027): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561249.081:80028): pid=6156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561249.101:80029): pid=6175 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561249.101:80030): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561249.101:80031): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561249.101:80032): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561249.101:80033): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1390561261.661:80034): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390561261.661:80035): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390561261.661:80036): login pid=6191 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=81 >type=USER_START msg=audit(1390561261.671:80037): pid=6191 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390561261.671:80038): pid=6191 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390561261.691:80039): avc: denied { read } for pid=6207 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390561261.691:80039): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff3a835a0 a2=84800 a3=0 items=0 ppid=6205 pid=6207 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=81 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390561261.701:80040): pid=6191 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390561261.701:80041): pid=6191 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1390561279.481:80042): pid=6236 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561279.481:80043): pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561279.481:80044): pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561279.481:80045): pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561279.481:80046): pid=6236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561279.501:80047): pid=6238 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561279.501:80048): pid=6238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561279.501:80049): pid=6238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561279.531:80050): pid=6238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561279.531:80051): pid=6238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561279.541:80052): pid=6255 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561279.541:80053): pid=6255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561279.541:80054): pid=6255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561279.551:80055): pid=6255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561279.551:80056): pid=6255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561289.781:80057): pid=6272 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561289.781:80058): pid=6272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561289.781:80059): pid=6272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561289.781:80060): pid=6272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561289.781:80061): pid=6272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561289.791:80062): pid=6274 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561289.791:80063): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561289.791:80064): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561289.821:80065): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561289.821:80066): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561289.851:80067): pid=6291 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561289.851:80068): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561289.851:80069): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561289.861:80070): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561289.861:80071): pid=6291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1390561333.231:80072): avc: denied { execute } for pid=6340 comm="glusterd" name="tune2fs" dev="dm-1" ino=2232948 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1390561333.231:80072): arch=80000015 syscall=11 success=no exit=-13 a0=10008bfdca8 a1=1fffe4020950 a2=100087cd920 a3=6269 items=0 ppid=1126 pid=6340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_CMD msg=audit(1390561351.071:80073): pid=6355 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561351.081:80074): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561351.081:80075): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561351.081:80076): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561351.081:80077): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561351.091:80078): pid=6357 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561351.091:80079): pid=6357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561351.091:80080): pid=6357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561351.121:80081): pid=6357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561351.121:80082): pid=6357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561351.141:80083): pid=6375 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561351.141:80084): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561351.141:80085): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561351.151:80086): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561351.151:80087): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561381.521:80088): pid=6405 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561381.521:80089): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561381.521:80090): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561381.521:80091): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561381.521:80092): pid=6405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561381.531:80093): pid=6407 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561381.531:80094): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561381.531:80095): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561381.561:80096): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561381.561:80097): pid=6407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561381.571:80098): pid=6424 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390561381.571:80099): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561381.571:80100): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561381.581:80101): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561381.581:80102): pid=6424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561442.591:80103): pid=6476 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561442.591:80104): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561442.591:80105): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561442.601:80106): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561442.601:80107): pid=6476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561442.611:80108): pid=6478 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561442.611:80109): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561442.611:80110): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561442.641:80111): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561442.641:80112): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561442.651:80113): pid=6495 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390561442.651:80114): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561442.651:80115): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561442.661:80116): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561442.661:80117): pid=6495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561463.371:80118): pid=6520 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561463.371:80119): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561463.371:80120): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561463.371:80121): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561463.371:80122): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561463.391:80123): pid=6522 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561463.391:80124): pid=6522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561463.391:80125): pid=6522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561463.421:80126): pid=6522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561463.421:80127): pid=6522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561463.431:80128): pid=6539 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390561463.431:80129): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561463.431:80130): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561463.441:80131): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561463.441:80132): pid=6539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561473.651:80133): pid=6561 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561473.651:80134): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561473.651:80135): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561473.651:80136): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561473.651:80137): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561473.661:80138): pid=6563 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561473.661:80139): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561473.661:80140): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561473.701:80141): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561473.701:80142): pid=6563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561473.721:80143): pid=6582 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561473.721:80144): pid=6582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561473.721:80145): pid=6582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561473.721:80146): pid=6582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561473.721:80147): pid=6582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561484.121:80148): pid=6598 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561484.121:80149): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561484.121:80150): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561484.121:80151): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561484.121:80152): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561484.131:80153): pid=6600 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561484.131:80154): pid=6600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561484.131:80155): pid=6600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561484.161:80156): pid=6600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561484.161:80157): pid=6600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561484.181:80158): pid=6617 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561484.181:80159): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561484.181:80160): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561484.181:80161): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561484.181:80162): pid=6617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561501.371:80163): pid=6636 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D7420676C757374657266732031302E31302E32372E36343A666373746F72616765202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A666373746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561501.371:80164): pid=6636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561501.371:80165): pid=6636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561501.421:80166): pid=6636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561501.421:80167): pid=6636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561514.832:80168): pid=6697 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561514.832:80169): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561514.832:80170): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561514.842:80171): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561514.842:80172): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561514.852:80173): pid=6699 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561514.852:80174): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561514.852:80175): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561514.882:80176): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561514.882:80177): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561514.892:80178): pid=6716 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561514.892:80179): pid=6716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561514.892:80180): pid=6716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561514.902:80181): pid=6716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561514.902:80182): pid=6716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561525.282:80183): pid=6733 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561525.282:80184): pid=6733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561525.282:80185): pid=6733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561525.282:80186): pid=6733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561525.282:80187): pid=6733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561525.302:80188): pid=6735 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561525.302:80189): pid=6735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561525.302:80190): pid=6735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561525.322:80191): pid=6735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561525.322:80192): pid=6735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561525.342:80193): pid=6752 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561525.342:80194): pid=6752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561525.342:80195): pid=6752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561525.352:80196): pid=6752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561525.352:80197): pid=6752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561535.762:80198): pid=6767 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561535.762:80199): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561535.762:80200): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561535.762:80201): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561535.762:80202): pid=6767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561535.782:80203): pid=6769 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561535.782:80204): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561535.782:80205): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561535.802:80206): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561535.802:80207): pid=6769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561535.822:80208): pid=6786 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561535.822:80209): pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561535.822:80210): pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561535.822:80211): pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561535.822:80212): pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561566.392:80213): pid=6816 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561566.392:80214): pid=6816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561566.392:80215): pid=6816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561566.392:80216): pid=6816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561566.392:80217): pid=6816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561566.412:80218): pid=6818 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561566.412:80219): pid=6818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561566.412:80220): pid=6818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561566.452:80221): pid=6818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561566.452:80222): pid=6818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561566.462:80223): pid=6835 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390561566.462:80224): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561566.462:80225): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561566.472:80226): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561566.472:80227): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561587.172:80228): pid=6860 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561587.172:80229): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561587.172:80230): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561587.182:80231): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561587.182:80232): pid=6860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561587.192:80233): pid=6862 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561587.192:80234): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561587.192:80235): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561587.222:80236): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561587.222:80237): pid=6862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561587.232:80238): pid=6879 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390561587.232:80239): pid=6879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561587.232:80240): pid=6879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561587.242:80241): pid=6879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561587.242:80242): pid=6879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561597.462:80243): pid=6902 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561597.462:80244): pid=6902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561597.472:80245): pid=6902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561597.472:80246): pid=6902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561597.472:80247): pid=6902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561597.482:80248): pid=6904 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561597.482:80249): pid=6904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561597.482:80250): pid=6904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561597.512:80251): pid=6904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561597.512:80252): pid=6904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561597.522:80253): pid=6923 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561597.522:80254): pid=6923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561597.522:80255): pid=6923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561597.532:80256): pid=6923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561597.532:80257): pid=6923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561608.152:80258): pid=6940 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561608.152:80259): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561608.152:80260): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561608.152:80261): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561608.152:80262): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561608.182:80263): pid=6942 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561608.182:80264): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561608.182:80265): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561608.222:80266): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561608.222:80267): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561608.242:80268): pid=6959 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561608.242:80269): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561608.242:80270): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561608.252:80271): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561608.252:80272): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561628.752:80273): pid=6984 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561628.752:80274): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561628.752:80275): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561628.752:80276): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561628.752:80277): pid=6984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561628.772:80278): pid=6986 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561628.772:80279): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561628.772:80280): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561628.822:80281): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561628.822:80282): pid=6986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561628.842:80283): pid=7003 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561628.842:80284): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561628.842:80285): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561628.852:80286): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561628.862:80287): pid=7003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1390561633.612:80288): avc: denied { execute } for pid=7012 comm="glusterd" name="tune2fs" dev="dm-1" ino=2232948 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1390561633.612:80288): arch=80000015 syscall=11 success=no exit=-13 a0=10008bfecd8 a1=1ffff001cc50 a2=100087cd920 a3=6269 items=0 ppid=1126 pid=7012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_CMD msg=audit(1390561649.352:80289): pid=7026 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561649.352:80290): pid=7026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561649.352:80291): pid=7026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561649.362:80292): pid=7026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561649.362:80293): pid=7026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561649.382:80294): pid=7028 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561649.382:80295): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561649.382:80296): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561649.422:80297): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561649.422:80298): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561649.452:80299): pid=7046 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561649.452:80300): pid=7046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561649.452:80301): pid=7046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561649.462:80302): pid=7046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561649.462:80303): pid=7046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561680.082:80304): pid=7083 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561680.082:80305): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561680.082:80306): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561680.082:80307): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561680.082:80308): pid=7083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561680.092:80309): pid=7085 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561680.092:80310): pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561680.092:80311): pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561680.132:80312): pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561680.132:80313): pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561680.142:80314): pid=7104 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561680.142:80315): pid=7104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561680.142:80316): pid=7104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561680.152:80317): pid=7104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561680.152:80318): pid=7104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561690.392:80319): pid=7121 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561690.392:80320): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561690.392:80321): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561690.392:80322): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561690.392:80323): pid=7121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561690.412:80324): pid=7123 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561690.412:80325): pid=7123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561690.412:80326): pid=7123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561690.432:80327): pid=7123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561690.432:80328): pid=7123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561690.452:80329): pid=7141 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390561690.452:80330): pid=7141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561690.452:80331): pid=7141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561690.452:80332): pid=7141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561690.452:80333): pid=7141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561730.942:80334): pid=7185 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561730.942:80335): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561730.942:80336): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561730.942:80337): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561730.942:80338): pid=7185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561730.952:80339): pid=7187 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561730.952:80340): pid=7187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561730.952:80341): pid=7187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561730.982:80342): pid=7187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561730.982:80343): pid=7187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561730.992:80344): pid=7206 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561730.992:80345): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561730.992:80346): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561731.002:80347): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561731.002:80348): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561741.452:80349): pid=7223 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561741.452:80350): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561741.452:80351): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561741.452:80352): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561741.452:80353): pid=7223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561741.462:80354): pid=7225 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561741.462:80355): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561741.462:80356): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561741.492:80357): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561741.492:80358): pid=7225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561741.512:80359): pid=7242 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561741.512:80360): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561741.512:80361): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561741.522:80362): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561741.522:80363): pid=7242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561771.892:80364): pid=7278 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561771.892:80365): pid=7278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561771.892:80366): pid=7278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561771.892:80367): pid=7278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561771.892:80368): pid=7278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561771.902:80369): pid=7280 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561771.902:80370): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561771.902:80371): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561771.932:80372): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561771.932:80373): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561771.952:80374): pid=7297 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561771.952:80375): pid=7297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561771.952:80376): pid=7297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561771.952:80377): pid=7297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561771.952:80378): pid=7297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561792.252:80379): pid=7319 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561792.262:80380): pid=7319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561792.262:80381): pid=7319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561792.262:80382): pid=7319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561792.262:80383): pid=7319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561792.272:80384): pid=7321 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561792.272:80385): pid=7321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561792.272:80386): pid=7321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561792.302:80387): pid=7321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561792.302:80388): pid=7321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561792.312:80389): pid=7338 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561792.312:80390): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561792.312:80391): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561792.322:80392): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561792.322:80393): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561801.362:80394): pid=7353 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D7420676C757374657266732031302E31302E32372E36343A666373746F72616765202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A666373746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561801.362:80395): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561801.362:80396): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561801.412:80397): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561801.412:80398): pid=7353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1390561801.712:80399): pid=7402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390561801.712:80400): pid=7402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390561801.712:80401): login pid=7402 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=82 >type=USER_START msg=audit(1390561801.722:80402): pid=7402 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390561801.722:80403): pid=7402 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390561801.732:80404): pid=7402 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390561801.732:80405): pid=7402 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1390561813.052:80406): pid=7417 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561813.052:80407): pid=7417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561813.052:80408): pid=7417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561813.062:80409): pid=7417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561813.062:80410): pid=7417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561813.072:80411): pid=7419 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561813.072:80412): pid=7419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561813.072:80413): pid=7419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561813.102:80414): pid=7419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561813.102:80415): pid=7419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561813.112:80416): pid=7436 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561813.112:80417): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561813.112:80418): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561813.122:80419): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561813.122:80420): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561843.712:80421): pid=7466 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561843.712:80422): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561843.712:80423): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561843.722:80424): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561843.722:80425): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561843.732:80426): pid=7469 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561843.732:80427): pid=7469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561843.732:80428): pid=7469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561843.762:80429): pid=7469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561843.762:80430): pid=7469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561843.772:80431): pid=7486 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561843.772:80432): pid=7486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561843.772:80433): pid=7486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561843.782:80434): pid=7486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561843.782:80435): pid=7486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561874.552:80436): pid=7517 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561874.552:80437): pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561874.552:80438): pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561874.552:80439): pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561874.552:80440): pid=7517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561874.562:80441): pid=7519 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561874.562:80442): pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561874.562:80443): pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561874.592:80444): pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561874.592:80445): pid=7519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561874.602:80446): pid=7537 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561874.602:80447): pid=7537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561874.602:80448): pid=7537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561874.612:80449): pid=7537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561874.612:80450): pid=7537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561894.882:80451): pid=7566 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561894.882:80452): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561894.882:80453): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561894.892:80454): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561894.892:80455): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561894.902:80456): pid=7568 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561894.902:80457): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561894.902:80458): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561894.932:80459): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561894.932:80460): pid=7568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561894.952:80461): pid=7586 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561894.952:80462): pid=7586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561894.952:80463): pid=7586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561894.962:80464): pid=7586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561894.962:80465): pid=7586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561905.392:80466): pid=7602 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561905.392:80467): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561905.392:80468): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561905.402:80469): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561905.402:80470): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561905.412:80471): pid=7604 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561905.412:80472): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561905.412:80473): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561905.442:80474): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561905.442:80475): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561905.452:80476): pid=7622 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390561905.452:80477): pid=7622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561905.452:80478): pid=7622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561905.462:80479): pid=7622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561905.462:80480): pid=7622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561915.702:80481): pid=7638 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561915.702:80482): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561915.702:80483): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561915.702:80484): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561915.702:80485): pid=7638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561915.722:80486): pid=7640 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561915.722:80487): pid=7640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561915.722:80488): pid=7640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561915.772:80489): pid=7640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561915.772:80490): pid=7640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561915.822:80491): pid=7659 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561915.822:80492): pid=7659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561915.822:80493): pid=7659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561915.832:80494): pid=7659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561915.832:80495): pid=7659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561926.262:80496): pid=7675 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561926.262:80497): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561926.262:80498): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561926.272:80499): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561926.272:80500): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561926.292:80501): pid=7677 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561926.292:80502): pid=7677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561926.292:80503): pid=7677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561926.332:80504): pid=7677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561926.332:80505): pid=7677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561926.352:80506): pid=7694 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390561926.352:80507): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561926.352:80508): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561926.372:80509): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561926.372:80510): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1390561933.992:80511): avc: denied { execute } for pid=7707 comm="glusterd" name="tune2fs" dev="dm-1" ino=2232948 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1390561933.992:80511): arch=80000015 syscall=11 success=no exit=-13 a0=10008bfecd8 a1=1ffff001d140 a2=100087cd920 a3=6269 items=0 ppid=1126 pid=7707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_CMD msg=audit(1390561946.872:80512): pid=7718 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561946.872:80513): pid=7718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561946.872:80514): pid=7718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561946.872:80515): pid=7718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561946.872:80516): pid=7718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561946.892:80517): pid=7720 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561946.892:80518): pid=7720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561946.892:80519): pid=7720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561946.942:80520): pid=7720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561946.942:80521): pid=7720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561946.972:80522): pid=7737 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561946.972:80523): pid=7737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561946.972:80524): pid=7737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561946.982:80525): pid=7737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561946.982:80526): pid=7737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561987.502:80527): pid=7782 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561987.502:80528): pid=7782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561987.502:80529): pid=7782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561987.512:80530): pid=7782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561987.512:80531): pid=7782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561987.522:80532): pid=7784 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390561987.522:80533): pid=7784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561987.522:80534): pid=7784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561987.552:80535): pid=7784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561987.552:80536): pid=7784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390561987.562:80537): pid=7801 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390561987.562:80538): pid=7801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390561987.562:80539): pid=7801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390561987.572:80540): pid=7801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390561987.572:80541): pid=7801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562007.882:80542): pid=7824 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562007.882:80543): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562007.882:80544): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562007.882:80545): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562007.882:80546): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562007.892:80547): pid=7826 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562007.892:80548): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562007.892:80549): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562007.922:80550): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562007.922:80551): pid=7826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562007.932:80552): pid=7843 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562007.942:80553): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562007.942:80554): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562007.942:80555): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562007.942:80556): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562038.882:80557): pid=7874 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562038.882:80558): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562038.882:80559): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562038.882:80560): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562038.882:80561): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562038.902:80562): pid=7876 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562038.902:80563): pid=7876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562038.902:80564): pid=7876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562038.922:80565): pid=7876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562038.922:80566): pid=7876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562038.942:80567): pid=7894 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390562038.942:80568): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562038.942:80569): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562038.952:80570): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562038.952:80571): pid=7894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562090.422:80572): pid=7946 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562090.422:80573): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562090.422:80574): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562090.422:80575): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562090.422:80576): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562090.432:80577): pid=7948 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562090.432:80578): pid=7948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562090.432:80579): pid=7948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562090.472:80580): pid=7948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562090.472:80581): pid=7948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562090.482:80582): pid=7966 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562090.482:80583): pid=7966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562090.482:80584): pid=7966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562090.492:80585): pid=7966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562090.492:80586): pid=7966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562101.342:80587): pid=7983 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D7420676C757374657266732031302E31302E32372E36343A666373746F72616765202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A666373746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562101.342:80588): pid=7983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562101.342:80589): pid=7983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562101.392:80590): pid=7983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562101.392:80591): pid=7983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562121.032:80592): pid=8047 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562121.032:80593): pid=8047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562121.032:80594): pid=8047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562121.032:80595): pid=8047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562121.032:80596): pid=8047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562121.052:80597): pid=8049 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562121.052:80598): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562121.052:80599): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562121.082:80600): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562121.082:80601): pid=8049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562121.102:80602): pid=8066 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562121.102:80603): pid=8066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562121.102:80604): pid=8066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562121.102:80605): pid=8066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562121.102:80606): pid=8066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562131.322:80607): pid=8081 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562131.322:80608): pid=8081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562131.322:80609): pid=8081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562131.332:80610): pid=8081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562131.332:80611): pid=8081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562131.342:80612): pid=8083 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562131.342:80613): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562131.342:80614): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562131.362:80615): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562131.362:80616): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562131.382:80617): pid=8101 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562131.382:80618): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562131.382:80619): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562131.382:80620): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562131.382:80621): pid=8101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562172.492:80622): pid=8146 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562172.492:80623): pid=8146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562172.492:80624): pid=8146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562172.492:80625): pid=8146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562172.492:80626): pid=8146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562172.502:80627): pid=8148 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562172.502:80628): pid=8148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562172.502:80629): pid=8148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562172.532:80630): pid=8148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562172.532:80631): pid=8148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562172.552:80632): pid=8165 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562172.552:80633): pid=8165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562172.552:80634): pid=8165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562172.552:80635): pid=8165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562172.552:80636): pid=8165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562193.082:80637): pid=8190 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562193.082:80638): pid=8190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562193.082:80639): pid=8190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562193.082:80640): pid=8190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562193.082:80641): pid=8190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562193.092:80642): pid=8192 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562193.092:80643): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562193.092:80644): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562193.122:80645): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562193.122:80646): pid=8192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562193.132:80647): pid=8209 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562193.132:80648): pid=8209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562193.132:80649): pid=8209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562193.142:80650): pid=8209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562193.142:80651): pid=8209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562213.442:80652): pid=8231 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562213.442:80653): pid=8231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562213.442:80654): pid=8231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562213.442:80655): pid=8231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562213.442:80656): pid=8231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562213.452:80657): pid=8233 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562213.452:80658): pid=8233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562213.452:80659): pid=8233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562213.492:80660): pid=8233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562213.492:80661): pid=8233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562213.502:80662): pid=8251 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562213.502:80663): pid=8251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562213.502:80664): pid=8251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562213.512:80665): pid=8251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562213.512:80666): pid=8251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562223.882:80667): pid=8269 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562223.882:80668): pid=8269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562223.882:80669): pid=8269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562223.882:80670): pid=8269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562223.882:80671): pid=8269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562223.892:80672): pid=8271 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562223.892:80673): pid=8271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562223.892:80674): pid=8271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562223.922:80675): pid=8271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562223.922:80676): pid=8271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562223.942:80677): pid=8289 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562223.942:80678): pid=8289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562223.942:80679): pid=8289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562223.942:80680): pid=8289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562223.942:80681): pid=8289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562234.382:80682): pid=8309 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562234.382:80683): pid=8309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562234.392:80684): pid=8309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562234.392:80685): pid=8309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562234.392:80686): pid=8309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1390562234.412:80687): avc: denied { execute } for pid=8318 comm="glusterd" name="tune2fs" dev="dm-1" ino=2232948 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1390562234.412:80687): arch=80000015 syscall=11 success=no exit=-13 a0=10008bfdca8 a1=1fffe4020e50 a2=100087cd920 a3=6269 items=0 ppid=1126 pid=8318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_CMD msg=audit(1390562234.412:80688): pid=8314 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562234.412:80689): pid=8314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562234.412:80690): pid=8314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562234.472:80691): pid=8314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562234.472:80692): pid=8314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562234.492:80693): pid=8337 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562234.492:80694): pid=8337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562234.492:80695): pid=8337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562234.502:80696): pid=8337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562234.502:80697): pid=8337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562244.772:80698): pid=8355 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562244.772:80699): pid=8355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562244.772:80700): pid=8355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562244.782:80701): pid=8355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562244.782:80702): pid=8355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562244.802:80703): pid=8357 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562244.802:80704): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562244.802:80705): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562244.842:80706): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562244.842:80707): pid=8357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562244.862:80708): pid=8374 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390562244.862:80709): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562244.862:80710): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562244.872:80711): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562244.872:80712): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562265.462:80713): pid=8402 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562265.462:80714): pid=8402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562265.462:80715): pid=8402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562265.462:80716): pid=8402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562265.462:80717): pid=8402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562265.482:80718): pid=8404 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562265.482:80719): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562265.482:80720): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562265.532:80721): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562265.532:80722): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562265.552:80723): pid=8421 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562265.552:80724): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562265.562:80725): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562265.572:80726): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562265.572:80727): pid=8421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562286.292:80728): pid=8446 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562286.292:80729): pid=8446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562286.292:80730): pid=8446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562286.302:80731): pid=8446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562286.302:80732): pid=8446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562286.322:80733): pid=8448 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562286.322:80734): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562286.322:80735): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562286.362:80736): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562286.362:80737): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562286.392:80738): pid=8466 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562286.392:80739): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562286.392:80740): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562286.402:80741): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562286.402:80742): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562296.622:80743): pid=8482 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562296.622:80744): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562296.622:80745): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562296.622:80746): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562296.622:80747): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562296.632:80748): pid=8484 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562296.632:80749): pid=8484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562296.642:80750): pid=8484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562296.662:80751): pid=8484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562296.662:80752): pid=8484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562296.682:80753): pid=8503 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390562296.682:80754): pid=8503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562296.682:80755): pid=8503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562296.692:80756): pid=8503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562296.692:80757): pid=8503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562317.422:80758): pid=8526 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562317.422:80759): pid=8526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562317.422:80760): pid=8526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562317.422:80761): pid=8526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562317.422:80762): pid=8526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562317.432:80763): pid=8528 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562317.432:80764): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562317.432:80765): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562317.462:80766): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562317.462:80767): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562317.482:80768): pid=8546 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562317.482:80769): pid=8546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562317.482:80770): pid=8546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562317.492:80771): pid=8546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562317.492:80772): pid=8546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562337.982:80773): pid=8569 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562337.982:80774): pid=8569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562337.982:80775): pid=8569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562337.982:80776): pid=8569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562337.982:80777): pid=8569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562338.002:80778): pid=8571 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562338.002:80779): pid=8571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562338.002:80780): pid=8571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562338.022:80781): pid=8571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562338.022:80782): pid=8571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562338.042:80783): pid=8589 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390562338.042:80784): pid=8589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562338.042:80785): pid=8589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562338.042:80786): pid=8589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562338.042:80787): pid=8589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562368.682:80788): pid=8620 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562368.682:80789): pid=8620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562368.682:80790): pid=8620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562368.682:80791): pid=8620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562368.682:80792): pid=8620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562368.692:80793): pid=8622 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562368.702:80794): pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562368.702:80795): pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562368.732:80796): pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562368.732:80797): pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562368.742:80798): pid=8639 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562368.752:80799): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562368.752:80800): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562368.752:80801): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562368.752:80802): pid=8639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562399.322:80803): pid=8669 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562399.322:80804): pid=8669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562399.332:80805): pid=8669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562399.332:80806): pid=8669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562399.332:80807): pid=8669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562399.342:80808): pid=8671 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562399.342:80809): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562399.342:80810): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562399.372:80811): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562399.372:80812): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562399.392:80813): pid=8688 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562399.392:80814): pid=8688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562399.392:80815): pid=8688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562399.392:80816): pid=8688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562399.392:80817): pid=8688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562401.352:80818): pid=8698 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D7420676C757374657266732031302E31302E32372E36343A666373746F72616765202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A666373746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562401.352:80819): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562401.352:80820): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562401.402:80821): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562401.402:80822): pid=8698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562409.842:80823): pid=8755 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562409.842:80824): pid=8755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562409.842:80825): pid=8755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562409.842:80826): pid=8755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562409.842:80827): pid=8755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562409.852:80828): pid=8757 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562409.852:80829): pid=8757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562409.852:80830): pid=8757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562409.882:80831): pid=8757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562409.882:80832): pid=8757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562409.902:80833): pid=8774 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562409.902:80834): pid=8774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562409.902:80835): pid=8774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562409.902:80836): pid=8774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562409.902:80837): pid=8774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562420.632:80838): pid=8790 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562420.632:80839): pid=8790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562420.632:80840): pid=8790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562420.632:80841): pid=8790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562420.632:80842): pid=8790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562420.642:80843): pid=8792 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562420.642:80844): pid=8792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562420.642:80845): pid=8792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562420.672:80846): pid=8792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562420.672:80847): pid=8792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562420.682:80848): pid=8809 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562420.682:80849): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562420.682:80850): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562420.692:80851): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562420.692:80852): pid=8809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562430.952:80853): pid=8826 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562430.952:80854): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562430.952:80855): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562430.952:80856): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562430.952:80857): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562430.962:80858): pid=8828 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562430.962:80859): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562430.962:80860): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562430.992:80861): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562430.992:80862): pid=8828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562431.012:80863): pid=8846 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390562431.012:80864): pid=8846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562431.012:80865): pid=8846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562431.012:80866): pid=8846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562431.012:80867): pid=8846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562441.432:80868): pid=8863 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562441.432:80869): pid=8863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562441.432:80870): pid=8863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562441.442:80871): pid=8863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562441.442:80872): pid=8863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562441.452:80873): pid=8865 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562441.452:80874): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562441.452:80875): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562441.472:80876): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562441.472:80877): pid=8865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562441.492:80878): pid=8882 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562441.492:80879): pid=8882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562441.492:80880): pid=8882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562441.502:80881): pid=8882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562441.502:80882): pid=8882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562451.882:80883): pid=8899 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562451.882:80884): pid=8899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562451.882:80885): pid=8899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562451.882:80886): pid=8899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562451.882:80887): pid=8899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562451.892:80888): pid=8901 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562451.892:80889): pid=8901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562451.892:80890): pid=8901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562451.922:80891): pid=8901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562451.922:80892): pid=8901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562451.932:80893): pid=8918 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562451.932:80894): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562451.932:80895): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562451.942:80896): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562451.942:80897): pid=8918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562472.432:80898): pid=8941 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562472.432:80899): pid=8941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562472.432:80900): pid=8941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562472.432:80901): pid=8941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562472.432:80902): pid=8941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562472.442:80903): pid=8943 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562472.442:80904): pid=8943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562472.442:80905): pid=8943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562472.472:80906): pid=8943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562472.472:80907): pid=8943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562472.482:80908): pid=8960 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562472.482:80909): pid=8960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562472.482:80910): pid=8960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562472.492:80911): pid=8960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562472.492:80912): pid=8960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562482.712:80913): pid=8978 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562482.712:80914): pid=8978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562482.712:80915): pid=8978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562482.722:80916): pid=8978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562482.722:80917): pid=8978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562482.732:80918): pid=8980 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562482.732:80919): pid=8980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562482.732:80920): pid=8980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562482.772:80921): pid=8980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562482.772:80922): pid=8980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562482.782:80923): pid=8997 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562482.782:80924): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562482.782:80925): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562482.792:80926): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562482.792:80927): pid=8997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562493.022:80928): pid=9012 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562493.022:80929): pid=9012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562493.022:80930): pid=9012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562493.022:80931): pid=9012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562493.022:80932): pid=9012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562493.032:80933): pid=9014 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562493.032:80934): pid=9014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562493.032:80935): pid=9014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562493.072:80936): pid=9014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562493.072:80937): pid=9014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562493.092:80938): pid=9031 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562493.092:80939): pid=9031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562493.092:80940): pid=9031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562493.092:80941): pid=9031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562493.092:80942): pid=9031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562503.472:80943): pid=9053 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562503.472:80944): pid=9053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562503.472:80945): pid=9053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562503.472:80946): pid=9053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562503.472:80947): pid=9053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562503.482:80948): pid=9055 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562503.492:80949): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562503.492:80950): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562503.512:80951): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562503.512:80952): pid=9055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562503.522:80953): pid=9072 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390562503.522:80954): pid=9072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562503.522:80955): pid=9072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562503.532:80956): pid=9072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562503.532:80957): pid=9072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562534.282:80958): pid=9105 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562534.282:80959): pid=9105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562534.282:80960): pid=9105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562534.282:80961): pid=9105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562534.282:80962): pid=9105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562534.292:80963): pid=9107 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562534.302:80964): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562534.302:80965): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562534.322:80966): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562534.322:80967): pid=9107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562534.342:80968): pid=9124 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562534.342:80969): pid=9124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562534.342:80970): pid=9124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562534.342:80971): pid=9124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562534.342:80972): pid=9124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1390562535.292:80973): avc: denied { execute } for pid=9143 comm="glusterd" name="tune2fs" dev="dm-1" ino=2232948 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1390562535.292:80973): arch=80000015 syscall=11 success=no exit=-13 a0=10008bfdca8 a1=1fffe4021350 a2=100087cd920 a3=6269 items=0 ppid=1126 pid=9143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_CMD msg=audit(1390562544.622:80974): pid=9154 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562544.622:80975): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562544.622:80976): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562544.622:80977): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562544.622:80978): pid=9154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562544.642:80979): pid=9156 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562544.642:80980): pid=9156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562544.642:80981): pid=9156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562544.692:80982): pid=9156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562544.692:80983): pid=9156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562544.722:80984): pid=9173 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562544.722:80985): pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562544.722:80986): pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562544.732:80987): pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562544.732:80988): pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562565.092:80989): pid=9202 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562565.092:80990): pid=9202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562565.092:80991): pid=9202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562565.092:80992): pid=9202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562565.092:80993): pid=9202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562565.122:80994): pid=9205 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562565.122:80995): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562565.122:80996): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562565.162:80997): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562565.162:80998): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562565.192:80999): pid=9222 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562565.192:81000): pid=9222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562565.192:81001): pid=9222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562565.202:81002): pid=9222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562565.202:81003): pid=9222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562575.492:81004): pid=9238 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562575.492:81005): pid=9238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562575.492:81006): pid=9238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562575.492:81007): pid=9238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562575.492:81008): pid=9238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562575.512:81009): pid=9240 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562575.512:81010): pid=9240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562575.512:81011): pid=9240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562575.592:81012): pid=9240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562575.592:81013): pid=9240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562575.622:81014): pid=9257 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562575.622:81015): pid=9257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562575.622:81016): pid=9257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562575.632:81017): pid=9257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562575.632:81018): pid=9257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562585.932:81019): pid=9273 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562585.932:81020): pid=9273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562585.932:81021): pid=9273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562585.932:81022): pid=9273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562585.932:81023): pid=9273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562585.962:81024): pid=9275 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562585.962:81025): pid=9275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562585.962:81026): pid=9275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562586.002:81027): pid=9275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562586.002:81028): pid=9275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562586.022:81029): pid=9293 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390562586.022:81030): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562586.022:81031): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562586.032:81032): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562586.032:81033): pid=9293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562636.992:81034): pid=9338 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562636.992:81035): pid=9338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562636.992:81036): pid=9338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562636.992:81037): pid=9338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562636.992:81038): pid=9338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562637.012:81039): pid=9340 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562637.012:81040): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562637.012:81041): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562637.042:81042): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562637.042:81043): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562637.052:81044): pid=9357 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390562637.052:81045): pid=9357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562637.052:81046): pid=9357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562637.062:81047): pid=9357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562637.062:81048): pid=9357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562657.362:81049): pid=9380 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562657.362:81050): pid=9380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562657.362:81051): pid=9380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562657.362:81052): pid=9380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562657.362:81053): pid=9380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562657.372:81054): pid=9382 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562657.372:81055): pid=9382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562657.372:81056): pid=9382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562657.412:81057): pid=9382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562657.412:81058): pid=9382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562657.422:81059): pid=9399 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562657.422:81060): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562657.422:81061): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562657.432:81062): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562657.432:81063): pid=9399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562667.662:81064): pid=9415 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562667.662:81065): pid=9415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562667.662:81066): pid=9415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562667.672:81067): pid=9415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562667.672:81068): pid=9415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562667.682:81069): pid=9417 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562667.682:81070): pid=9417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562667.682:81071): pid=9417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562667.712:81072): pid=9417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562667.712:81073): pid=9417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562667.722:81074): pid=9434 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562667.722:81075): pid=9434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562667.732:81076): pid=9434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562667.732:81077): pid=9434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562667.732:81078): pid=9434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562678.112:81079): pid=9450 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562678.112:81080): pid=9450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562678.112:81081): pid=9450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562678.112:81082): pid=9450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562678.112:81083): pid=9450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562678.122:81084): pid=9452 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562678.122:81085): pid=9452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562678.122:81086): pid=9452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562678.152:81087): pid=9452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562678.152:81088): pid=9452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562678.172:81089): pid=9470 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562678.172:81090): pid=9470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562678.172:81091): pid=9470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562678.172:81092): pid=9470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562678.172:81093): pid=9470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562688.552:81094): pid=9487 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562688.552:81095): pid=9487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562688.552:81096): pid=9487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562688.552:81097): pid=9487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562688.552:81098): pid=9487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562688.562:81099): pid=9489 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562688.562:81100): pid=9489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562688.562:81101): pid=9489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562688.582:81102): pid=9489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562688.582:81103): pid=9489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562688.602:81104): pid=9506 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562688.602:81105): pid=9506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562688.602:81106): pid=9506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562688.612:81107): pid=9506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562688.612:81108): pid=9506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562699.002:81109): pid=9523 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562699.002:81110): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562699.002:81111): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562699.002:81112): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562699.002:81113): pid=9523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562699.012:81114): pid=9525 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562699.012:81115): pid=9525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562699.012:81116): pid=9525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562699.052:81117): pid=9525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562699.052:81118): pid=9525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562699.072:81119): pid=9542 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562699.072:81120): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562699.072:81121): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562699.072:81122): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562699.072:81123): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562701.352:81124): pid=9551 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D7420676C757374657266732031302E31302E32372E36343A666373746F72616765202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A666373746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562701.352:81125): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562701.352:81126): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562701.402:81127): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562701.402:81128): pid=9551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1390562701.742:81129): pid=9599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390562701.742:81130): pid=9599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390562701.742:81131): login pid=9599 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=83 >type=USER_START msg=audit(1390562701.752:81132): pid=9599 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390562701.752:81133): pid=9599 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390562701.762:81134): pid=9599 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390562701.762:81135): pid=9599 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1390562709.272:81136): pid=9611 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562709.272:81137): pid=9611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562709.272:81138): pid=9611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562709.272:81139): pid=9611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562709.272:81140): pid=9611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562709.282:81141): pid=9613 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562709.282:81142): pid=9613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562709.282:81143): pid=9613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562709.322:81144): pid=9613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562709.322:81145): pid=9613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562709.332:81146): pid=9630 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562709.332:81147): pid=9630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562709.332:81148): pid=9630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562709.342:81149): pid=9630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562709.342:81150): pid=9630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562730.152:81151): pid=9655 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562730.152:81152): pid=9655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562730.152:81153): pid=9655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562730.152:81154): pid=9655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562730.152:81155): pid=9655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562730.162:81156): pid=9657 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562730.162:81157): pid=9657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562730.162:81158): pid=9657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562730.192:81159): pid=9657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562730.192:81160): pid=9657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562730.212:81161): pid=9675 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562730.212:81162): pid=9675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562730.212:81163): pid=9675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562730.212:81164): pid=9675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562730.212:81165): pid=9675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562760.852:81166): pid=9705 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562760.852:81167): pid=9705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562760.852:81168): pid=9705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562760.852:81169): pid=9705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562760.852:81170): pid=9705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562760.862:81171): pid=9707 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562760.862:81172): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562760.862:81173): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562760.892:81174): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562760.892:81175): pid=9707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562760.912:81176): pid=9725 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562760.912:81177): pid=9725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562760.912:81178): pid=9725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562760.912:81179): pid=9725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562760.912:81180): pid=9725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562771.502:81181): pid=9741 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562771.502:81182): pid=9741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562771.502:81183): pid=9741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562771.502:81184): pid=9741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562771.502:81185): pid=9741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562771.512:81186): pid=9743 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562771.512:81187): pid=9743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562771.512:81188): pid=9743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562771.532:81189): pid=9743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562771.532:81190): pid=9743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562771.552:81191): pid=9760 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562771.552:81192): pid=9760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562771.552:81193): pid=9760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562771.562:81194): pid=9760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562771.562:81195): pid=9760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562792.042:81196): pid=9785 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562792.042:81197): pid=9785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562792.042:81198): pid=9785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562792.042:81199): pid=9785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562792.042:81200): pid=9785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562792.052:81201): pid=9787 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562792.052:81202): pid=9787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562792.052:81203): pid=9787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562792.082:81204): pid=9787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562792.082:81205): pid=9787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562792.102:81206): pid=9804 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562792.102:81207): pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562792.102:81208): pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562792.102:81209): pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562792.102:81210): pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562812.432:81211): pid=9828 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562812.432:81212): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562812.432:81213): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562812.432:81214): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562812.432:81215): pid=9828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562812.452:81216): pid=9830 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562812.452:81217): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562812.452:81218): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562812.472:81219): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562812.472:81220): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562812.492:81221): pid=9848 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562812.492:81222): pid=9848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562812.492:81223): pid=9848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562812.492:81224): pid=9848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562812.492:81225): pid=9848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1390562835.662:81226): avc: denied { execute } for pid=9883 comm="glusterd" name="tune2fs" dev="dm-1" ino=2232948 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1390562835.662:81226): arch=80000015 syscall=11 success=no exit=-13 a0=10008bfdca8 a1=1fffe4021850 a2=100087cd920 a3=6269 items=0 ppid=1126 pid=9883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_CMD msg=audit(1390562843.142:81227): pid=9891 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562843.142:81228): pid=9891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562843.152:81229): pid=9891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562843.152:81230): pid=9891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562843.152:81231): pid=9891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562843.162:81232): pid=9893 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562843.162:81233): pid=9893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562843.162:81234): pid=9893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562843.192:81235): pid=9893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562843.192:81236): pid=9893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562843.212:81237): pid=9910 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390562843.212:81238): pid=9910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562843.212:81239): pid=9910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562843.212:81240): pid=9910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562843.212:81241): pid=9910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562873.592:81242): pid=9940 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562873.592:81243): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562873.592:81244): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562873.602:81245): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562873.602:81246): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562873.622:81247): pid=9942 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562873.622:81248): pid=9942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562873.622:81249): pid=9942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562873.662:81250): pid=9942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562873.662:81251): pid=9942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562873.692:81252): pid=9959 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562873.692:81253): pid=9959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562873.692:81254): pid=9959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562873.702:81255): pid=9959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562873.702:81256): pid=9959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562894.212:81257): pid=9983 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562894.212:81258): pid=9983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562894.212:81259): pid=9983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562894.212:81260): pid=9983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562894.212:81261): pid=9983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562894.232:81262): pid=9985 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562894.232:81263): pid=9985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562894.232:81264): pid=9985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562894.272:81265): pid=9985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562894.272:81266): pid=9985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562894.302:81267): pid=10003 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562894.302:81268): pid=10003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562894.302:81269): pid=10003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562894.312:81270): pid=10003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562894.312:81271): pid=10003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562904.552:81272): pid=10019 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562904.552:81273): pid=10019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562904.552:81274): pid=10019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562904.552:81275): pid=10019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562904.552:81276): pid=10019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562904.572:81277): pid=10021 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562904.572:81278): pid=10021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562904.572:81279): pid=10021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562904.892:81280): pid=10021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562904.892:81281): pid=10021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562904.912:81282): pid=10038 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562904.912:81283): pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562904.912:81284): pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562904.922:81285): pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562904.922:81286): pid=10038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562935.732:81287): pid=10073 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562935.732:81288): pid=10073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562935.732:81289): pid=10073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562935.732:81290): pid=10073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562935.732:81291): pid=10073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562935.742:81292): pid=10075 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562935.742:81293): pid=10075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562935.742:81294): pid=10075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562935.782:81295): pid=10075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562935.782:81296): pid=10075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562935.802:81297): pid=10093 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562935.802:81298): pid=10093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562935.802:81299): pid=10093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562935.802:81300): pid=10093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562935.802:81301): pid=10093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562956.482:81302): pid=10118 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562956.482:81303): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562956.482:81304): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562956.482:81305): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562956.482:81306): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562956.492:81307): pid=10120 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562956.492:81308): pid=10120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562956.492:81309): pid=10120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562956.522:81310): pid=10120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562956.522:81311): pid=10120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562956.532:81312): pid=10138 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562956.532:81313): pid=10138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562956.532:81314): pid=10138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562956.542:81315): pid=10138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562956.542:81316): pid=10138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562966.762:81317): pid=10154 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562966.762:81318): pid=10154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562966.762:81319): pid=10154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562966.762:81320): pid=10154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562966.762:81321): pid=10154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562966.772:81322): pid=10156 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562966.782:81323): pid=10156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562966.782:81324): pid=10156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562966.802:81325): pid=10156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562966.802:81326): pid=10156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562966.812:81327): pid=10173 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562966.812:81328): pid=10173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562966.812:81329): pid=10173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562966.822:81330): pid=10173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562966.822:81331): pid=10173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562977.252:81332): pid=10190 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562977.252:81333): pid=10190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562977.252:81334): pid=10190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562977.252:81335): pid=10190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562977.252:81336): pid=10190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562977.272:81337): pid=10192 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562977.272:81338): pid=10192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562977.272:81339): pid=10192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562977.292:81340): pid=10192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562977.292:81341): pid=10192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562977.312:81342): pid=10209 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562977.312:81343): pid=10209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562977.312:81344): pid=10209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562977.312:81345): pid=10209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562977.312:81346): pid=10209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562998.242:81347): pid=10232 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562998.242:81348): pid=10232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562998.242:81349): pid=10232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562998.242:81350): pid=10232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562998.242:81351): pid=10232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562998.252:81352): pid=10234 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390562998.252:81353): pid=10234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562998.252:81354): pid=10234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562998.282:81355): pid=10234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562998.282:81356): pid=10234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390562998.302:81357): pid=10251 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390562998.302:81358): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390562998.302:81359): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390562998.302:81360): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390562998.302:81361): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563001.362:81362): pid=10262 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D7420676C757374657266732031302E31302E32372E36343A666373746F72616765202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A666373746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563001.362:81363): pid=10262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563001.362:81364): pid=10262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563001.412:81365): pid=10262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563001.412:81366): pid=10262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563008.532:81367): pid=10317 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563008.532:81368): pid=10317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563008.532:81369): pid=10317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563008.532:81370): pid=10317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563008.532:81371): pid=10317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563008.542:81372): pid=10319 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563008.542:81373): pid=10319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563008.542:81374): pid=10319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563008.572:81375): pid=10319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563008.572:81376): pid=10319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563008.592:81377): pid=10336 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390563008.592:81378): pid=10336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563008.592:81379): pid=10336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563008.602:81380): pid=10336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563008.602:81381): pid=10336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563029.192:81382): pid=10360 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563029.192:81383): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563029.192:81384): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563029.192:81385): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563029.192:81386): pid=10360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563029.202:81387): pid=10362 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563029.202:81388): pid=10362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563029.202:81389): pid=10362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563029.232:81390): pid=10362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563029.232:81391): pid=10362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563029.252:81392): pid=10379 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563029.252:81393): pid=10379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563029.252:81394): pid=10379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563029.252:81395): pid=10379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563029.252:81396): pid=10379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563039.482:81397): pid=10401 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563039.482:81398): pid=10401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563039.482:81399): pid=10401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563039.482:81400): pid=10401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563039.482:81401): pid=10401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563039.492:81402): pid=10403 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563039.492:81403): pid=10403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563039.492:81404): pid=10403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563039.522:81405): pid=10403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563039.522:81406): pid=10403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563039.542:81407): pid=10420 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390563039.542:81408): pid=10420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563039.542:81409): pid=10420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563039.542:81410): pid=10420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563039.542:81411): pid=10420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563050.162:81412): pid=10437 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563050.162:81413): pid=10437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563050.162:81414): pid=10437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563050.162:81415): pid=10437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563050.162:81416): pid=10437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563050.182:81417): pid=10439 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563050.182:81418): pid=10439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563050.182:81419): pid=10439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563050.212:81420): pid=10439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563050.212:81421): pid=10439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563050.222:81422): pid=10456 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390563050.222:81423): pid=10456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563050.222:81424): pid=10456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563050.232:81425): pid=10456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563050.232:81426): pid=10456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563060.442:81427): pid=10471 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563060.442:81428): pid=10471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563060.442:81429): pid=10471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563060.442:81430): pid=10471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563060.442:81431): pid=10471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563060.452:81432): pid=10473 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563060.452:81433): pid=10473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563060.452:81434): pid=10473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563060.482:81435): pid=10473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563060.482:81436): pid=10473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563060.502:81437): pid=10490 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563060.502:81438): pid=10490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563060.502:81439): pid=10490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563060.502:81440): pid=10490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563060.502:81441): pid=10490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563081.002:81442): pid=10515 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563081.002:81443): pid=10515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563081.002:81444): pid=10515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563081.002:81445): pid=10515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563081.002:81446): pid=10515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563081.012:81447): pid=10517 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563081.012:81448): pid=10517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563081.012:81449): pid=10517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563081.032:81450): pid=10517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563081.032:81451): pid=10517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563081.052:81452): pid=10535 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563081.052:81453): pid=10535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563081.052:81454): pid=10535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563081.062:81455): pid=10535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563081.062:81456): pid=10535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563111.702:81457): pid=10565 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563111.702:81458): pid=10565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563111.702:81459): pid=10565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563111.702:81460): pid=10565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563111.702:81461): pid=10565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563111.712:81462): pid=10567 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563111.712:81463): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563111.712:81464): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563111.742:81465): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563111.742:81466): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563111.752:81467): pid=10586 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563111.752:81468): pid=10586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563111.762:81469): pid=10586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563111.762:81470): pid=10586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563111.762:81471): pid=10586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1390563135.932:81472): avc: denied { execute } for pid=10622 comm="glusterd" name="tune2fs" dev="dm-1" ino=2232948 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1390563135.932:81472): arch=80000015 syscall=11 success=no exit=-13 a0=10008bfdca8 a1=1ffff001d640 a2=100087cd920 a3=6269 items=0 ppid=1126 pid=10622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_CMD msg=audit(1390563142.402:81473): pid=10631 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563142.402:81474): pid=10631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563142.402:81475): pid=10631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563142.402:81476): pid=10631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563142.402:81477): pid=10631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563142.412:81478): pid=10633 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563142.412:81479): pid=10633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563142.412:81480): pid=10633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563142.442:81481): pid=10633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563142.442:81482): pid=10633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563142.452:81483): pid=10650 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563142.452:81484): pid=10650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563142.452:81485): pid=10650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563142.462:81486): pid=10650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563142.462:81487): pid=10650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563153.062:81488): pid=10665 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563153.062:81489): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563153.072:81490): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563153.072:81491): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563153.072:81492): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563153.082:81493): pid=10667 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563153.082:81494): pid=10667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563153.082:81495): pid=10667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563153.112:81496): pid=10667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563153.112:81497): pid=10667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563153.122:81498): pid=10686 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563153.122:81499): pid=10686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563153.122:81500): pid=10686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563153.132:81501): pid=10686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563153.132:81502): pid=10686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563163.522:81503): pid=10709 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563163.522:81504): pid=10709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563163.522:81505): pid=10709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563163.522:81506): pid=10709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563163.522:81507): pid=10709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563163.542:81508): pid=10711 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563163.542:81509): pid=10711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563163.542:81510): pid=10711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563163.592:81511): pid=10711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563163.592:81512): pid=10711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563163.612:81513): pid=10729 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563163.612:81514): pid=10729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563163.622:81515): pid=10729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563163.632:81516): pid=10729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563163.632:81517): pid=10729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563174.052:81518): pid=10745 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563174.052:81519): pid=10745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563174.052:81520): pid=10745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563174.062:81521): pid=10745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563174.062:81522): pid=10745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563174.082:81523): pid=10747 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563174.082:81524): pid=10747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563174.082:81525): pid=10747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563174.122:81526): pid=10747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563174.122:81527): pid=10747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563174.152:81528): pid=10764 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563174.152:81529): pid=10764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563174.152:81530): pid=10764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563174.162:81531): pid=10764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563174.162:81532): pid=10764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563184.602:81533): pid=10783 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563184.602:81534): pid=10783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563184.602:81535): pid=10783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563184.602:81536): pid=10783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563184.602:81537): pid=10783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563184.622:81538): pid=10785 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563184.622:81539): pid=10785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563184.622:81540): pid=10785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563184.662:81541): pid=10785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563184.662:81542): pid=10785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563184.692:81543): pid=10802 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563184.692:81544): pid=10802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563184.692:81545): pid=10802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563184.702:81546): pid=10802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563184.702:81547): pid=10802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563215.513:81548): pid=10831 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563215.513:81549): pid=10831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563215.513:81550): pid=10831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563215.523:81551): pid=10831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563215.523:81552): pid=10831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563215.543:81553): pid=10833 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563215.543:81554): pid=10833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563215.543:81555): pid=10833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563215.783:81556): pid=10833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563215.783:81557): pid=10833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563215.803:81558): pid=10851 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563215.813:81559): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563215.813:81560): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563215.823:81561): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563215.823:81562): pid=10851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563277.283:81563): pid=10904 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563277.283:81564): pid=10904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563277.283:81565): pid=10904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563277.283:81566): pid=10904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563277.283:81567): pid=10904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563277.293:81568): pid=10906 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563277.293:81569): pid=10906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563277.293:81570): pid=10906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563277.323:81571): pid=10906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563277.323:81572): pid=10906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563277.333:81573): pid=10923 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390563277.333:81574): pid=10923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563277.333:81575): pid=10923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563277.343:81576): pid=10923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563277.343:81577): pid=10923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563287.933:81578): pid=10941 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563287.943:81579): pid=10941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563287.943:81580): pid=10941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563287.943:81581): pid=10941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563287.943:81582): pid=10941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563287.953:81583): pid=10943 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563287.953:81584): pid=10943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563287.953:81585): pid=10943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563287.983:81586): pid=10943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563287.983:81587): pid=10943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563287.993:81588): pid=10963 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563287.993:81589): pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563287.993:81590): pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563288.003:81591): pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563288.003:81592): pid=10963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563298.203:81593): pid=10979 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563298.203:81594): pid=10979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563298.203:81595): pid=10979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563298.203:81596): pid=10979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563298.203:81597): pid=10979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563298.223:81598): pid=10981 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563298.223:81599): pid=10981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563298.223:81600): pid=10981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563298.243:81601): pid=10981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563298.243:81602): pid=10981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563298.263:81603): pid=10998 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563298.263:81604): pid=10998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563298.263:81605): pid=10998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563298.263:81606): pid=10998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563298.263:81607): pid=10998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563302.383:81608): pid=11008 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D7420676C757374657266732031302E31302E32372E36343A666373746F72616765202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A666373746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563302.393:81609): pid=11008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563302.393:81610): pid=11008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563302.443:81611): pid=11008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563302.443:81612): pid=11008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563308.683:81613): pid=11065 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563308.683:81614): pid=11065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563308.683:81615): pid=11065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563308.683:81616): pid=11065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563308.683:81617): pid=11065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563308.693:81618): pid=11067 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563308.693:81619): pid=11067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563308.693:81620): pid=11067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563308.723:81621): pid=11067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563308.723:81622): pid=11067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563308.743:81623): pid=11084 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390563308.743:81624): pid=11084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563308.743:81625): pid=11084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563308.753:81626): pid=11084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563308.753:81627): pid=11084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563329.393:81628): pid=11107 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563329.393:81629): pid=11107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563329.393:81630): pid=11107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563329.403:81631): pid=11107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563329.403:81632): pid=11107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563329.413:81633): pid=11109 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563329.413:81634): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563329.413:81635): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563329.443:81636): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563329.443:81637): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563329.463:81638): pid=11126 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563329.463:81639): pid=11126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563329.463:81640): pid=11126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563329.473:81641): pid=11126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563329.473:81642): pid=11126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563350.353:81643): pid=11155 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563350.353:81644): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563350.353:81645): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563350.353:81646): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563350.353:81647): pid=11155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563350.363:81648): pid=11157 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563350.363:81649): pid=11157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563350.363:81650): pid=11157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563350.393:81651): pid=11157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563350.393:81652): pid=11157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563350.403:81653): pid=11174 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563350.403:81654): pid=11174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563350.403:81655): pid=11174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563350.413:81656): pid=11174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563350.413:81657): pid=11174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563360.793:81658): pid=11191 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563360.793:81659): pid=11191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563360.793:81660): pid=11191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563360.793:81661): pid=11191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563360.793:81662): pid=11191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563360.803:81663): pid=11193 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563360.803:81664): pid=11193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563360.803:81665): pid=11193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563360.833:81666): pid=11193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563360.833:81667): pid=11193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563360.853:81668): pid=11211 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563360.853:81669): pid=11211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563360.853:81670): pid=11211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563360.853:81671): pid=11211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563360.853:81672): pid=11211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563411.853:81673): pid=11260 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563411.853:81674): pid=11260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563411.853:81675): pid=11260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563411.853:81676): pid=11260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563411.853:81677): pid=11260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563411.863:81678): pid=11262 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563411.863:81679): pid=11262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563411.863:81680): pid=11262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563411.893:81681): pid=11262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563411.893:81682): pid=11262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563411.913:81683): pid=11280 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563411.913:81684): pid=11280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563411.913:81685): pid=11280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563411.913:81686): pid=11280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563411.913:81687): pid=11280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563432.433:81688): pid=11305 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563432.433:81689): pid=11305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563432.433:81690): pid=11305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563432.443:81691): pid=11305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563432.443:81692): pid=11305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563432.453:81693): pid=11307 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563432.453:81694): pid=11307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563432.453:81695): pid=11307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563432.483:81696): pid=11307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563432.483:81697): pid=11307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563432.493:81698): pid=11324 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563432.493:81699): pid=11324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563432.493:81700): pid=11324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563432.503:81701): pid=11324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563432.503:81702): pid=11324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1390563436.213:81703): avc: denied { execute } for pid=11346 comm="glusterd" name="tune2fs" dev="dm-1" ino=2232948 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1390563436.213:81703): arch=80000015 syscall=11 success=no exit=-13 a0=10008bfdca8 a1=1fffe4021d50 a2=100087cd920 a3=6269 items=0 ppid=1126 pid=11346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_CMD msg=audit(1390563442.713:81704): pid=11353 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563442.713:81705): pid=11353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563442.713:81706): pid=11353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563442.713:81707): pid=11353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563442.713:81708): pid=11353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563442.723:81709): pid=11355 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563442.723:81710): pid=11355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563442.723:81711): pid=11355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563442.753:81712): pid=11355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563442.753:81713): pid=11355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563442.763:81714): pid=11373 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563442.763:81715): pid=11373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563442.763:81716): pid=11373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563442.773:81717): pid=11373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563442.773:81718): pid=11373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563452.993:81719): pid=11390 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563452.993:81720): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563452.993:81721): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563452.993:81722): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563452.993:81723): pid=11390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563453.013:81724): pid=11392 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563453.013:81725): pid=11392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563453.013:81726): pid=11392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563453.033:81727): pid=11392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563453.033:81728): pid=11392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563453.043:81729): pid=11409 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563453.043:81730): pid=11409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563453.043:81731): pid=11409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563453.053:81732): pid=11409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563453.053:81733): pid=11409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563463.543:81734): pid=11433 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563463.543:81735): pid=11433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563463.543:81736): pid=11433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563463.543:81737): pid=11433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563463.543:81738): pid=11433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563463.553:81739): pid=11435 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563463.553:81740): pid=11435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563463.553:81741): pid=11435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563463.573:81742): pid=11435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563463.573:81743): pid=11435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563463.593:81744): pid=11452 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563463.593:81745): pid=11452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563463.593:81746): pid=11452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563463.603:81747): pid=11452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563463.603:81748): pid=11452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563483.913:81749): pid=11475 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563483.913:81750): pid=11475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563483.913:81751): pid=11475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563483.913:81752): pid=11475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563483.913:81753): pid=11475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563483.933:81754): pid=11477 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563483.933:81755): pid=11477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563483.933:81756): pid=11477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563483.973:81757): pid=11477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563483.973:81758): pid=11477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563484.003:81759): pid=11495 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390563484.003:81760): pid=11495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563484.003:81761): pid=11495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563484.013:81762): pid=11495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563484.013:81763): pid=11495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563545.113:81764): pid=11552 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563545.113:81765): pid=11552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563545.123:81766): pid=11552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563545.123:81767): pid=11552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563545.123:81768): pid=11552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563545.133:81769): pid=11554 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563545.133:81770): pid=11554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563545.133:81771): pid=11554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563545.163:81772): pid=11554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563545.163:81773): pid=11554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563545.173:81774): pid=11571 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563545.173:81775): pid=11571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563545.173:81776): pid=11571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563545.183:81777): pid=11571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563545.183:81778): pid=11571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563565.473:81779): pid=11595 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563565.473:81780): pid=11595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563565.473:81781): pid=11595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563565.473:81782): pid=11595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563565.473:81783): pid=11595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563565.483:81784): pid=11597 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563565.483:81785): pid=11597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563565.483:81786): pid=11597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563565.513:81787): pid=11597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563565.513:81788): pid=11597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563565.523:81789): pid=11615 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563565.523:81790): pid=11615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563565.523:81791): pid=11615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563565.533:81792): pid=11615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563565.533:81793): pid=11615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563575.753:81794): pid=11629 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563575.753:81795): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563575.753:81796): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563575.753:81797): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563575.753:81798): pid=11629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563575.763:81799): pid=11631 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563575.763:81800): pid=11631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563575.763:81801): pid=11631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563575.793:81802): pid=11631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563575.793:81803): pid=11631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563575.803:81804): pid=11649 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563575.803:81805): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563575.803:81806): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563575.813:81807): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563575.813:81808): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563586.193:81809): pid=11673 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563586.193:81810): pid=11673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563586.193:81811): pid=11673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563586.193:81812): pid=11673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563586.193:81813): pid=11673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563586.203:81814): pid=11675 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563586.203:81815): pid=11675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563586.203:81816): pid=11675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563586.233:81817): pid=11675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563586.233:81818): pid=11675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563586.253:81819): pid=11692 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563586.253:81820): pid=11692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563586.253:81821): pid=11692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563586.253:81822): pid=11692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563586.253:81823): pid=11692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1390563601.773:81824): pid=11710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390563601.773:81825): pid=11710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390563601.783:81826): login pid=11710 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=84 >type=USER_START msg=audit(1390563601.783:81827): pid=11710 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390563601.783:81828): pid=11710 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390563601.793:81829): pid=11710 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390563601.793:81830): pid=11710 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1390563602.203:81831): pid=11716 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D7420676C757374657266732031302E31302E32372E36343A666373746F72616765202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A666373746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563602.203:81832): pid=11716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563602.203:81833): pid=11716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563602.263:81834): pid=11716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563602.263:81835): pid=11716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563637.393:81836): pid=11791 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563637.393:81837): pid=11791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563637.393:81838): pid=11791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563637.393:81839): pid=11791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563637.393:81840): pid=11791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563637.403:81841): pid=11793 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563637.403:81842): pid=11793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563637.403:81843): pid=11793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563637.433:81844): pid=11793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563637.433:81845): pid=11793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563637.453:81846): pid=11811 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563637.453:81847): pid=11811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563637.453:81848): pid=11811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563637.463:81849): pid=11811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563637.463:81850): pid=11811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563658.003:81851): pid=11841 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563658.003:81852): pid=11841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563658.003:81853): pid=11841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563658.013:81854): pid=11841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563658.013:81855): pid=11841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563658.023:81856): pid=11843 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563658.023:81857): pid=11843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563658.023:81858): pid=11843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563658.053:81859): pid=11843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563658.053:81860): pid=11843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563658.073:81861): pid=11861 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563658.073:81862): pid=11861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563658.073:81863): pid=11861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563658.073:81864): pid=11861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563658.073:81865): pid=11861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563668.473:81866): pid=11876 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563668.473:81867): pid=11876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563668.473:81868): pid=11876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563668.483:81869): pid=11876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563668.483:81870): pid=11876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563668.493:81871): pid=11878 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563668.493:81872): pid=11878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563668.493:81873): pid=11878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563668.523:81874): pid=11878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563668.523:81875): pid=11878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563668.533:81876): pid=11895 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390563668.533:81877): pid=11895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563668.533:81878): pid=11895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563668.543:81879): pid=11895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563668.543:81880): pid=11895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563678.933:81881): pid=11913 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563678.933:81882): pid=11913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563678.933:81883): pid=11913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563678.933:81884): pid=11913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563678.933:81885): pid=11913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563678.943:81886): pid=11916 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563678.953:81887): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563678.953:81888): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563678.973:81889): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563678.973:81890): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563678.993:81891): pid=11933 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563678.993:81892): pid=11933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563678.993:81893): pid=11933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563678.993:81894): pid=11933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563678.993:81895): pid=11933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1390563736.473:81896): avc: denied { execute } for pid=11998 comm="glusterd" name="tune2fs" dev="dm-1" ino=2232948 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1390563736.473:81896): arch=80000015 syscall=11 success=no exit=-13 a0=10008bfdca8 a1=1fffe4022250 a2=100087cd920 a3=6269 items=0 ppid=1126 pid=11998 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_CMD msg=audit(1390563740.053:81897): pid=12004 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563740.053:81898): pid=12004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563740.053:81899): pid=12004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563740.053:81900): pid=12004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563740.053:81901): pid=12004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563740.073:81902): pid=12006 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563740.073:81903): pid=12006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563740.073:81904): pid=12006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563740.103:81905): pid=12006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563740.103:81906): pid=12006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563740.113:81907): pid=12023 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563740.113:81908): pid=12023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563740.113:81909): pid=12023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563740.123:81910): pid=12023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563740.123:81911): pid=12023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563760.643:81912): pid=12053 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563760.643:81913): pid=12053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563760.643:81914): pid=12053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563760.643:81915): pid=12053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563760.643:81916): pid=12053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563760.653:81917): pid=12055 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563760.653:81918): pid=12055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563760.653:81919): pid=12055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563760.683:81920): pid=12055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563760.683:81921): pid=12055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563760.693:81922): pid=12072 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563760.693:81923): pid=12072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563760.693:81924): pid=12072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563760.703:81925): pid=12072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563760.703:81926): pid=12072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563771.123:81927): pid=12088 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563771.123:81928): pid=12088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563771.123:81929): pid=12088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563771.123:81930): pid=12088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563771.123:81931): pid=12088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563771.133:81932): pid=12090 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563771.133:81933): pid=12090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563771.133:81934): pid=12090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563771.183:81935): pid=12090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563771.183:81936): pid=12090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563771.193:81937): pid=12107 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563771.193:81938): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563771.193:81939): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563771.203:81940): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563771.203:81941): pid=12107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563791.723:81942): pid=12131 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563791.723:81943): pid=12131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563791.723:81944): pid=12131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563791.723:81945): pid=12131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563791.723:81946): pid=12131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563791.743:81947): pid=12133 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563791.743:81948): pid=12133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563791.743:81949): pid=12133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563791.793:81950): pid=12133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563791.793:81951): pid=12133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563791.813:81952): pid=12151 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563791.813:81953): pid=12151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563791.823:81954): pid=12151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563791.833:81955): pid=12151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563791.833:81956): pid=12151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563802.273:81957): pid=12167 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563802.273:81958): pid=12167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563802.273:81959): pid=12167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563802.283:81960): pid=12167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563802.283:81961): pid=12167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563802.303:81962): pid=12169 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563802.303:81963): pid=12169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563802.303:81964): pid=12169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563802.333:81965): pid=12169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563802.333:81966): pid=12169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563802.363:81967): pid=12186 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390563802.363:81968): pid=12186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563802.363:81969): pid=12186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563802.373:81970): pid=12186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563802.373:81971): pid=12186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563822.923:81972): pid=12209 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563822.923:81973): pid=12209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563822.923:81974): pid=12209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563822.923:81975): pid=12209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563822.923:81976): pid=12209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563822.943:81977): pid=12211 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563822.943:81978): pid=12211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563822.943:81979): pid=12211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563822.993:81980): pid=12211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563822.993:81981): pid=12211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563823.013:81982): pid=12228 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563823.013:81983): pid=12228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563823.013:81984): pid=12228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563823.023:81985): pid=12228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563823.023:81986): pid=12228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563863.923:81987): pid=12266 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563863.933:81988): pid=12266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563863.933:81989): pid=12266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563863.933:81990): pid=12266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563863.933:81991): pid=12266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563863.943:81992): pid=12268 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563863.943:81993): pid=12268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563863.943:81994): pid=12268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563863.973:81995): pid=12268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563863.973:81996): pid=12268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563863.983:81997): pid=12285 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563863.983:81998): pid=12285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563863.983:81999): pid=12285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563863.993:82000): pid=12285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563863.993:82001): pid=12285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563884.313:82002): pid=12315 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563884.313:82003): pid=12315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563884.323:82004): pid=12315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563884.323:82005): pid=12315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563884.323:82006): pid=12315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563884.333:82007): pid=12317 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563884.333:82008): pid=12317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563884.333:82009): pid=12317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563884.363:82010): pid=12317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563884.363:82011): pid=12317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563884.373:82012): pid=12334 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563884.373:82013): pid=12334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563884.373:82014): pid=12334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563884.383:82015): pid=12334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563884.383:82016): pid=12334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563902.133:82017): pid=12356 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D7420676C757374657266732031302E31302E32372E36343A666373746F72616765202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A666373746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563902.133:82018): pid=12356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563902.133:82019): pid=12356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563902.183:82020): pid=12356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563902.183:82021): pid=12356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563905.043:82022): pid=12408 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563905.053:82023): pid=12408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563905.053:82024): pid=12408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563905.053:82025): pid=12408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563905.053:82026): pid=12408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563905.063:82027): pid=12410 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563905.063:82028): pid=12410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563905.063:82029): pid=12410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563905.093:82030): pid=12410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563905.093:82031): pid=12410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563905.113:82032): pid=12427 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563905.113:82033): pid=12427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563905.113:82034): pid=12427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563905.113:82035): pid=12427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563905.113:82036): pid=12427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563925.523:82037): pid=12450 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563925.523:82038): pid=12450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563925.523:82039): pid=12450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563925.523:82040): pid=12450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563925.523:82041): pid=12450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563925.533:82042): pid=12452 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563925.533:82043): pid=12452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563925.533:82044): pid=12452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563925.563:82045): pid=12452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563925.563:82046): pid=12452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563925.573:82047): pid=12470 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563925.573:82048): pid=12470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563925.573:82049): pid=12470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563925.583:82050): pid=12470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563925.583:82051): pid=12470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563996.853:82052): pid=12529 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563996.853:82053): pid=12529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563996.853:82054): pid=12529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563996.853:82055): pid=12529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563996.853:82056): pid=12529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563996.863:82057): pid=12531 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390563996.863:82058): pid=12531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563996.863:82059): pid=12531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563996.893:82060): pid=12531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563996.893:82061): pid=12531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390563996.913:82062): pid=12548 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390563996.913:82063): pid=12548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390563996.913:82064): pid=12548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390563996.913:82065): pid=12548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390563996.913:82066): pid=12548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564007.333:82067): pid=12565 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564007.333:82068): pid=12565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564007.333:82069): pid=12565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564007.333:82070): pid=12565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564007.333:82071): pid=12565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564007.343:82072): pid=12568 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564007.343:82073): pid=12568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564007.343:82074): pid=12568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564007.373:82075): pid=12568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564007.373:82076): pid=12568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564007.383:82077): pid=12586 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564007.383:82078): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564007.383:82079): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564007.393:82080): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564007.393:82081): pid=12586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1390564036.753:82082): avc: denied { execute } for pid=12623 comm="glusterd" name="tune2fs" dev="dm-1" ino=2232948 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1390564036.753:82082): arch=80000015 syscall=11 success=no exit=-13 a0=10008bfdca8 a1=1ffff001da90 a2=100087cd920 a3=6269 items=0 ppid=1126 pid=12623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_CMD msg=audit(1390564048.323:82083): pid=12635 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564048.323:82084): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564048.323:82085): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564048.323:82086): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564048.323:82087): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564048.333:82088): pid=12637 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564048.333:82089): pid=12637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564048.333:82090): pid=12637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564048.373:82091): pid=12637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564048.373:82092): pid=12637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564048.383:82093): pid=12655 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564048.383:82094): pid=12655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564048.383:82095): pid=12655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564048.393:82096): pid=12655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564048.393:82097): pid=12655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564088.853:82098): pid=12700 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564088.853:82099): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564088.863:82100): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564088.863:82101): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564088.863:82102): pid=12700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564088.873:82103): pid=12702 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564088.873:82104): pid=12702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564088.873:82105): pid=12702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564088.903:82106): pid=12702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564088.903:82107): pid=12702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564088.913:82108): pid=12720 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564088.913:82109): pid=12720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564088.913:82110): pid=12720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564088.923:82111): pid=12720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564088.923:82112): pid=12720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564139.853:82113): pid=12771 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564139.853:82114): pid=12771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564139.853:82115): pid=12771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564139.853:82116): pid=12771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564139.853:82117): pid=12771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564139.873:82118): pid=12773 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564139.873:82119): pid=12773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564139.883:82120): pid=12773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564139.923:82121): pid=12773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564139.923:82122): pid=12773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564139.943:82123): pid=12790 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390564139.943:82124): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564139.943:82125): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564139.953:82126): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564139.953:82127): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564160.473:82128): pid=12815 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564160.473:82129): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564160.473:82130): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564160.473:82131): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564160.473:82132): pid=12815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564160.483:82133): pid=12817 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564160.483:82134): pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564160.483:82135): pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564160.513:82136): pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564160.513:82137): pid=12817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564160.523:82138): pid=12835 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564160.523:82139): pid=12835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564160.523:82140): pid=12835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564160.533:82141): pid=12835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564160.533:82142): pid=12835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564180.973:82143): pid=12858 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564180.973:82144): pid=12858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564180.973:82145): pid=12858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564180.983:82146): pid=12858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564180.983:82147): pid=12858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564180.993:82148): pid=12860 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564180.993:82149): pid=12860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564180.993:82150): pid=12860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564181.023:82151): pid=12860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564181.023:82152): pid=12860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564181.033:82153): pid=12877 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564181.033:82154): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564181.033:82155): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564181.043:82156): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564181.043:82157): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564191.453:82158): pid=12901 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564191.453:82159): pid=12901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564191.453:82160): pid=12901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564191.453:82161): pid=12901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564191.453:82162): pid=12901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564191.463:82163): pid=12903 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564191.463:82164): pid=12903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564191.473:82165): pid=12903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564191.493:82166): pid=12903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564191.493:82167): pid=12903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564191.503:82168): pid=12920 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564191.503:82169): pid=12920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564191.503:82170): pid=12920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564191.513:82171): pid=12920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564191.513:82172): pid=12920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564201.893:82173): pid=12935 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564201.893:82174): pid=12935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564201.893:82175): pid=12935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564201.903:82176): pid=12935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564201.903:82177): pid=12935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564201.913:82178): pid=12937 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564201.913:82179): pid=12937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564201.913:82180): pid=12937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564201.933:82181): pid=12937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564201.933:82182): pid=12937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564201.953:82183): pid=12955 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564201.953:82184): pid=12955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564201.953:82185): pid=12955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564201.953:82186): pid=12955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564201.953:82187): pid=12955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564202.163:82188): pid=12964 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D7420676C757374657266732031302E31302E32372E36343A666373746F72616765202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A666373746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564202.163:82189): pid=12964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564202.163:82190): pid=12964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564202.213:82191): pid=12964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564202.213:82192): pid=12964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564212.663:82193): pid=13023 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564212.663:82194): pid=13023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564212.663:82195): pid=13023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564212.673:82196): pid=13023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564212.673:82197): pid=13023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564212.683:82198): pid=13025 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564212.683:82199): pid=13025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564212.683:82200): pid=13025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564212.713:82201): pid=13025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564212.713:82202): pid=13025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564212.723:82203): pid=13042 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564212.723:82204): pid=13042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564212.723:82205): pid=13042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564212.733:82206): pid=13042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564212.733:82207): pid=13042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564273.973:82208): pid=13099 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564273.973:82209): pid=13099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564273.973:82210): pid=13099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564273.983:82211): pid=13099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564273.983:82212): pid=13099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564273.993:82213): pid=13101 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564273.993:82214): pid=13101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564273.993:82215): pid=13101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564274.013:82216): pid=13101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564274.013:82217): pid=13101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564274.033:82218): pid=13119 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564274.033:82219): pid=13119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564274.033:82220): pid=13119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564274.043:82221): pid=13119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564274.043:82222): pid=13119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564284.253:82223): pid=13135 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564284.253:82224): pid=13135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564284.253:82225): pid=13135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564284.253:82226): pid=13135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564284.253:82227): pid=13135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564284.263:82228): pid=13137 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564284.263:82229): pid=13137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564284.263:82230): pid=13137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564284.293:82231): pid=13137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564284.293:82232): pid=13137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564284.303:82233): pid=13154 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564284.303:82234): pid=13154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564284.303:82235): pid=13154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564284.313:82236): pid=13154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564284.313:82237): pid=13154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564304.993:82238): pid=13183 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564304.993:82239): pid=13183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564304.993:82240): pid=13183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564304.993:82241): pid=13183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564304.993:82242): pid=13183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564305.003:82243): pid=13185 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564305.003:82244): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564305.013:82245): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564305.033:82246): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564305.033:82247): pid=13185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564305.053:82248): pid=13202 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390564305.053:82249): pid=13202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564305.053:82250): pid=13202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564305.053:82251): pid=13202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564305.053:82252): pid=13202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1390564337.053:82253): avc: denied { execute } for pid=13232 comm="glusterd" name="tune2fs" dev="dm-1" ino=2232948 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1390564337.053:82253): arch=80000015 syscall=11 success=no exit=-13 a0=10008bfecd8 a1=1fffe4022750 a2=100087cd920 a3=6269 items=0 ppid=1126 pid=13232 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_CMD msg=audit(1390564355.773:82254): pid=13248 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564355.773:82255): pid=13248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564355.773:82256): pid=13248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564355.783:82257): pid=13248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564355.783:82258): pid=13248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564355.793:82259): pid=13250 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564355.793:82260): pid=13250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564355.793:82261): pid=13250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564355.823:82262): pid=13250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564355.823:82263): pid=13250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564355.833:82264): pid=13267 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564355.833:82265): pid=13267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564355.833:82266): pid=13267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564355.843:82267): pid=13267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564355.843:82268): pid=13267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564396.703:82269): pid=13310 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564396.703:82270): pid=13310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564396.703:82271): pid=13310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564396.703:82272): pid=13310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564396.703:82273): pid=13310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564396.723:82274): pid=13312 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564396.723:82275): pid=13312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564396.723:82276): pid=13312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564396.743:82277): pid=13312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564396.743:82278): pid=13312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564396.763:82279): pid=13329 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564396.763:82280): pid=13329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564396.763:82281): pid=13329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564396.763:82282): pid=13329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564396.763:82283): pid=13329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564437.643:82284): pid=13369 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564437.643:82285): pid=13369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564437.643:82286): pid=13369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564437.643:82287): pid=13369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564437.643:82288): pid=13369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564437.663:82289): pid=13371 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564437.663:82290): pid=13371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564437.673:82291): pid=13371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564437.713:82292): pid=13371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564437.713:82293): pid=13371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564437.733:82294): pid=13388 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564437.733:82295): pid=13388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564437.733:82296): pid=13388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564437.743:82297): pid=13388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564437.743:82298): pid=13388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564447.993:82299): pid=13403 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564447.993:82300): pid=13403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564447.993:82301): pid=13403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564447.993:82302): pid=13403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564447.993:82303): pid=13403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564448.013:82304): pid=13405 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564448.013:82305): pid=13405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564448.013:82306): pid=13405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564448.063:82307): pid=13405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564448.063:82308): pid=13405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564448.083:82309): pid=13423 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564448.083:82310): pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564448.083:82311): pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564448.093:82312): pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564448.093:82313): pid=13423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564458.463:82314): pid=13439 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564458.463:82315): pid=13439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564458.463:82316): pid=13439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564458.473:82317): pid=13439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564458.473:82318): pid=13439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564458.493:82319): pid=13441 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564458.493:82320): pid=13441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564458.493:82321): pid=13441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564458.733:82322): pid=13441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564458.733:82323): pid=13441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564458.753:82324): pid=13460 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564458.753:82325): pid=13460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564458.753:82326): pid=13460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564458.763:82327): pid=13460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564458.763:82328): pid=13460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564469.013:82329): pid=13478 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564469.013:82330): pid=13478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564469.013:82331): pid=13478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564469.023:82332): pid=13478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564469.023:82333): pid=13478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564469.033:82334): pid=13480 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564469.033:82335): pid=13480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564469.033:82336): pid=13480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564469.063:82337): pid=13480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564469.063:82338): pid=13480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564469.083:82339): pid=13497 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564469.083:82340): pid=13497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564469.083:82341): pid=13497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564469.093:82342): pid=13497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564469.093:82343): pid=13497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564479.313:82344): pid=13512 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564479.313:82345): pid=13512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564479.313:82346): pid=13512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564479.313:82347): pid=13512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564479.313:82348): pid=13512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564479.323:82349): pid=13514 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564479.323:82350): pid=13514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564479.323:82351): pid=13514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564479.353:82352): pid=13514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564479.353:82353): pid=13514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564479.373:82354): pid=13531 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564479.373:82355): pid=13531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564479.373:82356): pid=13531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564479.383:82357): pid=13531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564479.383:82358): pid=13531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1390564501.813:82359): pid=13561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390564501.813:82360): pid=13561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390564501.813:82361): login pid=13561 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=85 >type=USER_START msg=audit(1390564501.813:82362): pid=13561 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390564501.813:82363): pid=13561 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390564501.823:82364): pid=13561 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390564501.823:82365): pid=13561 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1390564561.623:82366): pid=13609 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564561.623:82367): pid=13609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564561.623:82368): pid=13609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564561.633:82369): pid=13609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564561.633:82370): pid=13609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564561.643:82371): pid=13611 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564561.643:82372): pid=13611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564561.643:82373): pid=13611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564561.673:82374): pid=13611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564561.673:82375): pid=13611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564561.683:82376): pid=13628 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390564561.683:82377): pid=13628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564561.683:82378): pid=13628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564561.693:82379): pid=13628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564561.693:82380): pid=13628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564562.153:82381): pid=13642 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D7420676C757374657266732031302E31302E32372E36343A666373746F72616765202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A666373746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564562.153:82382): pid=13642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564562.153:82383): pid=13642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564562.203:82384): pid=13642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564562.203:82385): pid=13642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564592.353:82386): pid=13713 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564592.353:82387): pid=13713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564592.353:82388): pid=13713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564592.363:82389): pid=13713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564592.363:82390): pid=13713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564592.373:82391): pid=13715 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564592.373:82392): pid=13715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564592.373:82393): pid=13715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564592.403:82394): pid=13715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564592.403:82395): pid=13715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564592.413:82396): pid=13732 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564592.413:82397): pid=13732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564592.413:82398): pid=13732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564592.423:82399): pid=13732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564592.423:82400): pid=13732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564602.653:82401): pid=13747 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564602.653:82402): pid=13747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564602.653:82403): pid=13747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564602.663:82404): pid=13747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564602.663:82405): pid=13747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564602.673:82406): pid=13749 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564602.673:82407): pid=13749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564602.673:82408): pid=13749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564602.693:82409): pid=13749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564602.693:82410): pid=13749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564602.713:82411): pid=13766 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564602.713:82412): pid=13766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564602.713:82413): pid=13766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564602.723:82414): pid=13766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564602.723:82415): pid=13766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564613.123:82416): pid=13782 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564613.123:82417): pid=13782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564613.123:82418): pid=13782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564613.123:82419): pid=13782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564613.123:82420): pid=13782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564613.133:82421): pid=13784 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564613.133:82422): pid=13784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564613.133:82423): pid=13784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564613.163:82424): pid=13784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564613.163:82425): pid=13784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564613.173:82426): pid=13802 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390564613.173:82427): pid=13802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564613.173:82428): pid=13802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564613.183:82429): pid=13802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564613.183:82430): pid=13802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564623.593:82431): pid=13826 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564623.593:82432): pid=13826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564623.593:82433): pid=13826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564623.593:82434): pid=13826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564623.593:82435): pid=13826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564623.603:82436): pid=13828 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564623.603:82437): pid=13828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564623.603:82438): pid=13828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564623.623:82439): pid=13828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564623.633:82440): pid=13828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564623.643:82441): pid=13846 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564623.643:82442): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564623.643:82443): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564623.653:82444): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564623.653:82445): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564634.053:82446): pid=13862 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564634.053:82447): pid=13862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564634.063:82448): pid=13862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564634.063:82449): pid=13862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564634.063:82450): pid=13862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564634.073:82451): pid=13864 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390564634.073:82452): pid=13864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564634.073:82453): pid=13864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564634.103:82454): pid=13864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564634.103:82455): pid=13864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390564634.113:82456): pid=13882 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390564634.113:82457): pid=13882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390564634.113:82458): pid=13882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390564634.123:82459): pid=13882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390564634.123:82460): pid=13882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1390564637.333:82461): avc: denied { execute } for pid=13892 comm="glusterd" name="tune2fs" dev="dm-1" ino=2232948 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1390564637.333:82461): arch=80000015 syscall=11 success=no exit=-13 a0=10008bfecd8 a1=1fffe4022c00 a2=100087cd920 a3=6269 items=0 ppid=1126 pid=13892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1390564861.833:82462): pid=13992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390564861.833:82463): pid=13992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390564861.833:82464): login pid=13992 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=86 >type=USER_START msg=audit(1390564861.843:82465): pid=13992 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390564861.843:82466): pid=13992 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390564861.863:82467): avc: denied { read } for pid=14008 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390564861.863:82467): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffef4e7360 a2=84800 a3=0 items=0 ppid=14006 pid=14008 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=86 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390564861.883:82468): pid=13992 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390564861.883:82469): pid=13992 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390565401.894:82470): pid=14184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390565401.894:82471): pid=14184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390565401.894:82472): login pid=14184 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=87 >type=USER_START msg=audit(1390565401.904:82473): pid=14184 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390565401.904:82474): pid=14184 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390565401.924:82475): pid=14184 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390565401.924:82476): pid=14184 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390566301.934:82477): pid=14462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390566301.934:82478): pid=14462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390566301.934:82479): login pid=14462 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=88 >type=USER_START msg=audit(1390566301.944:82480): pid=14462 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390566301.944:82481): pid=14462 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390566301.954:82482): pid=14462 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390566301.964:82483): pid=14462 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390567201.975:82484): pid=14741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390567201.975:82485): pid=14741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390567201.975:82486): login pid=14741 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=89 >type=USER_START msg=audit(1390567201.975:82487): pid=14741 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390567201.975:82488): pid=14741 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390567201.985:82489): pid=14741 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390567201.985:82490): pid=14741 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390568101.995:82491): pid=15019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390568101.995:82492): pid=15019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390568101.995:82493): login pid=15019 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=90 >type=USER_START msg=audit(1390568101.995:82494): pid=15019 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390568101.995:82495): pid=15019 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390568102.005:82496): pid=15019 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390568102.005:82497): pid=15019 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390568461.016:82498): pid=15136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390568461.016:82499): pid=15136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390568461.016:82500): login pid=15136 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=91 >type=USER_START msg=audit(1390568461.016:82501): pid=15136 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390568461.016:82502): pid=15136 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390568461.036:82503): avc: denied { read } for pid=15152 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390568461.036:82503): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffefde10a0 a2=84800 a3=0 items=0 ppid=15150 pid=15152 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=91 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390568461.046:82504): pid=15136 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390568461.056:82505): pid=15136 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390569001.056:82506): pid=15329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390569001.056:82507): pid=15329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390569001.056:82508): login pid=15329 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=92 >type=USER_START msg=audit(1390569001.066:82509): pid=15329 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390569001.066:82510): pid=15329 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390569001.066:82511): pid=15329 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390569001.076:82512): pid=15329 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390569901.086:82513): pid=15608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390569901.086:82514): pid=15608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390569901.086:82515): login pid=15608 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=93 >type=USER_START msg=audit(1390569901.086:82516): pid=15608 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390569901.086:82517): pid=15608 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390569901.096:82518): pid=15608 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390569901.096:82519): pid=15608 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390570801.107:82520): pid=15884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390570801.107:82521): pid=15884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390570801.107:82522): login pid=15884 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=94 >type=USER_START msg=audit(1390570801.107:82523): pid=15884 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390570801.107:82524): pid=15884 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390570801.117:82525): pid=15884 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390570801.117:82526): pid=15884 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390571701.128:82527): pid=16163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390571701.128:82528): pid=16163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390571701.128:82529): login pid=16163 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=95 >type=USER_START msg=audit(1390571701.128:82530): pid=16163 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390571701.128:82531): pid=16163 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390571701.138:82532): pid=16163 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390571701.138:82533): pid=16163 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390572061.138:82534): pid=16279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390572061.138:82535): pid=16279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390572061.138:82536): login pid=16279 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=96 >type=USER_START msg=audit(1390572061.138:82537): pid=16279 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390572061.138:82538): pid=16279 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390572061.158:82539): avc: denied { read } for pid=16295 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390572061.158:82539): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffaeb7d30 a2=84800 a3=0 items=0 ppid=16293 pid=16295 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=96 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390572061.168:82540): pid=16279 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390572061.178:82541): pid=16279 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390572601.178:82542): pid=16472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390572601.178:82543): pid=16472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390572601.178:82544): login pid=16472 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=97 >type=USER_START msg=audit(1390572601.188:82545): pid=16472 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390572601.188:82546): pid=16472 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390572601.188:82547): pid=16472 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390572601.198:82548): pid=16472 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390573501.199:82549): pid=16749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390573501.199:82550): pid=16749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390573501.199:82551): login pid=16749 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=98 >type=USER_START msg=audit(1390573501.209:82552): pid=16749 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390573501.209:82553): pid=16749 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390573501.209:82554): pid=16749 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390573501.219:82555): pid=16749 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390574401.229:82556): pid=17029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390574401.229:82557): pid=17029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390574401.229:82558): login pid=17029 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=99 >type=USER_START msg=audit(1390574401.229:82559): pid=17029 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390574401.239:82560): pid=17029 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390574401.249:82561): pid=17029 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390574401.249:82562): pid=17029 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390575301.260:82563): pid=17307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390575301.260:82564): pid=17307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390575301.270:82565): login pid=17307 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=100 >type=USER_START msg=audit(1390575301.270:82566): pid=17307 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390575301.270:82567): pid=17307 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390575301.290:82568): pid=17307 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390575301.290:82569): pid=17307 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390575661.300:82570): pid=17424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390575661.300:82571): pid=17424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390575661.300:82572): login pid=17424 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=101 >type=USER_START msg=audit(1390575661.300:82573): pid=17424 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390575661.300:82574): pid=17424 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390575661.320:82575): avc: denied { read } for pid=17440 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390575661.320:82575): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffddd7bcc0 a2=84800 a3=0 items=0 ppid=17438 pid=17440 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=101 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390575661.330:82576): pid=17424 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390575661.330:82577): pid=17424 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390576201.340:82578): pid=17616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390576201.340:82579): pid=17616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390576201.340:82580): login pid=17616 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=102 >type=USER_START msg=audit(1390576201.340:82581): pid=17616 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390576201.340:82582): pid=17616 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390576201.350:82583): pid=17616 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390576201.350:82584): pid=17616 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390577101.361:82585): pid=17894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390577101.361:82586): pid=17894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390577101.361:82587): login pid=17894 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=103 >type=USER_START msg=audit(1390577101.361:82588): pid=17894 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390577101.361:82589): pid=17894 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390577101.371:82590): pid=17894 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390577101.371:82591): pid=17894 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390578001.381:82592): pid=18172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390578001.381:82593): pid=18172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390578001.381:82594): login pid=18172 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=104 >type=USER_START msg=audit(1390578001.381:82595): pid=18172 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390578001.381:82596): pid=18172 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390578001.391:82597): pid=18172 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390578001.391:82598): pid=18172 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390578901.402:82599): pid=18452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390578901.402:82600): pid=18452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390578901.402:82601): login pid=18452 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=105 >type=USER_START msg=audit(1390578901.402:82602): pid=18452 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390578901.402:82603): pid=18452 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390578901.412:82604): pid=18452 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390578901.412:82605): pid=18452 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390579261.422:82606): pid=18568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390579261.422:82607): pid=18568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390579261.422:82608): login pid=18568 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=106 >type=USER_START msg=audit(1390579261.422:82609): pid=18568 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390579261.422:82610): pid=18568 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390579261.442:82611): avc: denied { read } for pid=18584 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390579261.442:82611): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd9b44bc0 a2=84800 a3=0 items=0 ppid=18582 pid=18584 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=106 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390579261.452:82612): pid=18568 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390579261.452:82613): pid=18568 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390579801.462:82614): pid=18763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390579801.462:82615): pid=18763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390579801.462:82616): login pid=18763 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=107 >type=USER_START msg=audit(1390579801.462:82617): pid=18763 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390579801.472:82618): pid=18763 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390579801.482:82619): pid=18763 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390579801.482:82620): pid=18763 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390580701.493:82621): pid=19040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390580701.493:82622): pid=19040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390580701.493:82623): login pid=19040 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=108 >type=USER_START msg=audit(1390580701.493:82624): pid=19040 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390580701.493:82625): pid=19040 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390580701.503:82626): pid=19040 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390580701.503:82627): pid=19040 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390581601.513:82628): pid=19318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390581601.513:82629): pid=19318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390581601.513:82630): login pid=19318 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=109 >type=USER_START msg=audit(1390581601.513:82631): pid=19318 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390581601.513:82632): pid=19318 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390581601.523:82633): pid=19318 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390581601.523:82634): pid=19318 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390582501.534:82635): pid=19596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390582501.534:82636): pid=19596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390582501.534:82637): login pid=19596 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=110 >type=USER_START msg=audit(1390582501.534:82638): pid=19596 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390582501.534:82639): pid=19596 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390582501.544:82640): pid=19596 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390582501.544:82641): pid=19596 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390582861.554:82642): pid=19711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390582861.554:82643): pid=19711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390582861.554:82644): login pid=19711 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=111 >type=USER_START msg=audit(1390582861.554:82645): pid=19711 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390582861.554:82646): pid=19711 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390582861.574:82647): avc: denied { read } for pid=19727 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390582861.574:82647): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffa3a8870 a2=84800 a3=0 items=0 ppid=19725 pid=19727 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=111 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390582861.584:82648): pid=19711 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390582861.584:82649): pid=19711 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390583401.595:82650): pid=19906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390583401.595:82651): pid=19906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390583401.605:82652): login pid=19906 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=112 >type=USER_START msg=audit(1390583401.605:82653): pid=19906 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390583401.605:82654): pid=19906 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390583401.615:82655): pid=19906 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390583401.625:82656): pid=19906 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390584301.635:82657): pid=20183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390584301.635:82658): pid=20183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390584301.635:82659): login pid=20183 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=113 >type=USER_START msg=audit(1390584301.635:82660): pid=20183 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390584301.635:82661): pid=20183 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390584301.645:82662): pid=20183 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390584301.645:82663): pid=20183 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390585201.656:82664): pid=20460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390585201.656:82665): pid=20460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390585201.656:82666): login pid=20460 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=114 >type=USER_START msg=audit(1390585201.656:82667): pid=20460 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390585201.656:82668): pid=20460 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390585201.666:82669): pid=20460 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390585201.666:82670): pid=20460 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390586101.676:82671): pid=20739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390586101.676:82672): pid=20739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390586101.676:82673): login pid=20739 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=115 >type=USER_START msg=audit(1390586101.676:82674): pid=20739 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390586101.676:82675): pid=20739 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390586101.686:82676): pid=20739 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390586101.686:82677): pid=20739 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390586461.696:82678): pid=20855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390586461.696:82679): pid=20855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390586461.696:82680): login pid=20855 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=116 >type=USER_START msg=audit(1390586461.696:82681): pid=20855 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390586461.696:82682): pid=20855 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390586461.716:82683): avc: denied { read } for pid=20871 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390586461.716:82683): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff84ee930 a2=84800 a3=0 items=0 ppid=20869 pid=20871 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=116 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390586461.726:82684): pid=20855 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390586461.726:82685): pid=20855 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390587001.737:82686): pid=21049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390587001.737:82687): pid=21049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390587001.737:82688): login pid=21049 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=117 >type=USER_START msg=audit(1390587001.747:82689): pid=21049 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390587001.747:82690): pid=21049 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390587001.747:82691): pid=21049 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390587001.747:82692): pid=21049 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390587901.757:82693): pid=21329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390587901.757:82694): pid=21329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390587901.757:82695): login pid=21329 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=118 >type=USER_START msg=audit(1390587901.767:82696): pid=21329 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390587901.767:82697): pid=21329 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390587901.777:82698): pid=21329 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390587901.777:82699): pid=21329 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390588801.778:82700): pid=21608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390588801.778:82701): pid=21608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390588801.778:82702): login pid=21608 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=119 >type=USER_START msg=audit(1390588801.778:82703): pid=21608 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390588801.778:82704): pid=21608 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390588801.788:82705): pid=21608 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390588801.788:82706): pid=21608 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390589701.798:82707): pid=21886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390589701.798:82708): pid=21886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390589701.798:82709): login pid=21886 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=120 >type=USER_START msg=audit(1390589701.798:82710): pid=21886 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390589701.798:82711): pid=21886 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390589701.808:82712): pid=21886 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390589701.808:82713): pid=21886 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390590061.818:82714): pid=22004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390590061.818:82715): pid=22004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390590061.818:82716): login pid=22004 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=121 >type=USER_START msg=audit(1390590061.818:82717): pid=22004 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390590061.818:82718): pid=22004 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390590061.838:82719): avc: denied { read } for pid=22020 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390590061.838:82719): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc269de40 a2=84800 a3=0 items=0 ppid=22018 pid=22020 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=121 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390590061.848:82720): pid=22004 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390590061.858:82721): pid=22004 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390590601.859:82722): pid=22195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390590601.859:82723): pid=22195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390590601.859:82724): login pid=22195 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=122 >type=USER_START msg=audit(1390590601.869:82725): pid=22195 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390590601.869:82726): pid=22195 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390590601.869:82727): pid=22195 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390590601.879:82728): pid=22195 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1390590884.269:82729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1390590884.269:82730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1390591501.889:82731): pid=22476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390591501.889:82732): pid=22476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390591501.889:82733): login pid=22476 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=123 >type=USER_START msg=audit(1390591501.889:82734): pid=22476 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390591501.889:82735): pid=22476 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390591501.899:82736): pid=22476 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390591501.899:82737): pid=22476 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390592401.910:82738): pid=22755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390592401.910:82739): pid=22755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390592401.910:82740): login pid=22755 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=124 >type=USER_START msg=audit(1390592401.910:82741): pid=22755 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390592401.910:82742): pid=22755 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390592401.920:82743): pid=22755 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390592401.920:82744): pid=22755 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390593301.930:82745): pid=23033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390593301.930:82746): pid=23033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390593301.930:82747): login pid=23033 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=125 >type=USER_START msg=audit(1390593301.930:82748): pid=23033 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390593301.930:82749): pid=23033 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390593301.940:82750): pid=23033 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390593301.940:82751): pid=23033 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390593661.951:82752): pid=23149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390593661.951:82753): pid=23149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390593661.951:82754): login pid=23149 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=126 >type=USER_START msg=audit(1390593661.951:82755): pid=23149 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390593661.951:82756): pid=23149 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390593661.971:82757): avc: denied { read } for pid=23165 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390593661.971:82757): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffd859180 a2=84800 a3=0 items=0 ppid=23163 pid=23165 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=126 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390593661.981:82758): pid=23149 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390593661.981:82759): pid=23149 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390594201.991:82760): pid=23342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390594201.991:82761): pid=23342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390594201.991:82762): login pid=23342 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=127 >type=USER_START msg=audit(1390594201.991:82763): pid=23342 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390594201.991:82764): pid=23342 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390594202.001:82765): pid=23342 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390594202.001:82766): pid=23342 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390595101.011:82767): pid=23621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390595101.011:82768): pid=23621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390595101.011:82769): login pid=23621 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=128 >type=USER_START msg=audit(1390595101.021:82770): pid=23621 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390595101.021:82771): pid=23621 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390595101.021:82772): pid=23621 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390595101.021:82773): pid=23621 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390596001.032:82774): pid=23899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390596001.032:82775): pid=23899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390596001.032:82776): login pid=23899 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=129 >type=USER_START msg=audit(1390596001.042:82777): pid=23899 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390596001.042:82778): pid=23899 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390596001.042:82779): pid=23899 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390596001.052:82780): pid=23899 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390596901.053:82781): pid=24176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390596901.063:82782): pid=24176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390596901.063:82783): login pid=24176 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=130 >type=USER_START msg=audit(1390596901.063:82784): pid=24176 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390596901.063:82785): pid=24176 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390596901.063:82786): pid=24176 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390596901.073:82787): pid=24176 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390597261.073:82788): pid=24292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390597261.073:82789): pid=24292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390597261.073:82790): login pid=24292 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=131 >type=USER_START msg=audit(1390597261.083:82791): pid=24292 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390597261.083:82792): pid=24292 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390597261.093:82793): avc: denied { read } for pid=24308 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390597261.093:82793): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd00b2e70 a2=84800 a3=0 items=0 ppid=24306 pid=24308 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=131 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390597261.113:82794): pid=24292 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390597261.113:82795): pid=24292 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390597801.113:82796): pid=24486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390597801.113:82797): pid=24486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390597801.113:82798): login pid=24486 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=132 >type=USER_START msg=audit(1390597801.123:82799): pid=24486 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390597801.123:82800): pid=24486 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390597801.123:82801): pid=24486 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390597801.133:82802): pid=24486 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390598701.134:82803): pid=24763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390598701.144:82804): pid=24763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390598701.144:82805): login pid=24763 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=133 >type=USER_START msg=audit(1390598701.144:82806): pid=24763 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390598701.144:82807): pid=24763 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390598701.154:82808): pid=24763 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390598701.154:82809): pid=24763 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390599601.164:82810): pid=25041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390599601.164:82811): pid=25041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390599601.164:82812): login pid=25041 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=134 >type=USER_START msg=audit(1390599601.174:82813): pid=25041 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390599601.174:82814): pid=25041 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390599601.184:82815): pid=25041 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390599601.184:82816): pid=25041 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390600501.205:82817): pid=25319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390600501.205:82818): pid=25319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390600501.205:82819): login pid=25319 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=135 >type=USER_START msg=audit(1390600501.205:82820): pid=25319 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390600501.205:82821): pid=25319 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390600501.225:82822): pid=25319 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390600501.225:82823): pid=25319 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390600861.235:82824): pid=25437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390600861.235:82825): pid=25437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390600861.235:82826): login pid=25437 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=136 >type=USER_START msg=audit(1390600861.245:82827): pid=25437 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390600861.245:82828): pid=25437 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390600861.255:82829): avc: denied { read } for pid=25453 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390600861.255:82829): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe753d530 a2=84800 a3=0 items=0 ppid=25451 pid=25453 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=136 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390600861.275:82830): pid=25437 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390600861.275:82831): pid=25437 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390601401.275:82832): pid=25631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390601401.285:82833): pid=25631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390601401.285:82834): login pid=25631 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=137 >type=USER_START msg=audit(1390601401.285:82835): pid=25631 uid=0 auid=0 ses=137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390601401.285:82836): pid=25631 uid=0 auid=0 ses=137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390601401.295:82837): pid=25631 uid=0 auid=0 ses=137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390601401.295:82838): pid=25631 uid=0 auid=0 ses=137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390602301.306:82839): pid=25910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390602301.306:82840): pid=25910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390602301.306:82841): login pid=25910 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=138 >type=USER_START msg=audit(1390602301.306:82842): pid=25910 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390602301.306:82843): pid=25910 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390602301.316:82844): pid=25910 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390602301.316:82845): pid=25910 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390603201.326:82846): pid=26188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390603201.326:82847): pid=26188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390603201.326:82848): login pid=26188 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=139 >type=USER_START msg=audit(1390603201.326:82849): pid=26188 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390603201.326:82850): pid=26188 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390603201.336:82851): pid=26188 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390603201.336:82852): pid=26188 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390604101.347:82853): pid=26465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390604101.347:82854): pid=26465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390604101.347:82855): login pid=26465 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=140 >type=USER_START msg=audit(1390604101.347:82856): pid=26465 uid=0 auid=0 ses=140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390604101.347:82857): pid=26465 uid=0 auid=0 ses=140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390604101.357:82858): pid=26465 uid=0 auid=0 ses=140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390604101.357:82859): pid=26465 uid=0 auid=0 ses=140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390604461.367:82860): pid=26580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390604461.367:82861): pid=26580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390604461.367:82862): login pid=26580 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=141 >type=USER_START msg=audit(1390604461.367:82863): pid=26580 uid=0 auid=0 ses=141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390604461.367:82864): pid=26580 uid=0 auid=0 ses=141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390604461.377:82865): avc: denied { read } for pid=26596 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390604461.377:82865): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcd125b90 a2=84800 a3=0 items=0 ppid=26594 pid=26596 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=141 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390604461.397:82866): pid=26580 uid=0 auid=0 ses=141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390604461.397:82867): pid=26580 uid=0 auid=0 ses=141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390605001.407:82868): pid=26774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390605001.407:82869): pid=26774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390605001.407:82870): login pid=26774 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=142 >type=USER_START msg=audit(1390605001.407:82871): pid=26774 uid=0 auid=0 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390605001.407:82872): pid=26774 uid=0 auid=0 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390605001.417:82873): pid=26774 uid=0 auid=0 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390605001.417:82874): pid=26774 uid=0 auid=0 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390605901.418:82875): pid=27054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390605901.418:82876): pid=27054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390605901.418:82877): login pid=27054 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=143 >type=USER_START msg=audit(1390605901.418:82878): pid=27054 uid=0 auid=0 ses=143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390605901.418:82879): pid=27054 uid=0 auid=0 ses=143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390605901.428:82880): pid=27054 uid=0 auid=0 ses=143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390605901.428:82881): pid=27054 uid=0 auid=0 ses=143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390606801.438:82882): pid=27331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390606801.438:82883): pid=27331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390606801.438:82884): login pid=27331 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=144 >type=USER_START msg=audit(1390606801.438:82885): pid=27331 uid=0 auid=0 ses=144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390606801.438:82886): pid=27331 uid=0 auid=0 ses=144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390606801.448:82887): pid=27331 uid=0 auid=0 ses=144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390606801.448:82888): pid=27331 uid=0 auid=0 ses=144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390607701.459:82889): pid=27610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390607701.459:82890): pid=27610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390607701.459:82891): login pid=27610 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=145 >type=USER_START msg=audit(1390607701.459:82892): pid=27610 uid=0 auid=0 ses=145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390607701.459:82893): pid=27610 uid=0 auid=0 ses=145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390607701.469:82894): pid=27610 uid=0 auid=0 ses=145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390607701.469:82895): pid=27610 uid=0 auid=0 ses=145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390608061.479:82896): pid=27726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390608061.479:82897): pid=27726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390608061.479:82898): login pid=27726 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=146 >type=USER_START msg=audit(1390608061.479:82899): pid=27726 uid=0 auid=0 ses=146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390608061.479:82900): pid=27726 uid=0 auid=0 ses=146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390608061.499:82901): avc: denied { read } for pid=27742 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390608061.499:82901): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe7ef3060 a2=84800 a3=0 items=0 ppid=27740 pid=27742 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=146 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390608061.509:82902): pid=27726 uid=0 auid=0 ses=146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390608061.509:82903): pid=27726 uid=0 auid=0 ses=146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390608601.519:82904): pid=27918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390608601.519:82905): pid=27918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390608601.519:82906): login pid=27918 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=147 >type=USER_START msg=audit(1390608601.519:82907): pid=27918 uid=0 auid=0 ses=147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390608601.519:82908): pid=27918 uid=0 auid=0 ses=147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390608601.529:82909): pid=27918 uid=0 auid=0 ses=147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390608601.529:82910): pid=27918 uid=0 auid=0 ses=147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390609501.550:82911): pid=28197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390609501.550:82912): pid=28197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390609501.550:82913): login pid=28197 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=148 >type=USER_START msg=audit(1390609501.550:82914): pid=28197 uid=0 auid=0 ses=148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390609501.550:82915): pid=28197 uid=0 auid=0 ses=148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390609501.560:82916): pid=28197 uid=0 auid=0 ses=148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390609501.570:82917): pid=28197 uid=0 auid=0 ses=148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390610401.581:82918): pid=28475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390610401.581:82919): pid=28475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390610401.581:82920): login pid=28475 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=149 >type=USER_START msg=audit(1390610401.581:82921): pid=28475 uid=0 auid=0 ses=149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390610401.581:82922): pid=28475 uid=0 auid=0 ses=149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390610401.591:82923): pid=28475 uid=0 auid=0 ses=149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390610401.591:82924): pid=28475 uid=0 auid=0 ses=149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390611301.601:82925): pid=28754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390611301.601:82926): pid=28754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390611301.601:82927): login pid=28754 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=150 >type=USER_START msg=audit(1390611301.601:82928): pid=28754 uid=0 auid=0 ses=150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390611301.601:82929): pid=28754 uid=0 auid=0 ses=150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390611301.611:82930): pid=28754 uid=0 auid=0 ses=150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390611301.611:82931): pid=28754 uid=0 auid=0 ses=150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390611661.621:82932): pid=28871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390611661.621:82933): pid=28871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390611661.621:82934): login pid=28871 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=151 >type=USER_START msg=audit(1390611661.621:82935): pid=28871 uid=0 auid=0 ses=151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390611661.621:82936): pid=28871 uid=0 auid=0 ses=151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390611661.641:82937): avc: denied { read } for pid=28887 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390611661.641:82937): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe324cd20 a2=84800 a3=0 items=0 ppid=28885 pid=28887 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=151 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390611661.681:82938): pid=28871 uid=0 auid=0 ses=151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390611661.681:82939): pid=28871 uid=0 auid=0 ses=151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390612201.692:82940): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390612201.692:82941): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390612201.692:82942): login pid=29063 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=152 >type=USER_START msg=audit(1390612201.692:82943): pid=29063 uid=0 auid=0 ses=152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390612201.692:82944): pid=29063 uid=0 auid=0 ses=152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390612201.702:82945): pid=29063 uid=0 auid=0 ses=152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390612201.702:82946): pid=29063 uid=0 auid=0 ses=152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390613101.712:82947): pid=29340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390613101.712:82948): pid=29340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390613101.712:82949): login pid=29340 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=153 >type=USER_START msg=audit(1390613101.712:82950): pid=29340 uid=0 auid=0 ses=153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390613101.722:82951): pid=29340 uid=0 auid=0 ses=153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390613101.722:82952): pid=29340 uid=0 auid=0 ses=153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390613101.722:82953): pid=29340 uid=0 auid=0 ses=153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390614001.733:82954): pid=29619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390614001.733:82955): pid=29619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390614001.733:82956): login pid=29619 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=154 >type=USER_START msg=audit(1390614001.743:82957): pid=29619 uid=0 auid=0 ses=154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390614001.743:82958): pid=29619 uid=0 auid=0 ses=154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390614001.743:82959): pid=29619 uid=0 auid=0 ses=154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390614001.743:82960): pid=29619 uid=0 auid=0 ses=154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390614901.753:82961): pid=29895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390614901.753:82962): pid=29895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390614901.753:82963): login pid=29895 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=155 >type=USER_START msg=audit(1390614901.763:82964): pid=29895 uid=0 auid=0 ses=155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390614901.763:82965): pid=29895 uid=0 auid=0 ses=155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390614901.763:82966): pid=29895 uid=0 auid=0 ses=155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390614901.763:82967): pid=29895 uid=0 auid=0 ses=155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390615261.773:82968): pid=30013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390615261.773:82969): pid=30013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390615261.773:82970): login pid=30013 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=156 >type=USER_START msg=audit(1390615261.773:82971): pid=30013 uid=0 auid=0 ses=156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390615261.783:82972): pid=30013 uid=0 auid=0 ses=156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390615261.793:82973): avc: denied { read } for pid=30032 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390615261.793:82973): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffecde88a0 a2=84800 a3=0 items=0 ppid=30030 pid=30032 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=156 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390615261.813:82974): pid=30013 uid=0 auid=0 ses=156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390615261.813:82975): pid=30013 uid=0 auid=0 ses=156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390615801.824:82976): pid=30209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390615801.824:82977): pid=30209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390615801.824:82978): login pid=30209 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=157 >type=USER_START msg=audit(1390615801.834:82979): pid=30209 uid=0 auid=0 ses=157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390615801.834:82980): pid=30209 uid=0 auid=0 ses=157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390615801.844:82981): pid=30209 uid=0 auid=0 ses=157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390615801.844:82982): pid=30209 uid=0 auid=0 ses=157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390616701.854:82983): pid=30489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390616701.854:82984): pid=30489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390616701.854:82985): login pid=30489 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=158 >type=USER_START msg=audit(1390616701.864:82986): pid=30489 uid=0 auid=0 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390616701.864:82987): pid=30489 uid=0 auid=0 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390616701.874:82988): pid=30489 uid=0 auid=0 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390616701.884:82989): pid=30489 uid=0 auid=0 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390617601.895:82990): pid=30765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390617601.895:82991): pid=30765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390617601.895:82992): login pid=30765 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=159 >type=USER_START msg=audit(1390617601.895:82993): pid=30765 uid=0 auid=0 ses=159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390617601.895:82994): pid=30765 uid=0 auid=0 ses=159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390617601.915:82995): pid=30765 uid=0 auid=0 ses=159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390617601.915:82996): pid=30765 uid=0 auid=0 ses=159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390618501.925:82997): pid=31044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390618501.925:82998): pid=31044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390618501.925:82999): login pid=31044 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=160 >type=USER_START msg=audit(1390618501.925:83000): pid=31044 uid=0 auid=0 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390618501.925:83001): pid=31044 uid=0 auid=0 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390618501.935:83002): pid=31044 uid=0 auid=0 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390618501.935:83003): pid=31044 uid=0 auid=0 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390618861.946:83004): pid=31161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390618861.946:83005): pid=31161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390618861.946:83006): login pid=31161 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=161 >type=USER_START msg=audit(1390618861.946:83007): pid=31161 uid=0 auid=0 ses=161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390618861.946:83008): pid=31161 uid=0 auid=0 ses=161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390618861.966:83009): avc: denied { read } for pid=31180 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390618861.966:83009): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffced700d0 a2=84800 a3=0 items=0 ppid=31178 pid=31180 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=161 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390618861.976:83010): pid=31161 uid=0 auid=0 ses=161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390618861.986:83011): pid=31161 uid=0 auid=0 ses=161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390619401.986:83012): pid=31356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390619401.986:83013): pid=31356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390619401.986:83014): login pid=31356 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=162 >type=USER_START msg=audit(1390619401.996:83015): pid=31356 uid=0 auid=0 ses=162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390619401.996:83016): pid=31356 uid=0 auid=0 ses=162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390619401.996:83017): pid=31356 uid=0 auid=0 ses=162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390619402.006:83018): pid=31356 uid=0 auid=0 ses=162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390620301.016:83019): pid=31634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390620301.016:83020): pid=31634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390620301.016:83021): login pid=31634 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=163 >type=USER_START msg=audit(1390620301.016:83022): pid=31634 uid=0 auid=0 ses=163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390620301.016:83023): pid=31634 uid=0 auid=0 ses=163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390620301.016:83024): pid=31634 uid=0 auid=0 ses=163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390620301.026:83025): pid=31634 uid=0 auid=0 ses=163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390621201.037:83026): pid=31913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390621201.037:83027): pid=31913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390621201.037:83028): login pid=31913 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=164 >type=USER_START msg=audit(1390621201.037:83029): pid=31913 uid=0 auid=0 ses=164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390621201.037:83030): pid=31913 uid=0 auid=0 ses=164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390621201.047:83031): pid=31913 uid=0 auid=0 ses=164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390621201.047:83032): pid=31913 uid=0 auid=0 ses=164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390622101.058:83033): pid=32191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390622101.058:83034): pid=32191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390622101.058:83035): login pid=32191 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=165 >type=USER_START msg=audit(1390622101.058:83036): pid=32191 uid=0 auid=0 ses=165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390622101.058:83037): pid=32191 uid=0 auid=0 ses=165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390622101.068:83038): pid=32191 uid=0 auid=0 ses=165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390622101.068:83039): pid=32191 uid=0 auid=0 ses=165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390622461.068:83040): pid=32309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390622461.068:83041): pid=32309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390622461.068:83042): login pid=32309 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=166 >type=USER_START msg=audit(1390622461.078:83043): pid=32309 uid=0 auid=0 ses=166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390622461.078:83044): pid=32309 uid=0 auid=0 ses=166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390622461.088:83045): avc: denied { read } for pid=32328 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390622461.088:83045): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc04b4a90 a2=84800 a3=0 items=0 ppid=32326 pid=32328 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=166 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390622461.108:83046): pid=32309 uid=0 auid=0 ses=166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390622461.108:83047): pid=32309 uid=0 auid=0 ses=166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390623001.118:83048): pid=32507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390623001.118:83049): pid=32507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390623001.118:83050): login pid=32507 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=167 >type=USER_START msg=audit(1390623001.118:83051): pid=32507 uid=0 auid=0 ses=167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390623001.118:83052): pid=32507 uid=0 auid=0 ses=167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390623001.128:83053): pid=32507 uid=0 auid=0 ses=167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390623001.128:83054): pid=32507 uid=0 auid=0 ses=167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390623901.139:83055): pid=32784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390623901.139:83056): pid=32784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390623901.139:83057): login pid=32784 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=168 >type=USER_START msg=audit(1390623901.139:83058): pid=32784 uid=0 auid=0 ses=168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390623901.139:83059): pid=32784 uid=0 auid=0 ses=168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390623901.149:83060): pid=32784 uid=0 auid=0 ses=168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390623901.149:83061): pid=32784 uid=0 auid=0 ses=168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390624801.159:83062): pid=33063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390624801.159:83063): pid=33063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390624801.159:83064): login pid=33063 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=169 >type=USER_START msg=audit(1390624801.159:83065): pid=33063 uid=0 auid=0 ses=169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390624801.159:83066): pid=33063 uid=0 auid=0 ses=169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390624801.169:83067): pid=33063 uid=0 auid=0 ses=169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390624801.179:83068): pid=33063 uid=0 auid=0 ses=169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390625701.190:83069): pid=33340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390625701.190:83070): pid=33340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390625701.190:83071): login pid=33340 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=170 >type=USER_START msg=audit(1390625701.190:83072): pid=33340 uid=0 auid=0 ses=170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390625701.190:83073): pid=33340 uid=0 auid=0 ses=170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390625701.200:83074): pid=33340 uid=0 auid=0 ses=170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390625701.200:83075): pid=33340 uid=0 auid=0 ses=170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390626061.200:83076): pid=33456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390626061.200:83077): pid=33456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390626061.200:83078): login pid=33456 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=171 >type=USER_START msg=audit(1390626061.210:83079): pid=33456 uid=0 auid=0 ses=171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390626061.210:83080): pid=33456 uid=0 auid=0 ses=171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390626061.230:83081): avc: denied { read } for pid=33475 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390626061.230:83081): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffea756730 a2=84800 a3=0 items=0 ppid=33473 pid=33475 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=171 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390626061.240:83082): pid=33456 uid=0 auid=0 ses=171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390626061.240:83083): pid=33456 uid=0 auid=0 ses=171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390626601.250:83084): pid=33649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390626601.250:83085): pid=33649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390626601.250:83086): login pid=33649 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=172 >type=USER_START msg=audit(1390626601.260:83087): pid=33649 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390626601.260:83088): pid=33649 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390626601.270:83089): pid=33649 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390626601.270:83090): pid=33649 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390626781.240:83091): avc: denied { read } for pid=33715 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390626781.240:83091): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd8b45040 a2=84800 a3=0 items=0 ppid=33713 pid=33715 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=171 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1390627501.281:83092): pid=33972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390627501.281:83093): pid=33972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390627501.291:83094): login pid=33972 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=173 >type=USER_START msg=audit(1390627501.291:83095): pid=33972 uid=0 auid=0 ses=173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390627501.291:83096): pid=33972 uid=0 auid=0 ses=173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390627501.301:83097): pid=33972 uid=0 auid=0 ses=173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390627501.301:83098): pid=33972 uid=0 auid=0 ses=173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390628401.311:83099): pid=34249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390628401.311:83100): pid=34249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390628401.311:83101): login pid=34249 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=174 >type=USER_START msg=audit(1390628401.321:83102): pid=34249 uid=0 auid=0 ses=174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390628401.321:83103): pid=34249 uid=0 auid=0 ses=174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390628401.321:83104): pid=34249 uid=0 auid=0 ses=174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390628401.321:83105): pid=34249 uid=0 auid=0 ses=174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390629301.332:83106): pid=34527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390629301.332:83107): pid=34527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390629301.332:83108): login pid=34527 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=175 >type=USER_START msg=audit(1390629301.342:83109): pid=34527 uid=0 auid=0 ses=175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390629301.342:83110): pid=34527 uid=0 auid=0 ses=175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390629301.352:83111): pid=34527 uid=0 auid=0 ses=175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390629301.352:83112): pid=34527 uid=0 auid=0 ses=175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390629661.352:83113): pid=34643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390629661.352:83114): pid=34643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390629661.352:83115): login pid=34643 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=176 >type=USER_START msg=audit(1390629661.362:83116): pid=34643 uid=0 auid=0 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390629661.362:83117): pid=34643 uid=0 auid=0 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390629661.382:83118): avc: denied { read } for pid=34659 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390629661.382:83118): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffe3f6d80 a2=84800 a3=0 items=0 ppid=34657 pid=34659 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=176 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390629661.392:83119): pid=34643 uid=0 auid=0 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390629661.392:83120): pid=34643 uid=0 auid=0 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390630201.402:83121): pid=34836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390630201.402:83122): pid=34836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390630201.402:83123): login pid=34836 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=177 >type=USER_START msg=audit(1390630201.402:83124): pid=34836 uid=0 auid=0 ses=177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390630201.402:83125): pid=34836 uid=0 auid=0 ses=177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390630201.412:83126): pid=34836 uid=0 auid=0 ses=177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390630201.412:83127): pid=34836 uid=0 auid=0 ses=177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390631101.423:83128): pid=35114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390631101.423:83129): pid=35114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390631101.423:83130): login pid=35114 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=178 >type=USER_START msg=audit(1390631101.433:83131): pid=35114 uid=0 auid=0 ses=178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390631101.433:83132): pid=35114 uid=0 auid=0 ses=178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390631101.433:83133): pid=35114 uid=0 auid=0 ses=178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390631101.433:83134): pid=35114 uid=0 auid=0 ses=178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390632001.443:83135): pid=35391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390632001.443:83136): pid=35391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390632001.443:83137): login pid=35391 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=179 >type=USER_START msg=audit(1390632001.453:83138): pid=35391 uid=0 auid=0 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390632001.453:83139): pid=35391 uid=0 auid=0 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390632001.453:83140): pid=35391 uid=0 auid=0 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390632001.453:83141): pid=35391 uid=0 auid=0 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390632901.464:83142): pid=35669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390632901.464:83143): pid=35669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390632901.464:83144): login pid=35669 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=180 >type=USER_START msg=audit(1390632901.474:83145): pid=35669 uid=0 auid=0 ses=180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390632901.474:83146): pid=35669 uid=0 auid=0 ses=180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390632901.474:83147): pid=35669 uid=0 auid=0 ses=180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390632901.484:83148): pid=35669 uid=0 auid=0 ses=180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390633261.484:83149): pid=35786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390633261.484:83150): pid=35786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390633261.484:83151): login pid=35786 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=181 >type=USER_START msg=audit(1390633261.494:83152): pid=35786 uid=0 auid=0 ses=181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390633261.494:83153): pid=35786 uid=0 auid=0 ses=181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390633261.504:83154): avc: denied { read } for pid=35802 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390633261.504:83154): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcd926210 a2=84800 a3=0 items=0 ppid=35800 pid=35802 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=181 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390633261.524:83155): pid=35786 uid=0 auid=0 ses=181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390633261.524:83156): pid=35786 uid=0 auid=0 ses=181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390633801.534:83157): pid=35980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390633801.534:83158): pid=35980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390633801.534:83159): login pid=35980 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=182 >type=USER_START msg=audit(1390633801.544:83160): pid=35980 uid=0 auid=0 ses=182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390633801.544:83161): pid=35980 uid=0 auid=0 ses=182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390633801.554:83162): pid=35980 uid=0 auid=0 ses=182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390633801.554:83163): pid=35980 uid=0 auid=0 ses=182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390634701.565:83164): pid=36257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390634701.565:83165): pid=36257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390634701.575:83166): login pid=36257 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=183 >type=USER_START msg=audit(1390634701.575:83167): pid=36257 uid=0 auid=0 ses=183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390634701.575:83168): pid=36257 uid=0 auid=0 ses=183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390634701.585:83169): pid=36257 uid=0 auid=0 ses=183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390634701.595:83170): pid=36257 uid=0 auid=0 ses=183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390635601.596:83171): pid=36534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390635601.596:83172): pid=36534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390635601.606:83173): login pid=36534 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=184 >type=USER_START msg=audit(1390635601.606:83174): pid=36534 uid=0 auid=0 ses=184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390635601.606:83175): pid=36534 uid=0 auid=0 ses=184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390635601.606:83176): pid=36534 uid=0 auid=0 ses=184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390635601.616:83177): pid=36534 uid=0 auid=0 ses=184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390636501.626:83178): pid=36813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390636501.626:83179): pid=36813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390636501.626:83180): login pid=36813 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=185 >type=USER_START msg=audit(1390636501.626:83181): pid=36813 uid=0 auid=0 ses=185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390636501.626:83182): pid=36813 uid=0 auid=0 ses=185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390636501.636:83183): pid=36813 uid=0 auid=0 ses=185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390636501.636:83184): pid=36813 uid=0 auid=0 ses=185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390636861.646:83185): pid=36929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390636861.646:83186): pid=36929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390636861.646:83187): login pid=36929 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=186 >type=USER_START msg=audit(1390636861.646:83188): pid=36929 uid=0 auid=0 ses=186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390636861.646:83189): pid=36929 uid=0 auid=0 ses=186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390636861.666:83190): avc: denied { read } for pid=36945 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390636861.666:83190): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe7151670 a2=84800 a3=0 items=0 ppid=36943 pid=36945 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=186 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390636861.676:83191): pid=36929 uid=0 auid=0 ses=186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390636861.676:83192): pid=36929 uid=0 auid=0 ses=186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390637401.687:83193): pid=37122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390637401.687:83194): pid=37122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390637401.687:83195): login pid=37122 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=187 >type=USER_START msg=audit(1390637401.687:83196): pid=37122 uid=0 auid=0 ses=187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390637401.687:83197): pid=37122 uid=0 auid=0 ses=187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390637401.697:83198): pid=37122 uid=0 auid=0 ses=187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390637401.697:83199): pid=37122 uid=0 auid=0 ses=187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390638301.707:83200): pid=37402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390638301.707:83201): pid=37402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390638301.707:83202): login pid=37402 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=188 >type=USER_START msg=audit(1390638301.707:83203): pid=37402 uid=0 auid=0 ses=188 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390638301.707:83204): pid=37402 uid=0 auid=0 ses=188 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390638301.717:83205): pid=37402 uid=0 auid=0 ses=188 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390638301.717:83206): pid=37402 uid=0 auid=0 ses=188 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390639201.718:83207): pid=37680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390639201.718:83208): pid=37680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390639201.718:83209): login pid=37680 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=189 >type=USER_START msg=audit(1390639201.718:83210): pid=37680 uid=0 auid=0 ses=189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390639201.718:83211): pid=37680 uid=0 auid=0 ses=189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390639201.728:83212): pid=37680 uid=0 auid=0 ses=189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390639201.728:83213): pid=37680 uid=0 auid=0 ses=189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390640101.738:83214): pid=37958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390640101.738:83215): pid=37958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390640101.738:83216): login pid=37958 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=190 >type=USER_START msg=audit(1390640101.738:83217): pid=37958 uid=0 auid=0 ses=190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390640101.748:83218): pid=37958 uid=0 auid=0 ses=190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390640101.758:83219): pid=37958 uid=0 auid=0 ses=190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390640101.758:83220): pid=37958 uid=0 auid=0 ses=190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390640461.758:83221): pid=38075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390640461.768:83222): pid=38075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390640461.768:83223): login pid=38075 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=191 >type=USER_START msg=audit(1390640461.768:83224): pid=38075 uid=0 auid=0 ses=191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390640461.768:83225): pid=38075 uid=0 auid=0 ses=191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390640461.778:83226): avc: denied { read } for pid=38091 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390640461.778:83226): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe7efd280 a2=84800 a3=0 items=0 ppid=38089 pid=38091 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=191 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390640461.798:83227): pid=38075 uid=0 auid=0 ses=191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390640461.798:83228): pid=38075 uid=0 auid=0 ses=191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390641001.809:83229): pid=38267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390641001.809:83230): pid=38267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390641001.809:83231): login pid=38267 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=192 >type=USER_START msg=audit(1390641001.809:83232): pid=38267 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390641001.809:83233): pid=38267 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390641001.819:83234): pid=38267 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390641001.819:83235): pid=38267 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390641901.829:83236): pid=38544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390641901.829:83237): pid=38544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390641901.829:83238): login pid=38544 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=193 >type=USER_START msg=audit(1390641901.829:83239): pid=38544 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390641901.829:83240): pid=38544 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390641901.839:83241): pid=38544 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390641901.839:83242): pid=38544 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390642801.850:83243): pid=38823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390642801.850:83244): pid=38823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390642801.850:83245): login pid=38823 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=194 >type=USER_START msg=audit(1390642801.860:83246): pid=38823 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390642801.860:83247): pid=38823 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390642801.870:83248): pid=38823 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390642801.870:83249): pid=38823 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390643701.880:83250): pid=39100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390643701.880:83251): pid=39100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390643701.880:83252): login pid=39100 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=195 >type=USER_START msg=audit(1390643701.890:83253): pid=39100 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390643701.890:83254): pid=39100 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390643701.890:83255): pid=39100 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390643701.890:83256): pid=39100 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390644061.901:83257): pid=39215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390644061.901:83258): pid=39215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390644061.901:83259): login pid=39215 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=196 >type=USER_START msg=audit(1390644061.911:83260): pid=39215 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390644061.911:83261): pid=39215 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390644061.921:83262): avc: denied { read } for pid=39231 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390644061.921:83262): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdfc6fff0 a2=84800 a3=0 items=0 ppid=39229 pid=39231 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=196 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390644061.941:83263): pid=39215 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390644061.941:83264): pid=39215 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390644601.951:83265): pid=39410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390644601.951:83266): pid=39410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390644601.951:83267): login pid=39410 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=197 >type=USER_START msg=audit(1390644601.951:83268): pid=39410 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390644601.951:83269): pid=39410 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390644601.971:83270): pid=39410 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390644601.971:83271): pid=39410 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390645501.981:83272): pid=39687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390645501.981:83273): pid=39687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390645501.981:83274): login pid=39687 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=198 >type=USER_START msg=audit(1390645501.981:83275): pid=39687 uid=0 auid=0 ses=198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390645501.981:83276): pid=39687 uid=0 auid=0 ses=198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390645501.991:83277): pid=39687 uid=0 auid=0 ses=198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390645501.991:83278): pid=39687 uid=0 auid=0 ses=198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390646401.002:83279): pid=39965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390646401.002:83280): pid=39965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390646401.002:83281): login pid=39965 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=199 >type=USER_START msg=audit(1390646401.012:83282): pid=39965 uid=0 auid=0 ses=199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390646401.012:83283): pid=39965 uid=0 auid=0 ses=199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390646401.022:83284): pid=39965 uid=0 auid=0 ses=199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390646401.022:83285): pid=39965 uid=0 auid=0 ses=199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390647301.032:83286): pid=40246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390647301.032:83287): pid=40246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390647301.032:83288): login pid=40246 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=200 >type=USER_START msg=audit(1390647301.032:83289): pid=40246 uid=0 auid=0 ses=200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390647301.032:83290): pid=40246 uid=0 auid=0 ses=200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390647301.042:83291): pid=40246 uid=0 auid=0 ses=200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390647301.042:83292): pid=40246 uid=0 auid=0 ses=200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390647661.053:83293): pid=40362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390647661.053:83294): pid=40362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390647661.053:83295): login pid=40362 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=201 >type=USER_START msg=audit(1390647661.053:83296): pid=40362 uid=0 auid=0 ses=201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390647661.053:83297): pid=40362 uid=0 auid=0 ses=201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390647661.073:83298): avc: denied { read } for pid=40378 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390647661.073:83298): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc9641630 a2=84800 a3=0 items=0 ppid=40376 pid=40378 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=201 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390647661.083:83299): pid=40362 uid=0 auid=0 ses=201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390647661.083:83300): pid=40362 uid=0 auid=0 ses=201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390648201.093:83301): pid=40553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390648201.093:83302): pid=40553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390648201.093:83303): login pid=40553 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=202 >type=USER_START msg=audit(1390648201.093:83304): pid=40553 uid=0 auid=0 ses=202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390648201.093:83305): pid=40553 uid=0 auid=0 ses=202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390648201.103:83306): pid=40553 uid=0 auid=0 ses=202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390648201.103:83307): pid=40553 uid=0 auid=0 ses=202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390649101.114:83308): pid=40831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390649101.114:83309): pid=40831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390649101.114:83310): login pid=40831 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=203 >type=USER_START msg=audit(1390649101.114:83311): pid=40831 uid=0 auid=0 ses=203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390649101.114:83312): pid=40831 uid=0 auid=0 ses=203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390649101.124:83313): pid=40831 uid=0 auid=0 ses=203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390649101.124:83314): pid=40831 uid=0 auid=0 ses=203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390650001.134:83315): pid=41110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390650001.134:83316): pid=41110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390650001.134:83317): login pid=41110 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=204 >type=USER_START msg=audit(1390650001.134:83318): pid=41110 uid=0 auid=0 ses=204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390650001.134:83319): pid=41110 uid=0 auid=0 ses=204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390650001.144:83320): pid=41110 uid=0 auid=0 ses=204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390650001.144:83321): pid=41110 uid=0 auid=0 ses=204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390650901.165:83322): pid=41387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390650901.165:83323): pid=41387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390650901.165:83324): login pid=41387 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=205 >type=USER_START msg=audit(1390650901.165:83325): pid=41387 uid=0 auid=0 ses=205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390650901.165:83326): pid=41387 uid=0 auid=0 ses=205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390650901.175:83327): pid=41387 uid=0 auid=0 ses=205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390650901.185:83328): pid=41387 uid=0 auid=0 ses=205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390651261.195:83329): pid=41503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390651261.195:83330): pid=41503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390651261.195:83331): login pid=41503 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=206 >type=USER_START msg=audit(1390651261.195:83332): pid=41503 uid=0 auid=0 ses=206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390651261.195:83333): pid=41503 uid=0 auid=0 ses=206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390651261.205:83334): avc: denied { read } for pid=41519 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390651261.205:83334): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdf463b80 a2=84800 a3=0 items=0 ppid=41517 pid=41519 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=206 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390651261.225:83335): pid=41503 uid=0 auid=0 ses=206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390651261.225:83336): pid=41503 uid=0 auid=0 ses=206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390651801.235:83337): pid=41697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390651801.235:83338): pid=41697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390651801.235:83339): login pid=41697 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=207 >type=USER_START msg=audit(1390651801.235:83340): pid=41697 uid=0 auid=0 ses=207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390651801.235:83341): pid=41697 uid=0 auid=0 ses=207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390651801.245:83342): pid=41697 uid=0 auid=0 ses=207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390651801.245:83343): pid=41697 uid=0 auid=0 ses=207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390652701.256:83344): pid=41973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390652701.256:83345): pid=41973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390652701.256:83346): login pid=41973 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=208 >type=USER_START msg=audit(1390652701.256:83347): pid=41973 uid=0 auid=0 ses=208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390652701.256:83348): pid=41973 uid=0 auid=0 ses=208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390652701.266:83349): pid=41973 uid=0 auid=0 ses=208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390652701.266:83350): pid=41973 uid=0 auid=0 ses=208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390653601.276:83351): pid=42252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390653601.276:83352): pid=42252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390653601.276:83353): login pid=42252 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=209 >type=USER_START msg=audit(1390653601.276:83354): pid=42252 uid=0 auid=0 ses=209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390653601.276:83355): pid=42252 uid=0 auid=0 ses=209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390653601.286:83356): pid=42252 uid=0 auid=0 ses=209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390653601.286:83357): pid=42252 uid=0 auid=0 ses=209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390654501.297:83358): pid=42530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390654501.297:83359): pid=42530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390654501.297:83360): login pid=42530 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=210 >type=USER_START msg=audit(1390654501.297:83361): pid=42530 uid=0 auid=0 ses=210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390654501.297:83362): pid=42530 uid=0 auid=0 ses=210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390654501.307:83363): pid=42530 uid=0 auid=0 ses=210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390654501.307:83364): pid=42530 uid=0 auid=0 ses=210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390654861.317:83365): pid=42645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390654861.317:83366): pid=42645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390654861.317:83367): login pid=42645 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=211 >type=USER_START msg=audit(1390654861.317:83368): pid=42645 uid=0 auid=0 ses=211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390654861.317:83369): pid=42645 uid=0 auid=0 ses=211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390654861.337:83370): avc: denied { read } for pid=42661 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390654861.337:83370): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffed4a7690 a2=84800 a3=0 items=0 ppid=42659 pid=42661 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=211 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390654861.347:83371): pid=42645 uid=0 auid=0 ses=211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390654861.347:83372): pid=42645 uid=0 auid=0 ses=211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390655401.357:83373): pid=42839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390655401.357:83374): pid=42839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390655401.357:83375): login pid=42839 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=212 >type=USER_START msg=audit(1390655401.357:83376): pid=42839 uid=0 auid=0 ses=212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390655401.357:83377): pid=42839 uid=0 auid=0 ses=212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390655401.367:83378): pid=42839 uid=0 auid=0 ses=212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390655401.367:83379): pid=42839 uid=0 auid=0 ses=212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390656301.368:83380): pid=43116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390656301.368:83381): pid=43116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390656301.368:83382): login pid=43116 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=213 >type=USER_START msg=audit(1390656301.368:83383): pid=43116 uid=0 auid=0 ses=213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390656301.368:83384): pid=43116 uid=0 auid=0 ses=213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390656301.378:83385): pid=43116 uid=0 auid=0 ses=213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390656301.378:83386): pid=43116 uid=0 auid=0 ses=213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390657201.388:83387): pid=43394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390657201.388:83388): pid=43394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390657201.388:83389): login pid=43394 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=214 >type=USER_START msg=audit(1390657201.388:83390): pid=43394 uid=0 auid=0 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390657201.388:83391): pid=43394 uid=0 auid=0 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390657201.398:83392): pid=43394 uid=0 auid=0 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390657201.398:83393): pid=43394 uid=0 auid=0 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390658101.409:83394): pid=43671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390658101.409:83395): pid=43671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390658101.409:83396): login pid=43671 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=215 >type=USER_START msg=audit(1390658101.409:83397): pid=43671 uid=0 auid=0 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390658101.409:83398): pid=43671 uid=0 auid=0 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390658101.419:83399): pid=43671 uid=0 auid=0 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390658101.419:83400): pid=43671 uid=0 auid=0 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390658461.429:83401): pid=43789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390658461.429:83402): pid=43789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390658461.429:83403): login pid=43789 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=216 >type=USER_START msg=audit(1390658461.429:83404): pid=43789 uid=0 auid=0 ses=216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390658461.429:83405): pid=43789 uid=0 auid=0 ses=216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390658461.449:83406): avc: denied { read } for pid=43805 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390658461.449:83406): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc26731c0 a2=84800 a3=0 items=0 ppid=43803 pid=43805 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=216 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390658461.469:83407): pid=43789 uid=0 auid=0 ses=216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390658461.469:83408): pid=43789 uid=0 auid=0 ses=216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390659001.479:83409): pid=43982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390659001.479:83410): pid=43982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390659001.479:83411): login pid=43982 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=217 >type=USER_START msg=audit(1390659001.489:83412): pid=43982 uid=0 auid=0 ses=217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390659001.489:83413): pid=43982 uid=0 auid=0 ses=217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390659001.499:83414): pid=43982 uid=0 auid=0 ses=217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390659001.499:83415): pid=43982 uid=0 auid=0 ses=217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390659901.520:83416): pid=44260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390659901.520:83417): pid=44260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390659901.520:83418): login pid=44260 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=218 >type=USER_START msg=audit(1390659901.520:83419): pid=44260 uid=0 auid=0 ses=218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390659901.520:83420): pid=44260 uid=0 auid=0 ses=218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390659901.530:83421): pid=44260 uid=0 auid=0 ses=218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390659901.540:83422): pid=44260 uid=0 auid=0 ses=218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390660801.551:83423): pid=44538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390660801.551:83424): pid=44538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390660801.551:83425): login pid=44538 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=219 >type=USER_START msg=audit(1390660801.551:83426): pid=44538 uid=0 auid=0 ses=219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390660801.551:83427): pid=44538 uid=0 auid=0 ses=219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390660801.561:83428): pid=44538 uid=0 auid=0 ses=219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390660801.561:83429): pid=44538 uid=0 auid=0 ses=219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390661701.571:83430): pid=44816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390661701.571:83431): pid=44816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390661701.571:83432): login pid=44816 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=220 >type=USER_START msg=audit(1390661701.571:83433): pid=44816 uid=0 auid=0 ses=220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390661701.571:83434): pid=44816 uid=0 auid=0 ses=220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390661701.581:83435): pid=44816 uid=0 auid=0 ses=220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390661701.581:83436): pid=44816 uid=0 auid=0 ses=220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390662061.591:83437): pid=44936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390662061.591:83438): pid=44936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390662061.591:83439): login pid=44936 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=221 >type=USER_START msg=audit(1390662061.591:83440): pid=44936 uid=0 auid=0 ses=221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390662061.591:83441): pid=44936 uid=0 auid=0 ses=221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390662061.611:83442): avc: denied { read } for pid=44952 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390662061.611:83442): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd45c0fb0 a2=84800 a3=0 items=0 ppid=44950 pid=44952 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=221 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390662061.621:83443): pid=44936 uid=0 auid=0 ses=221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390662061.631:83444): pid=44936 uid=0 auid=0 ses=221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390662601.632:83445): pid=45128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390662601.632:83446): pid=45128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390662601.632:83447): login pid=45128 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=222 >type=USER_START msg=audit(1390662601.642:83448): pid=45128 uid=0 auid=0 ses=222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390662601.642:83449): pid=45128 uid=0 auid=0 ses=222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390662601.642:83450): pid=45128 uid=0 auid=0 ses=222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390662601.652:83451): pid=45128 uid=0 auid=0 ses=222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390663501.662:83452): pid=45406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390663501.662:83453): pid=45406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390663501.662:83454): login pid=45406 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=223 >type=USER_START msg=audit(1390663501.662:83455): pid=45406 uid=0 auid=0 ses=223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390663501.662:83456): pid=45406 uid=0 auid=0 ses=223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390663501.672:83457): pid=45406 uid=0 auid=0 ses=223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390663501.672:83458): pid=45406 uid=0 auid=0 ses=223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390664401.683:83459): pid=45684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390664401.683:83460): pid=45684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390664401.683:83461): login pid=45684 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=224 >type=USER_START msg=audit(1390664401.693:83462): pid=45684 uid=0 auid=0 ses=224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390664401.693:83463): pid=45684 uid=0 auid=0 ses=224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390664401.693:83464): pid=45684 uid=0 auid=0 ses=224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390664401.693:83465): pid=45684 uid=0 auid=0 ses=224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390665301.703:83466): pid=45963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390665301.703:83467): pid=45963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390665301.703:83468): login pid=45963 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=225 >type=USER_START msg=audit(1390665301.713:83469): pid=45963 uid=0 auid=0 ses=225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390665301.713:83470): pid=45963 uid=0 auid=0 ses=225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390665301.713:83471): pid=45963 uid=0 auid=0 ses=225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390665301.713:83472): pid=45963 uid=0 auid=0 ses=225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390665661.723:83473): pid=46079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390665661.723:83474): pid=46079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390665661.723:83475): login pid=46079 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=226 >type=USER_START msg=audit(1390665661.723:83476): pid=46079 uid=0 auid=0 ses=226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390665661.733:83477): pid=46079 uid=0 auid=0 ses=226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390665661.743:83478): avc: denied { read } for pid=46095 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390665661.743:83478): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe1e68a10 a2=84800 a3=0 items=0 ppid=46093 pid=46095 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=226 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390665661.763:83479): pid=46079 uid=0 auid=0 ses=226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390665661.763:83480): pid=46079 uid=0 auid=0 ses=226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390666201.774:83481): pid=46273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390666201.774:83482): pid=46273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390666201.774:83483): login pid=46273 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=227 >type=USER_START msg=audit(1390666201.774:83484): pid=46273 uid=0 auid=0 ses=227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390666201.774:83485): pid=46273 uid=0 auid=0 ses=227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390666201.784:83486): pid=46273 uid=0 auid=0 ses=227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390666201.784:83487): pid=46273 uid=0 auid=0 ses=227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390667101.794:83488): pid=46551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390667101.794:83489): pid=46551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390667101.794:83490): login pid=46551 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=228 >type=USER_START msg=audit(1390667101.794:83491): pid=46551 uid=0 auid=0 ses=228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390667101.794:83492): pid=46551 uid=0 auid=0 ses=228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390667101.804:83493): pid=46551 uid=0 auid=0 ses=228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390667101.804:83494): pid=46551 uid=0 auid=0 ses=228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390668001.815:83495): pid=46828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390668001.815:83496): pid=46828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390668001.815:83497): login pid=46828 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=229 >type=USER_START msg=audit(1390668001.825:83498): pid=46828 uid=0 auid=0 ses=229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390668001.825:83499): pid=46828 uid=0 auid=0 ses=229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390668001.835:83500): pid=46828 uid=0 auid=0 ses=229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390668001.835:83501): pid=46828 uid=0 auid=0 ses=229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390668901.855:83502): pid=47106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390668901.855:83503): pid=47106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390668901.855:83504): login pid=47106 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=230 >type=USER_START msg=audit(1390668901.855:83505): pid=47106 uid=0 auid=0 ses=230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390668901.855:83506): pid=47106 uid=0 auid=0 ses=230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390668901.875:83507): pid=47106 uid=0 auid=0 ses=230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390668901.875:83508): pid=47106 uid=0 auid=0 ses=230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390669261.886:83509): pid=47223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390669261.886:83510): pid=47223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390669261.886:83511): login pid=47223 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=231 >type=USER_START msg=audit(1390669261.886:83512): pid=47223 uid=0 auid=0 ses=231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390669261.886:83513): pid=47223 uid=0 auid=0 ses=231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390669261.896:83514): avc: denied { read } for pid=47239 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390669261.896:83514): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe31e3c00 a2=84800 a3=0 items=0 ppid=47237 pid=47239 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=231 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390669261.916:83515): pid=47223 uid=0 auid=0 ses=231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390669261.916:83516): pid=47223 uid=0 auid=0 ses=231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390669801.926:83517): pid=47417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390669801.926:83518): pid=47417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390669801.926:83519): login pid=47417 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=232 >type=USER_START msg=audit(1390669801.926:83520): pid=47417 uid=0 auid=0 ses=232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390669801.926:83521): pid=47417 uid=0 auid=0 ses=232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390669801.936:83522): pid=47417 uid=0 auid=0 ses=232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390669801.936:83523): pid=47417 uid=0 auid=0 ses=232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390670701.946:83524): pid=47693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390670701.946:83525): pid=47693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390670701.946:83526): login pid=47693 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=233 >type=USER_START msg=audit(1390670701.946:83527): pid=47693 uid=0 auid=0 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390670701.946:83528): pid=47693 uid=0 auid=0 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390670701.956:83529): pid=47693 uid=0 auid=0 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390670701.956:83530): pid=47693 uid=0 auid=0 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390671601.967:83531): pid=47970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390671601.967:83532): pid=47970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390671601.967:83533): login pid=47970 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=234 >type=USER_START msg=audit(1390671601.967:83534): pid=47970 uid=0 auid=0 ses=234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390671601.967:83535): pid=47970 uid=0 auid=0 ses=234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390671601.977:83536): pid=47970 uid=0 auid=0 ses=234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390671601.977:83537): pid=47970 uid=0 auid=0 ses=234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390672501.987:83538): pid=48250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390672501.987:83539): pid=48250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390672501.987:83540): login pid=48250 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=235 >type=USER_START msg=audit(1390672501.987:83541): pid=48250 uid=0 auid=0 ses=235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390672501.987:83542): pid=48250 uid=0 auid=0 ses=235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390672501.997:83543): pid=48250 uid=0 auid=0 ses=235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390672501.997:83544): pid=48250 uid=0 auid=0 ses=235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390672861.998:83545): pid=48366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390672861.998:83546): pid=48366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390672861.998:83547): login pid=48366 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=236 >type=USER_START msg=audit(1390672861.998:83548): pid=48366 uid=0 auid=0 ses=236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390672861.998:83549): pid=48366 uid=0 auid=0 ses=236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390672862.018:83550): avc: denied { read } for pid=48382 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390672862.018:83550): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcb8a1760 a2=84800 a3=0 items=0 ppid=48380 pid=48382 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=236 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390672862.028:83551): pid=48366 uid=0 auid=0 ses=236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390672862.028:83552): pid=48366 uid=0 auid=0 ses=236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390673401.038:83553): pid=48557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390673401.038:83554): pid=48557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390673401.038:83555): login pid=48557 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=237 >type=USER_START msg=audit(1390673401.048:83556): pid=48557 uid=0 auid=0 ses=237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390673401.048:83557): pid=48557 uid=0 auid=0 ses=237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390673401.048:83558): pid=48557 uid=0 auid=0 ses=237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390673401.048:83559): pid=48557 uid=0 auid=0 ses=237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390674301.059:83560): pid=48836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390674301.059:83561): pid=48836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390674301.059:83562): login pid=48836 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=238 >type=USER_START msg=audit(1390674301.069:83563): pid=48836 uid=0 auid=0 ses=238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390674301.069:83564): pid=48836 uid=0 auid=0 ses=238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390674301.069:83565): pid=48836 uid=0 auid=0 ses=238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390674301.069:83566): pid=48836 uid=0 auid=0 ses=238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390675201.079:83567): pid=49114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390675201.079:83568): pid=49114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390675201.079:83569): login pid=49114 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=239 >type=USER_START msg=audit(1390675201.089:83570): pid=49114 uid=0 auid=0 ses=239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390675201.089:83571): pid=49114 uid=0 auid=0 ses=239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390675201.089:83572): pid=49114 uid=0 auid=0 ses=239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390675201.089:83573): pid=49114 uid=0 auid=0 ses=239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390676101.110:83574): pid=49392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390676101.110:83575): pid=49392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390676101.110:83576): login pid=49392 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=240 >type=USER_START msg=audit(1390676101.110:83577): pid=49392 uid=0 auid=0 ses=240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390676101.110:83578): pid=49392 uid=0 auid=0 ses=240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390676101.130:83579): pid=49392 uid=0 auid=0 ses=240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390676101.130:83580): pid=49392 uid=0 auid=0 ses=240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390676461.140:83581): pid=49508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390676461.140:83582): pid=49508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390676461.140:83583): login pid=49508 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=241 >type=USER_START msg=audit(1390676461.140:83584): pid=49508 uid=0 auid=0 ses=241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390676461.140:83585): pid=49508 uid=0 auid=0 ses=241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390676461.160:83586): avc: denied { read } for pid=49524 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390676461.160:83586): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffce0ee6e0 a2=84800 a3=0 items=0 ppid=49522 pid=49524 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=241 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390676461.170:83587): pid=49508 uid=0 auid=0 ses=241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390676461.170:83588): pid=49508 uid=0 auid=0 ses=241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390677001.180:83589): pid=49701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390677001.180:83590): pid=49701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390677001.180:83591): login pid=49701 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=242 >type=USER_START msg=audit(1390677001.190:83592): pid=49701 uid=0 auid=0 ses=242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390677001.190:83593): pid=49701 uid=0 auid=0 ses=242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390677001.200:83594): pid=49701 uid=0 auid=0 ses=242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390677001.200:83595): pid=49701 uid=0 auid=0 ses=242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1390677284.280:83596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1390677284.280:83597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1390677901.211:83598): pid=49983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390677901.211:83599): pid=49983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390677901.211:83600): login pid=49983 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=243 >type=USER_START msg=audit(1390677901.221:83601): pid=49983 uid=0 auid=0 ses=243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390677901.221:83602): pid=49983 uid=0 auid=0 ses=243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390677901.221:83603): pid=49983 uid=0 auid=0 ses=243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390677901.231:83604): pid=49983 uid=0 auid=0 ses=243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390678801.241:83605): pid=50261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390678801.241:83606): pid=50261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390678801.241:83607): login pid=50261 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=244 >type=USER_START msg=audit(1390678801.241:83608): pid=50261 uid=0 auid=0 ses=244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390678801.241:83609): pid=50261 uid=0 auid=0 ses=244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390678801.251:83610): pid=50261 uid=0 auid=0 ses=244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390678801.251:83611): pid=50261 uid=0 auid=0 ses=244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390679701.262:83612): pid=50538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390679701.262:83613): pid=50538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390679701.262:83614): login pid=50538 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=245 >type=USER_START msg=audit(1390679701.262:83615): pid=50538 uid=0 auid=0 ses=245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390679701.262:83616): pid=50538 uid=0 auid=0 ses=245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390679701.272:83617): pid=50538 uid=0 auid=0 ses=245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390679701.272:83618): pid=50538 uid=0 auid=0 ses=245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390680061.282:83619): pid=50654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390680061.282:83620): pid=50654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390680061.282:83621): login pid=50654 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=246 >type=USER_START msg=audit(1390680061.282:83622): pid=50654 uid=0 auid=0 ses=246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390680061.282:83623): pid=50654 uid=0 auid=0 ses=246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390680061.302:83624): avc: denied { read } for pid=50672 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390680061.302:83624): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff4629620 a2=84800 a3=0 items=0 ppid=50669 pid=50672 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=246 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390680061.312:83625): pid=50654 uid=0 auid=0 ses=246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390680061.312:83626): pid=50654 uid=0 auid=0 ses=246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390680601.322:83627): pid=50849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390680601.322:83628): pid=50849 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390680601.322:83629): login pid=50849 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=247 >type=USER_START msg=audit(1390680601.322:83630): pid=50849 uid=0 auid=0 ses=247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390680601.322:83631): pid=50849 uid=0 auid=0 ses=247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390680601.332:83632): pid=50849 uid=0 auid=0 ses=247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390680601.332:83633): pid=50849 uid=0 auid=0 ses=247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390681501.343:83634): pid=51126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390681501.343:83635): pid=51126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390681501.343:83636): login pid=51126 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=248 >type=USER_START msg=audit(1390681501.343:83637): pid=51126 uid=0 auid=0 ses=248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390681501.343:83638): pid=51126 uid=0 auid=0 ses=248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390681501.353:83639): pid=51126 uid=0 auid=0 ses=248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390681501.353:83640): pid=51126 uid=0 auid=0 ses=248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390682401.363:83641): pid=51405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390682401.363:83642): pid=51405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390682401.363:83643): login pid=51405 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=249 >type=USER_START msg=audit(1390682401.373:83644): pid=51405 uid=0 auid=0 ses=249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390682401.373:83645): pid=51405 uid=0 auid=0 ses=249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390682401.373:83646): pid=51405 uid=0 auid=0 ses=249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390682401.373:83647): pid=51405 uid=0 auid=0 ses=249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390683301.384:83648): pid=51682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390683301.384:83649): pid=51682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390683301.384:83650): login pid=51682 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=250 >type=USER_START msg=audit(1390683301.394:83651): pid=51682 uid=0 auid=0 ses=250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390683301.394:83652): pid=51682 uid=0 auid=0 ses=250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390683301.394:83653): pid=51682 uid=0 auid=0 ses=250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390683301.394:83654): pid=51682 uid=0 auid=0 ses=250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390683661.404:83655): pid=51798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390683661.404:83656): pid=51798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390683661.404:83657): login pid=51798 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=251 >type=USER_START msg=audit(1390683661.404:83658): pid=51798 uid=0 auid=0 ses=251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390683661.414:83659): pid=51798 uid=0 auid=0 ses=251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390683661.424:83660): avc: denied { read } for pid=51814 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390683661.424:83660): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd0050d70 a2=84800 a3=0 items=0 ppid=51812 pid=51814 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=251 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390683661.434:83661): pid=51798 uid=0 auid=0 ses=251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390683661.444:83662): pid=51798 uid=0 auid=0 ses=251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390684201.444:83663): pid=51991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390684201.444:83664): pid=51991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390684201.444:83665): login pid=51991 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=252 >type=USER_START msg=audit(1390684201.454:83666): pid=51991 uid=0 auid=0 ses=252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390684201.454:83667): pid=51991 uid=0 auid=0 ses=252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390684201.464:83668): pid=51991 uid=0 auid=0 ses=252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390684201.464:83669): pid=51991 uid=0 auid=0 ses=252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390685101.475:83670): pid=52270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390685101.475:83671): pid=52270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390685101.475:83672): login pid=52270 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=253 >type=USER_START msg=audit(1390685101.485:83673): pid=52270 uid=0 auid=0 ses=253 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390685101.485:83674): pid=52270 uid=0 auid=0 ses=253 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390685101.495:83675): pid=52270 uid=0 auid=0 ses=253 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390685101.495:83676): pid=52270 uid=0 auid=0 ses=253 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390686001.515:83677): pid=52549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390686001.515:83678): pid=52549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390686001.515:83679): login pid=52549 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=254 >type=USER_START msg=audit(1390686001.515:83680): pid=52549 uid=0 auid=0 ses=254 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390686001.515:83681): pid=52549 uid=0 auid=0 ses=254 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390686001.535:83682): pid=52549 uid=0 auid=0 ses=254 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390686001.535:83683): pid=52549 uid=0 auid=0 ses=254 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390686901.546:83684): pid=52825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390686901.546:83685): pid=52825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390686901.546:83686): login pid=52825 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=255 >type=USER_START msg=audit(1390686901.546:83687): pid=52825 uid=0 auid=0 ses=255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390686901.546:83688): pid=52825 uid=0 auid=0 ses=255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390686901.566:83689): pid=52825 uid=0 auid=0 ses=255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390686901.566:83690): pid=52825 uid=0 auid=0 ses=255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390687261.576:83691): pid=52942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390687261.576:83692): pid=52942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390687261.576:83693): login pid=52942 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=256 >type=USER_START msg=audit(1390687261.576:83694): pid=52942 uid=0 auid=0 ses=256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390687261.576:83695): pid=52942 uid=0 auid=0 ses=256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390687261.586:83696): avc: denied { read } for pid=52958 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390687261.586:83696): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcfa14140 a2=84800 a3=0 items=0 ppid=52956 pid=52958 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=256 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390687261.606:83697): pid=52942 uid=0 auid=0 ses=256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390687261.606:83698): pid=52942 uid=0 auid=0 ses=256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390687801.617:83699): pid=53137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390687801.617:83700): pid=53137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390687801.617:83701): login pid=53137 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=257 >type=USER_START msg=audit(1390687801.617:83702): pid=53137 uid=0 auid=0 ses=257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390687801.617:83703): pid=53137 uid=0 auid=0 ses=257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390687801.627:83704): pid=53137 uid=0 auid=0 ses=257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390687801.627:83705): pid=53137 uid=0 auid=0 ses=257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390688701.637:83706): pid=53415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390688701.637:83707): pid=53415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390688701.637:83708): login pid=53415 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=258 >type=USER_START msg=audit(1390688701.637:83709): pid=53415 uid=0 auid=0 ses=258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390688701.637:83710): pid=53415 uid=0 auid=0 ses=258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390688701.647:83711): pid=53415 uid=0 auid=0 ses=258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390688701.647:83712): pid=53415 uid=0 auid=0 ses=258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390689601.648:83713): pid=53694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390689601.648:83714): pid=53694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390689601.648:83715): login pid=53694 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=259 >type=USER_START msg=audit(1390689601.648:83716): pid=53694 uid=0 auid=0 ses=259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390689601.648:83717): pid=53694 uid=0 auid=0 ses=259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390689601.658:83718): pid=53694 uid=0 auid=0 ses=259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390689601.658:83719): pid=53694 uid=0 auid=0 ses=259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390690501.668:83720): pid=53973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390690501.668:83721): pid=53973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390690501.668:83722): login pid=53973 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=260 >type=USER_START msg=audit(1390690501.668:83723): pid=53973 uid=0 auid=0 ses=260 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390690501.668:83724): pid=53973 uid=0 auid=0 ses=260 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390690501.678:83725): pid=53973 uid=0 auid=0 ses=260 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390690501.688:83726): pid=53973 uid=0 auid=0 ses=260 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390690861.688:83727): pid=54091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390690861.688:83728): pid=54091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390690861.688:83729): login pid=54091 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=261 >type=USER_START msg=audit(1390690861.698:83730): pid=54091 uid=0 auid=0 ses=261 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390690861.698:83731): pid=54091 uid=0 auid=0 ses=261 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390690861.708:83732): avc: denied { read } for pid=54107 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390690861.708:83732): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff6d99200 a2=84800 a3=0 items=0 ppid=54105 pid=54107 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=261 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390690861.728:83733): pid=54091 uid=0 auid=0 ses=261 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390690861.728:83734): pid=54091 uid=0 auid=0 ses=261 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390691401.739:83735): pid=54284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390691401.739:83736): pid=54284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390691401.739:83737): login pid=54284 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=262 >type=USER_START msg=audit(1390691401.739:83738): pid=54284 uid=0 auid=0 ses=262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390691401.739:83739): pid=54284 uid=0 auid=0 ses=262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390691401.749:83740): pid=54284 uid=0 auid=0 ses=262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390691401.749:83741): pid=54284 uid=0 auid=0 ses=262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390692301.759:83742): pid=54562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390692301.759:83743): pid=54562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390692301.759:83744): login pid=54562 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=263 >type=USER_START msg=audit(1390692301.759:83745): pid=54562 uid=0 auid=0 ses=263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390692301.759:83746): pid=54562 uid=0 auid=0 ses=263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390692301.769:83747): pid=54562 uid=0 auid=0 ses=263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390692301.769:83748): pid=54562 uid=0 auid=0 ses=263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390693201.790:83749): pid=54840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390693201.790:83750): pid=54840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390693201.790:83751): login pid=54840 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=264 >type=USER_START msg=audit(1390693201.790:83752): pid=54840 uid=0 auid=0 ses=264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390693201.790:83753): pid=54840 uid=0 auid=0 ses=264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390693201.810:83754): pid=54840 uid=0 auid=0 ses=264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390693201.810:83755): pid=54840 uid=0 auid=0 ses=264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390694101.830:83756): pid=55118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390694101.830:83757): pid=55118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390694101.830:83758): login pid=55118 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=265 >type=USER_START msg=audit(1390694101.830:83759): pid=55118 uid=0 auid=0 ses=265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390694101.830:83760): pid=55118 uid=0 auid=0 ses=265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390694101.850:83761): pid=55118 uid=0 auid=0 ses=265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390694101.850:83762): pid=55118 uid=0 auid=0 ses=265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390694461.861:83763): pid=55237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390694461.861:83764): pid=55237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390694461.861:83765): login pid=55237 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=266 >type=USER_START msg=audit(1390694461.861:83766): pid=55237 uid=0 auid=0 ses=266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390694461.861:83767): pid=55237 uid=0 auid=0 ses=266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390694461.881:83768): avc: denied { read } for pid=55253 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390694461.881:83768): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe3727690 a2=84800 a3=0 items=0 ppid=55251 pid=55253 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=266 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390694461.891:83769): pid=55237 uid=0 auid=0 ses=266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390694461.901:83770): pid=55237 uid=0 auid=0 ses=266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390695001.901:83771): pid=55428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390695001.901:83772): pid=55428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390695001.901:83773): login pid=55428 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=267 >type=USER_START msg=audit(1390695001.911:83774): pid=55428 uid=0 auid=0 ses=267 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390695001.911:83775): pid=55428 uid=0 auid=0 ses=267 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390695001.921:83776): pid=55428 uid=0 auid=0 ses=267 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390695001.921:83777): pid=55428 uid=0 auid=0 ses=267 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390695901.931:83778): pid=55704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390695901.931:83779): pid=55704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390695901.931:83780): login pid=55704 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=268 >type=USER_START msg=audit(1390695901.931:83781): pid=55704 uid=0 auid=0 ses=268 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390695901.931:83782): pid=55704 uid=0 auid=0 ses=268 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390695901.941:83783): pid=55704 uid=0 auid=0 ses=268 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390695901.941:83784): pid=55704 uid=0 auid=0 ses=268 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390696801.952:83785): pid=55986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390696801.952:83786): pid=55986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390696801.952:83787): login pid=55986 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=269 >type=USER_START msg=audit(1390696801.952:83788): pid=55986 uid=0 auid=0 ses=269 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390696801.952:83789): pid=55986 uid=0 auid=0 ses=269 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390696801.972:83790): pid=55986 uid=0 auid=0 ses=269 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390696801.972:83791): pid=55986 uid=0 auid=0 ses=269 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390697701.982:83792): pid=56263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390697701.982:83793): pid=56263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390697701.982:83794): login pid=56263 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=270 >type=USER_START msg=audit(1390697701.982:83795): pid=56263 uid=0 auid=0 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390697701.982:83796): pid=56263 uid=0 auid=0 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390697701.992:83797): pid=56263 uid=0 auid=0 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390697701.992:83798): pid=56263 uid=0 auid=0 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390698061.993:83799): pid=56379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390698061.993:83800): pid=56379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390698062.003:83801): login pid=56379 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=271 >type=USER_START msg=audit(1390698062.003:83802): pid=56379 uid=0 auid=0 ses=271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390698062.003:83803): pid=56379 uid=0 auid=0 ses=271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390698062.013:83804): avc: denied { read } for pid=56395 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390698062.013:83804): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd7cddb60 a2=84800 a3=0 items=0 ppid=56393 pid=56395 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=271 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390698062.023:83805): pid=56379 uid=0 auid=0 ses=271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390698062.033:83806): pid=56379 uid=0 auid=0 ses=271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390698601.033:83807): pid=56571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390698601.033:83808): pid=56571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390698601.033:83809): login pid=56571 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=272 >type=USER_START msg=audit(1390698601.043:83810): pid=56571 uid=0 auid=0 ses=272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390698601.043:83811): pid=56571 uid=0 auid=0 ses=272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390698601.043:83812): pid=56571 uid=0 auid=0 ses=272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390698601.053:83813): pid=56571 uid=0 auid=0 ses=272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390699501.054:83814): pid=56850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390699501.054:83815): pid=56850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390699501.064:83816): login pid=56850 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=273 >type=USER_START msg=audit(1390699501.064:83817): pid=56850 uid=0 auid=0 ses=273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390699501.064:83818): pid=56850 uid=0 auid=0 ses=273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390699501.064:83819): pid=56850 uid=0 auid=0 ses=273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390699501.074:83820): pid=56850 uid=0 auid=0 ses=273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390700401.084:83821): pid=57127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390700401.084:83822): pid=57127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390700401.084:83823): login pid=57127 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=274 >type=USER_START msg=audit(1390700401.084:83824): pid=57127 uid=0 auid=0 ses=274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390700401.084:83825): pid=57127 uid=0 auid=0 ses=274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390700401.094:83826): pid=57127 uid=0 auid=0 ses=274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390700401.094:83827): pid=57127 uid=0 auid=0 ses=274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390701301.105:83828): pid=57404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390701301.105:83829): pid=57404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390701301.105:83830): login pid=57404 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=275 >type=USER_START msg=audit(1390701301.105:83831): pid=57404 uid=0 auid=0 ses=275 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390701301.105:83832): pid=57404 uid=0 auid=0 ses=275 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390701301.115:83833): pid=57404 uid=0 auid=0 ses=275 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390701301.115:83834): pid=57404 uid=0 auid=0 ses=275 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390701661.125:83835): pid=57521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390701661.125:83836): pid=57521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390701661.125:83837): login pid=57521 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=276 >type=USER_START msg=audit(1390701661.125:83838): pid=57521 uid=0 auid=0 ses=276 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390701661.125:83839): pid=57521 uid=0 auid=0 ses=276 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390701661.145:83840): avc: denied { read } for pid=57540 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390701661.145:83840): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd0d17500 a2=84800 a3=0 items=0 ppid=57538 pid=57540 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=276 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390701661.155:83841): pid=57521 uid=0 auid=0 ses=276 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390701661.165:83842): pid=57521 uid=0 auid=0 ses=276 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390702201.165:83843): pid=57718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390702201.165:83844): pid=57718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390702201.165:83845): login pid=57718 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=277 >type=USER_START msg=audit(1390702201.175:83846): pid=57718 uid=0 auid=0 ses=277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390702201.175:83847): pid=57718 uid=0 auid=0 ses=277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390702201.175:83848): pid=57718 uid=0 auid=0 ses=277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390702201.185:83849): pid=57718 uid=0 auid=0 ses=277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390703101.196:83850): pid=57995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390703101.196:83851): pid=57995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390703101.196:83852): login pid=57995 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=278 >type=USER_START msg=audit(1390703101.196:83853): pid=57995 uid=0 auid=0 ses=278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390703101.206:83854): pid=57995 uid=0 auid=0 ses=278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390703101.216:83855): pid=57995 uid=0 auid=0 ses=278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390703101.216:83856): pid=57995 uid=0 auid=0 ses=278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390704001.226:83857): pid=58274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390704001.226:83858): pid=58274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390704001.226:83859): login pid=58274 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=279 >type=USER_START msg=audit(1390704001.226:83860): pid=58274 uid=0 auid=0 ses=279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390704001.226:83861): pid=58274 uid=0 auid=0 ses=279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390704001.236:83862): pid=58274 uid=0 auid=0 ses=279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390704001.236:83863): pid=58274 uid=0 auid=0 ses=279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390704901.247:83864): pid=58551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390704901.247:83865): pid=58551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390704901.247:83866): login pid=58551 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=280 >type=USER_START msg=audit(1390704901.247:83867): pid=58551 uid=0 auid=0 ses=280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390704901.247:83868): pid=58551 uid=0 auid=0 ses=280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390704901.257:83869): pid=58551 uid=0 auid=0 ses=280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390704901.257:83870): pid=58551 uid=0 auid=0 ses=280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390705201.267:83871): pid=58649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390705201.267:83872): pid=58649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390705201.267:83873): login pid=58649 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=281 >type=USER_START msg=audit(1390705201.267:83874): pid=58649 uid=0 auid=0 ses=281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390705201.267:83875): pid=58649 uid=0 auid=0 ses=281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390705201.567:83876): pid=58649 uid=0 auid=0 ses=281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390705201.567:83877): pid=58649 uid=0 auid=0 ses=281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390705261.577:83878): pid=58675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390705261.577:83879): pid=58675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390705261.577:83880): login pid=58675 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=282 >type=USER_START msg=audit(1390705261.577:83881): pid=58675 uid=0 auid=0 ses=282 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390705261.577:83882): pid=58675 uid=0 auid=0 ses=282 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390705261.607:83883): avc: denied { read } for pid=58694 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390705261.607:83883): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc5bd1410 a2=84800 a3=0 items=0 ppid=58692 pid=58694 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=282 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390705261.617:83884): pid=58675 uid=0 auid=0 ses=282 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390705261.617:83885): pid=58675 uid=0 auid=0 ses=282 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390705801.627:83886): pid=58872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390705801.627:83887): pid=58872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390705801.627:83888): login pid=58872 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=283 >type=USER_START msg=audit(1390705801.627:83889): pid=58872 uid=0 auid=0 ses=283 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390705801.627:83890): pid=58872 uid=0 auid=0 ses=283 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390705801.637:83891): pid=58872 uid=0 auid=0 ses=283 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390705801.637:83892): pid=58872 uid=0 auid=0 ses=283 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390706701.638:83893): pid=59148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390706701.638:83894): pid=59148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390706701.638:83895): login pid=59148 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=284 >type=USER_START msg=audit(1390706701.638:83896): pid=59148 uid=0 auid=0 ses=284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390706701.638:83897): pid=59148 uid=0 auid=0 ses=284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390706701.648:83898): pid=59148 uid=0 auid=0 ses=284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390706701.648:83899): pid=59148 uid=0 auid=0 ses=284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390707601.658:83900): pid=59428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390707601.658:83901): pid=59428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390707601.658:83902): login pid=59428 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=285 >type=USER_START msg=audit(1390707601.658:83903): pid=59428 uid=0 auid=0 ses=285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390707601.668:83904): pid=59428 uid=0 auid=0 ses=285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390707601.668:83905): pid=59428 uid=0 auid=0 ses=285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390707601.668:83906): pid=59428 uid=0 auid=0 ses=285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390708501.679:83907): pid=59710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390708501.679:83908): pid=59710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390708501.679:83909): login pid=59710 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=286 >type=USER_START msg=audit(1390708501.689:83910): pid=59710 uid=0 auid=0 ses=286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390708501.689:83911): pid=59710 uid=0 auid=0 ses=286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390708501.689:83912): pid=59710 uid=0 auid=0 ses=286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390708501.689:83913): pid=59710 uid=0 auid=0 ses=286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390708861.699:83914): pid=59826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390708861.699:83915): pid=59826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390708861.699:83916): login pid=59826 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=287 >type=USER_START msg=audit(1390708861.699:83917): pid=59826 uid=0 auid=0 ses=287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390708861.699:83918): pid=59826 uid=0 auid=0 ses=287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390708861.729:83919): avc: denied { read } for pid=59846 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390708861.729:83919): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffecc257e0 a2=84800 a3=0 items=0 ppid=59844 pid=59846 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=287 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390708861.739:83920): pid=59826 uid=0 auid=0 ses=287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390708861.739:83921): pid=59826 uid=0 auid=0 ses=287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390709401.749:83922): pid=60022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390709401.749:83923): pid=60022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390709401.749:83924): login pid=60022 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=288 >type=USER_START msg=audit(1390709401.749:83925): pid=60022 uid=0 auid=0 ses=288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390709401.749:83926): pid=60022 uid=0 auid=0 ses=288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390709401.759:83927): pid=60022 uid=0 auid=0 ses=288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390709401.759:83928): pid=60022 uid=0 auid=0 ses=288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390710301.770:83929): pid=60301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390710301.770:83930): pid=60301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390710301.770:83931): login pid=60301 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=289 >type=USER_START msg=audit(1390710301.780:83932): pid=60301 uid=0 auid=0 ses=289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390710301.780:83933): pid=60301 uid=0 auid=0 ses=289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390710301.790:83934): pid=60301 uid=0 auid=0 ses=289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390710301.790:83935): pid=60301 uid=0 auid=0 ses=289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390711201.810:83936): pid=60579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390711201.810:83937): pid=60579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390711201.810:83938): login pid=60579 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=290 >type=USER_START msg=audit(1390711201.810:83939): pid=60579 uid=0 auid=0 ses=290 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390711201.810:83940): pid=60579 uid=0 auid=0 ses=290 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390711201.830:83941): pid=60579 uid=0 auid=0 ses=290 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390711201.830:83942): pid=60579 uid=0 auid=0 ses=290 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390712101.841:83943): pid=60857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390712101.841:83944): pid=60857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390712101.841:83945): login pid=60857 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=291 >type=USER_START msg=audit(1390712101.841:83946): pid=60857 uid=0 auid=0 ses=291 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390712101.841:83947): pid=60857 uid=0 auid=0 ses=291 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390712101.851:83948): pid=60857 uid=0 auid=0 ses=291 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390712101.851:83949): pid=60857 uid=0 auid=0 ses=291 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390712461.861:83950): pid=60973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390712461.861:83951): pid=60973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390712461.861:83952): login pid=60973 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=292 >type=USER_START msg=audit(1390712461.861:83953): pid=60973 uid=0 auid=0 ses=292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390712461.861:83954): pid=60973 uid=0 auid=0 ses=292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390712461.881:83955): avc: denied { read } for pid=60992 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390712461.881:83955): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdf30c280 a2=84800 a3=0 items=0 ppid=60990 pid=60992 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=292 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390712461.891:83956): pid=60973 uid=0 auid=0 ses=292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390712461.901:83957): pid=60973 uid=0 auid=0 ses=292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390713001.902:83958): pid=61167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390713001.902:83959): pid=61167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390713001.902:83960): login pid=61167 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=293 >type=USER_START msg=audit(1390713001.912:83961): pid=61167 uid=0 auid=0 ses=293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390713001.912:83962): pid=61167 uid=0 auid=0 ses=293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390713001.912:83963): pid=61167 uid=0 auid=0 ses=293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390713001.922:83964): pid=61167 uid=0 auid=0 ses=293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390713181.892:83965): avc: denied { read } for pid=61232 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390713181.892:83965): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffecd22340 a2=84800 a3=0 items=0 ppid=61230 pid=61232 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=292 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1390713901.932:83966): pid=61506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390713901.932:83967): pid=61506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390713901.932:83968): login pid=61506 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=294 >type=USER_START msg=audit(1390713901.932:83969): pid=61506 uid=0 auid=0 ses=294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390713901.932:83970): pid=61506 uid=0 auid=0 ses=294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390713901.942:83971): pid=61506 uid=0 auid=0 ses=294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390713901.942:83972): pid=61506 uid=0 auid=0 ses=294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390714801.953:83973): pid=61784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390714801.953:83974): pid=61784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390714801.953:83975): login pid=61784 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=295 >type=USER_START msg=audit(1390714801.963:83976): pid=61784 uid=0 auid=0 ses=295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390714801.963:83977): pid=61784 uid=0 auid=0 ses=295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390714801.963:83978): pid=61784 uid=0 auid=0 ses=295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390714801.973:83979): pid=61784 uid=0 auid=0 ses=295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390715701.983:83980): pid=62062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390715701.983:83981): pid=62062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390715701.983:83982): login pid=62062 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=296 >type=USER_START msg=audit(1390715701.983:83983): pid=62062 uid=0 auid=0 ses=296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390715701.983:83984): pid=62062 uid=0 auid=0 ses=296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390715701.993:83985): pid=62062 uid=0 auid=0 ses=296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390715701.993:83986): pid=62062 uid=0 auid=0 ses=296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390716062.003:83987): pid=62178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390716062.003:83988): pid=62178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390716062.003:83989): login pid=62178 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=297 >type=USER_START msg=audit(1390716062.003:83990): pid=62178 uid=0 auid=0 ses=297 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390716062.003:83991): pid=62178 uid=0 auid=0 ses=297 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390716062.023:83992): avc: denied { read } for pid=62194 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390716062.023:83992): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff9b5b0f0 a2=84800 a3=0 items=0 ppid=62192 pid=62194 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=297 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390716062.033:83993): pid=62178 uid=0 auid=0 ses=297 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390716062.033:83994): pid=62178 uid=0 auid=0 ses=297 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390716601.044:83995): pid=62372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390716601.044:83996): pid=62372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390716601.044:83997): login pid=62372 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=298 >type=USER_START msg=audit(1390716601.044:83998): pid=62372 uid=0 auid=0 ses=298 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390716601.044:83999): pid=62372 uid=0 auid=0 ses=298 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390716601.054:84000): pid=62372 uid=0 auid=0 ses=298 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390716601.054:84001): pid=62372 uid=0 auid=0 ses=298 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390717501.064:84002): pid=62652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390717501.064:84003): pid=62652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390717501.064:84004): login pid=62652 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=299 >type=USER_START msg=audit(1390717501.074:84005): pid=62652 uid=0 auid=0 ses=299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390717501.074:84006): pid=62652 uid=0 auid=0 ses=299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390717501.074:84007): pid=62652 uid=0 auid=0 ses=299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390717501.074:84008): pid=62652 uid=0 auid=0 ses=299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390718401.095:84009): pid=62931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390718401.095:84010): pid=62931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390718401.095:84011): login pid=62931 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=300 >type=USER_START msg=audit(1390718401.095:84012): pid=62931 uid=0 auid=0 ses=300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390718401.095:84013): pid=62931 uid=0 auid=0 ses=300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390718401.115:84014): pid=62931 uid=0 auid=0 ses=300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390718401.115:84015): pid=62931 uid=0 auid=0 ses=300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390719301.125:84016): pid=63210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390719301.125:84017): pid=63210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390719301.125:84018): login pid=63210 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=301 >type=USER_START msg=audit(1390719301.135:84019): pid=63210 uid=0 auid=0 ses=301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390719301.135:84020): pid=63210 uid=0 auid=0 ses=301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390719301.145:84021): pid=63210 uid=0 auid=0 ses=301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390719301.145:84022): pid=63210 uid=0 auid=0 ses=301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390719661.155:84023): pid=63326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390719661.155:84024): pid=63326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390719661.155:84025): login pid=63326 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=302 >type=USER_START msg=audit(1390719661.155:84026): pid=63326 uid=0 auid=0 ses=302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390719661.155:84027): pid=63326 uid=0 auid=0 ses=302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390719661.175:84028): avc: denied { read } for pid=63342 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390719661.175:84028): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffe898550 a2=84800 a3=0 items=0 ppid=63340 pid=63342 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=302 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390719661.195:84029): pid=63326 uid=0 auid=0 ses=302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390719661.195:84030): pid=63326 uid=0 auid=0 ses=302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390720201.206:84031): pid=63518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390720201.206:84032): pid=63518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390720201.206:84033): login pid=63518 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=303 >type=USER_START msg=audit(1390720201.206:84034): pid=63518 uid=0 auid=0 ses=303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390720201.206:84035): pid=63518 uid=0 auid=0 ses=303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390720201.216:84036): pid=63518 uid=0 auid=0 ses=303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390720201.216:84037): pid=63518 uid=0 auid=0 ses=303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390721101.226:84038): pid=63798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390721101.226:84039): pid=63798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390721101.226:84040): login pid=63798 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=304 >type=USER_START msg=audit(1390721101.226:84041): pid=63798 uid=0 auid=0 ses=304 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390721101.226:84042): pid=63798 uid=0 auid=0 ses=304 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390721101.236:84043): pid=63798 uid=0 auid=0 ses=304 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390721101.236:84044): pid=63798 uid=0 auid=0 ses=304 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390722001.247:84045): pid=64075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390722001.247:84046): pid=64075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390722001.247:84047): login pid=64075 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=305 >type=USER_START msg=audit(1390722001.247:84048): pid=64075 uid=0 auid=0 ses=305 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390722001.247:84049): pid=64075 uid=0 auid=0 ses=305 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390722001.257:84050): pid=64075 uid=0 auid=0 ses=305 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390722001.257:84051): pid=64075 uid=0 auid=0 ses=305 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390722901.267:84052): pid=64353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390722901.267:84053): pid=64353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390722901.267:84054): login pid=64353 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=306 >type=USER_START msg=audit(1390722901.267:84055): pid=64353 uid=0 auid=0 ses=306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390722901.267:84056): pid=64353 uid=0 auid=0 ses=306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390722901.277:84057): pid=64353 uid=0 auid=0 ses=306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390722901.277:84058): pid=64353 uid=0 auid=0 ses=306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390723261.278:84059): pid=64471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390723261.278:84060): pid=64471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390723261.278:84061): login pid=64471 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=307 >type=USER_START msg=audit(1390723261.278:84062): pid=64471 uid=0 auid=0 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390723261.278:84063): pid=64471 uid=0 auid=0 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390723261.298:84064): avc: denied { read } for pid=64487 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390723261.298:84064): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffeaea2740 a2=84800 a3=0 items=0 ppid=64485 pid=64487 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=307 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390723261.318:84065): pid=64471 uid=0 auid=0 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390723261.318:84066): pid=64471 uid=0 auid=0 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390723801.318:84067): pid=64663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390723801.318:84068): pid=64663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390723801.318:84069): login pid=64663 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=308 >type=USER_START msg=audit(1390723801.328:84070): pid=64663 uid=0 auid=0 ses=308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390723801.328:84071): pid=64663 uid=0 auid=0 ses=308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390723801.328:84072): pid=64663 uid=0 auid=0 ses=308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390723801.338:84073): pid=64663 uid=0 auid=0 ses=308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390724701.348:84074): pid=64941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390724701.348:84075): pid=64941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390724701.348:84076): login pid=64941 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=309 >type=USER_START msg=audit(1390724701.348:84077): pid=64941 uid=0 auid=0 ses=309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390724701.348:84078): pid=64941 uid=0 auid=0 ses=309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390724701.358:84079): pid=64941 uid=0 auid=0 ses=309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390724701.358:84080): pid=64941 uid=0 auid=0 ses=309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390725601.369:84081): pid=65219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390725601.369:84082): pid=65219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390725601.369:84083): login pid=65219 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=310 >type=USER_START msg=audit(1390725601.369:84084): pid=65219 uid=0 auid=0 ses=310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390725601.369:84085): pid=65219 uid=0 auid=0 ses=310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390725601.379:84086): pid=65219 uid=0 auid=0 ses=310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390725601.379:84087): pid=65219 uid=0 auid=0 ses=310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390726501.390:84088): pid=65497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390726501.390:84089): pid=65497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390726501.390:84090): login pid=65497 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=311 >type=USER_START msg=audit(1390726501.390:84091): pid=65497 uid=0 auid=0 ses=311 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390726501.390:84092): pid=65497 uid=0 auid=0 ses=311 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390726501.400:84093): pid=65497 uid=0 auid=0 ses=311 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390726501.400:84094): pid=65497 uid=0 auid=0 ses=311 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390726861.410:84095): pid=394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390726861.410:84096): pid=394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390726861.410:84097): login pid=394 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=312 >type=USER_START msg=audit(1390726861.410:84098): pid=394 uid=0 auid=0 ses=312 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390726861.410:84099): pid=394 uid=0 auid=0 ses=312 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390726861.430:84100): avc: denied { read } for pid=413 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390726861.430:84100): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc0523f70 a2=84800 a3=0 items=0 ppid=411 pid=413 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=312 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390726861.440:84101): pid=394 uid=0 auid=0 ses=312 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390726861.440:84102): pid=394 uid=0 auid=0 ses=312 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390727401.460:84103): pid=603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390727401.460:84104): pid=603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390727401.460:84105): login pid=603 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=313 >type=USER_START msg=audit(1390727401.460:84106): pid=603 uid=0 auid=0 ses=313 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390727401.460:84107): pid=603 uid=0 auid=0 ses=313 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390727401.470:84108): pid=603 uid=0 auid=0 ses=313 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390727401.480:84109): pid=603 uid=0 auid=0 ses=313 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390728301.491:84110): pid=938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390728301.491:84111): pid=938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390728301.491:84112): login pid=938 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=314 >type=USER_START msg=audit(1390728301.501:84113): pid=938 uid=0 auid=0 ses=314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390728301.501:84114): pid=938 uid=0 auid=0 ses=314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390728301.511:84115): pid=938 uid=0 auid=0 ses=314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390728301.521:84116): pid=938 uid=0 auid=0 ses=314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390729201.531:84117): pid=1246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390729201.531:84118): pid=1246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390729201.531:84119): login pid=1246 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=315 >type=USER_START msg=audit(1390729201.531:84120): pid=1246 uid=0 auid=0 ses=315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390729201.531:84121): pid=1246 uid=0 auid=0 ses=315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390729201.541:84122): pid=1246 uid=0 auid=0 ses=315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390729201.541:84123): pid=1246 uid=0 auid=0 ses=315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390730101.552:84124): pid=1566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390730101.552:84125): pid=1566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390730101.552:84126): login pid=1566 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=316 >type=USER_START msg=audit(1390730101.552:84127): pid=1566 uid=0 auid=0 ses=316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390730101.552:84128): pid=1566 uid=0 auid=0 ses=316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390730101.562:84129): pid=1566 uid=0 auid=0 ses=316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390730101.562:84130): pid=1566 uid=0 auid=0 ses=316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390730461.572:84131): pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390730461.572:84132): pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390730461.572:84133): login pid=1684 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=317 >type=USER_START msg=audit(1390730461.572:84134): pid=1684 uid=0 auid=0 ses=317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390730461.572:84135): pid=1684 uid=0 auid=0 ses=317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390730461.592:84136): avc: denied { read } for pid=1700 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390730461.592:84136): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc898dc10 a2=84800 a3=0 items=0 ppid=1698 pid=1700 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=317 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390730461.602:84137): pid=1684 uid=0 auid=0 ses=317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390730461.602:84138): pid=1684 uid=0 auid=0 ses=317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390731001.612:84139): pid=1879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390731001.612:84140): pid=1879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390731001.612:84141): login pid=1879 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=318 >type=USER_START msg=audit(1390731001.612:84142): pid=1879 uid=0 auid=0 ses=318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390731001.612:84143): pid=1879 uid=0 auid=0 ses=318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390731001.622:84144): pid=1879 uid=0 auid=0 ses=318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390731001.622:84145): pid=1879 uid=0 auid=0 ses=318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390731901.633:84146): pid=2157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390731901.633:84147): pid=2157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390731901.633:84148): login pid=2157 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=319 >type=USER_START msg=audit(1390731901.633:84149): pid=2157 uid=0 auid=0 ses=319 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390731901.633:84150): pid=2157 uid=0 auid=0 ses=319 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390731901.643:84151): pid=2157 uid=0 auid=0 ses=319 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390731901.643:84152): pid=2157 uid=0 auid=0 ses=319 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390732801.653:84153): pid=2438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390732801.653:84154): pid=2438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390732801.653:84155): login pid=2438 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=320 >type=USER_START msg=audit(1390732801.653:84156): pid=2438 uid=0 auid=0 ses=320 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390732801.653:84157): pid=2438 uid=0 auid=0 ses=320 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390732801.663:84158): pid=2438 uid=0 auid=0 ses=320 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390732801.673:84159): pid=2438 uid=0 auid=0 ses=320 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390733701.684:84160): pid=2716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390733701.684:84161): pid=2716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390733701.684:84162): login pid=2716 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=321 >type=USER_START msg=audit(1390733701.684:84163): pid=2716 uid=0 auid=0 ses=321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390733701.684:84164): pid=2716 uid=0 auid=0 ses=321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390733701.694:84165): pid=2716 uid=0 auid=0 ses=321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390733701.694:84166): pid=2716 uid=0 auid=0 ses=321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390734061.694:84167): pid=2831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390734061.694:84168): pid=2831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390734061.694:84169): login pid=2831 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=322 >type=USER_START msg=audit(1390734061.704:84170): pid=2831 uid=0 auid=0 ses=322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390734061.704:84171): pid=2831 uid=0 auid=0 ses=322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390734061.714:84172): avc: denied { read } for pid=2849 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390734061.714:84172): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffdea66c0 a2=84800 a3=0 items=0 ppid=2847 pid=2849 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=322 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390734061.734:84173): pid=2831 uid=0 auid=0 ses=322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390734061.734:84174): pid=2831 uid=0 auid=0 ses=322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390734601.734:84175): pid=3025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390734601.744:84176): pid=3025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390734601.744:84177): login pid=3025 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=323 >type=USER_START msg=audit(1390734601.744:84178): pid=3025 uid=0 auid=0 ses=323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390734601.744:84179): pid=3025 uid=0 auid=0 ses=323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390734601.754:84180): pid=3025 uid=0 auid=0 ses=323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390734601.754:84181): pid=3025 uid=0 auid=0 ses=323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390735501.765:84182): pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390735501.765:84183): pid=3305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390735501.765:84184): login pid=3305 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=324 >type=USER_START msg=audit(1390735501.765:84185): pid=3305 uid=0 auid=0 ses=324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390735501.765:84186): pid=3305 uid=0 auid=0 ses=324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390735501.775:84187): pid=3305 uid=0 auid=0 ses=324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390735501.775:84188): pid=3305 uid=0 auid=0 ses=324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390736401.795:84189): pid=3582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390736401.795:84190): pid=3582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390736401.795:84191): login pid=3582 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=325 >type=USER_START msg=audit(1390736401.795:84192): pid=3582 uid=0 auid=0 ses=325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390736401.795:84193): pid=3582 uid=0 auid=0 ses=325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390736401.815:84194): pid=3582 uid=0 auid=0 ses=325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390736401.815:84195): pid=3582 uid=0 auid=0 ses=325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390737301.826:84196): pid=3860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390737301.826:84197): pid=3860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390737301.826:84198): login pid=3860 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=326 >type=USER_START msg=audit(1390737301.826:84199): pid=3860 uid=0 auid=0 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390737301.826:84200): pid=3860 uid=0 auid=0 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390737301.836:84201): pid=3860 uid=0 auid=0 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390737301.836:84202): pid=3860 uid=0 auid=0 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390737661.846:84203): pid=3979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390737661.846:84204): pid=3979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390737661.846:84205): login pid=3979 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=327 >type=USER_START msg=audit(1390737661.846:84206): pid=3979 uid=0 auid=0 ses=327 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390737661.846:84207): pid=3979 uid=0 auid=0 ses=327 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390737661.866:84208): avc: denied { read } for pid=3995 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390737661.866:84208): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff2041270 a2=84800 a3=0 items=0 ppid=3993 pid=3995 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=327 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390737661.876:84209): pid=3979 uid=0 auid=0 ses=327 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390737661.886:84210): pid=3979 uid=0 auid=0 ses=327 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390738201.887:84211): pid=4171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390738201.887:84212): pid=4171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390738201.887:84213): login pid=4171 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=328 >type=USER_START msg=audit(1390738201.897:84214): pid=4171 uid=0 auid=0 ses=328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390738201.897:84215): pid=4171 uid=0 auid=0 ses=328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390738201.897:84216): pid=4171 uid=0 auid=0 ses=328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390738201.907:84217): pid=4171 uid=0 auid=0 ses=328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390739101.917:84218): pid=4451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390739101.917:84219): pid=4451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390739101.917:84220): login pid=4451 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=329 >type=USER_START msg=audit(1390739101.917:84221): pid=4451 uid=0 auid=0 ses=329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390739101.917:84222): pid=4451 uid=0 auid=0 ses=329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390739101.927:84223): pid=4451 uid=0 auid=0 ses=329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390739101.927:84224): pid=4451 uid=0 auid=0 ses=329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390740001.928:84225): pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390740001.928:84226): pid=4727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390740001.928:84227): login pid=4727 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=330 >type=USER_START msg=audit(1390740001.928:84228): pid=4727 uid=0 auid=0 ses=330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390740001.928:84229): pid=4727 uid=0 auid=0 ses=330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390740001.938:84230): pid=4727 uid=0 auid=0 ses=330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390740001.938:84231): pid=4727 uid=0 auid=0 ses=330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390740901.948:84232): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390740901.948:84233): pid=5006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390740901.948:84234): login pid=5006 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=331 >type=USER_START msg=audit(1390740901.958:84235): pid=5006 uid=0 auid=0 ses=331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390740901.958:84236): pid=5006 uid=0 auid=0 ses=331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390740901.968:84237): pid=5006 uid=0 auid=0 ses=331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390740901.968:84238): pid=5006 uid=0 auid=0 ses=331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390741261.968:84239): pid=5123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390741261.968:84240): pid=5123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390741261.968:84241): login pid=5123 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=332 >type=USER_START msg=audit(1390741261.978:84242): pid=5123 uid=0 auid=0 ses=332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390741261.978:84243): pid=5123 uid=0 auid=0 ses=332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390741261.988:84244): avc: denied { read } for pid=5139 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390741261.988:84244): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffa0af1f0 a2=84800 a3=0 items=0 ppid=5137 pid=5139 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=332 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390741262.008:84245): pid=5123 uid=0 auid=0 ses=332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390741262.008:84246): pid=5123 uid=0 auid=0 ses=332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390741801.019:84247): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390741801.019:84248): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390741801.019:84249): login pid=5316 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=333 >type=USER_START msg=audit(1390741801.019:84250): pid=5316 uid=0 auid=0 ses=333 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390741801.019:84251): pid=5316 uid=0 auid=0 ses=333 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390741801.029:84252): pid=5316 uid=0 auid=0 ses=333 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390741801.029:84253): pid=5316 uid=0 auid=0 ses=333 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390742701.039:84254): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390742701.039:84255): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390742701.039:84256): login pid=5594 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=334 >type=USER_START msg=audit(1390742701.039:84257): pid=5594 uid=0 auid=0 ses=334 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390742701.039:84258): pid=5594 uid=0 auid=0 ses=334 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390742701.049:84259): pid=5594 uid=0 auid=0 ses=334 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390742701.049:84260): pid=5594 uid=0 auid=0 ses=334 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390743601.060:84261): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390743601.060:84262): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390743601.060:84263): login pid=5869 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=335 >type=USER_START msg=audit(1390743601.060:84264): pid=5869 uid=0 auid=0 ses=335 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390743601.060:84265): pid=5869 uid=0 auid=0 ses=335 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390743601.070:84266): pid=5869 uid=0 auid=0 ses=335 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390743601.070:84267): pid=5869 uid=0 auid=0 ses=335 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390744501.080:84268): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390744501.080:84269): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390744501.090:84270): login pid=6149 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=336 >type=USER_START msg=audit(1390744501.090:84271): pid=6149 uid=0 auid=0 ses=336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390744501.090:84272): pid=6149 uid=0 auid=0 ses=336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390744501.100:84273): pid=6149 uid=0 auid=0 ses=336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390744501.110:84274): pid=6149 uid=0 auid=0 ses=336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390744861.110:84275): pid=6264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390744861.110:84276): pid=6264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390744861.110:84277): login pid=6264 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=337 >type=USER_START msg=audit(1390744861.120:84278): pid=6264 uid=0 auid=0 ses=337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390744861.120:84279): pid=6264 uid=0 auid=0 ses=337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390744861.130:84280): avc: denied { read } for pid=6280 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390744861.130:84280): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd95d3720 a2=84800 a3=0 items=0 ppid=6278 pid=6280 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=337 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390744861.150:84281): pid=6264 uid=0 auid=0 ses=337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390744861.150:84282): pid=6264 uid=0 auid=0 ses=337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390745401.161:84283): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390745401.161:84284): pid=6460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390745401.161:84285): login pid=6460 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=338 >type=USER_START msg=audit(1390745401.161:84286): pid=6460 uid=0 auid=0 ses=338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390745401.161:84287): pid=6460 uid=0 auid=0 ses=338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390745401.181:84288): pid=6460 uid=0 auid=0 ses=338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390745401.181:84289): pid=6460 uid=0 auid=0 ses=338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390746301.191:84290): pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390746301.191:84291): pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390746301.191:84292): login pid=6738 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=339 >type=USER_START msg=audit(1390746301.191:84293): pid=6738 uid=0 auid=0 ses=339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390746301.191:84294): pid=6738 uid=0 auid=0 ses=339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390746301.201:84295): pid=6738 uid=0 auid=0 ses=339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390746301.201:84296): pid=6738 uid=0 auid=0 ses=339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390747201.212:84297): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390747201.212:84298): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390747201.212:84299): login pid=7017 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=340 >type=USER_START msg=audit(1390747201.222:84300): pid=7017 uid=0 auid=0 ses=340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390747201.222:84301): pid=7017 uid=0 auid=0 ses=340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390747201.222:84302): pid=7017 uid=0 auid=0 ses=340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390747201.222:84303): pid=7017 uid=0 auid=0 ses=340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390748101.232:84304): pid=7297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390748101.232:84305): pid=7297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390748101.232:84306): login pid=7297 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=341 >type=USER_START msg=audit(1390748101.242:84307): pid=7297 uid=0 auid=0 ses=341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390748101.242:84308): pid=7297 uid=0 auid=0 ses=341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390748101.242:84309): pid=7297 uid=0 auid=0 ses=341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390748101.252:84310): pid=7297 uid=0 auid=0 ses=341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390748461.253:84311): pid=7413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390748461.253:84312): pid=7413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390748461.253:84313): login pid=7413 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=342 >type=USER_START msg=audit(1390748461.263:84314): pid=7413 uid=0 auid=0 ses=342 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390748461.263:84315): pid=7413 uid=0 auid=0 ses=342 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390748461.273:84316): avc: denied { read } for pid=7429 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390748461.273:84316): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffedae5e60 a2=84800 a3=0 items=0 ppid=7427 pid=7429 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=342 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390748461.283:84317): pid=7413 uid=0 auid=0 ses=342 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390748461.283:84318): pid=7413 uid=0 auid=0 ses=342 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390749001.293:84319): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390749001.293:84320): pid=7604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390749001.293:84321): login pid=7604 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=343 >type=USER_START msg=audit(1390749001.303:84322): pid=7604 uid=0 auid=0 ses=343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390749001.303:84323): pid=7604 uid=0 auid=0 ses=343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390749001.313:84324): pid=7604 uid=0 auid=0 ses=343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390749001.313:84325): pid=7604 uid=0 auid=0 ses=343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390749901.323:84326): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390749901.323:84327): pid=7886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390749901.323:84328): login pid=7886 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=344 >type=USER_START msg=audit(1390749901.323:84329): pid=7886 uid=0 auid=0 ses=344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390749901.323:84330): pid=7886 uid=0 auid=0 ses=344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390749901.333:84331): pid=7886 uid=0 auid=0 ses=344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390749901.333:84332): pid=7886 uid=0 auid=0 ses=344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390750801.344:84333): pid=8164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390750801.344:84334): pid=8164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390750801.344:84335): login pid=8164 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=345 >type=USER_START msg=audit(1390750801.344:84336): pid=8164 uid=0 auid=0 ses=345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390750801.344:84337): pid=8164 uid=0 auid=0 ses=345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390750801.354:84338): pid=8164 uid=0 auid=0 ses=345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390750801.354:84339): pid=8164 uid=0 auid=0 ses=345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390751701.365:84340): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390751701.365:84341): pid=8442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390751701.365:84342): login pid=8442 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=346 >type=USER_START msg=audit(1390751701.365:84343): pid=8442 uid=0 auid=0 ses=346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390751701.365:84344): pid=8442 uid=0 auid=0 ses=346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390751701.375:84345): pid=8442 uid=0 auid=0 ses=346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390751701.375:84346): pid=8442 uid=0 auid=0 ses=346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390752061.385:84347): pid=8560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390752061.385:84348): pid=8560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390752061.385:84349): login pid=8560 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=347 >type=USER_START msg=audit(1390752061.385:84350): pid=8560 uid=0 auid=0 ses=347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390752061.385:84351): pid=8560 uid=0 auid=0 ses=347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390752061.405:84352): avc: denied { read } for pid=8576 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390752061.405:84352): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffeb314900 a2=84800 a3=0 items=0 ppid=8574 pid=8576 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=347 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390752061.415:84353): pid=8560 uid=0 auid=0 ses=347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390752061.415:84354): pid=8560 uid=0 auid=0 ses=347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390752601.425:84355): pid=8755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390752601.425:84356): pid=8755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390752601.425:84357): login pid=8755 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=348 >type=USER_START msg=audit(1390752601.435:84358): pid=8755 uid=0 auid=0 ses=348 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390752601.435:84359): pid=8755 uid=0 auid=0 ses=348 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390752601.445:84360): pid=8755 uid=0 auid=0 ses=348 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390752601.445:84361): pid=8755 uid=0 auid=0 ses=348 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390753501.466:84362): pid=9033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390753501.466:84363): pid=9033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390753501.466:84364): login pid=9033 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=349 >type=USER_START msg=audit(1390753501.466:84365): pid=9033 uid=0 auid=0 ses=349 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390753501.466:84366): pid=9033 uid=0 auid=0 ses=349 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390753501.486:84367): pid=9033 uid=0 auid=0 ses=349 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390753501.486:84368): pid=9033 uid=0 auid=0 ses=349 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390754401.496:84369): pid=9313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390754401.496:84370): pid=9313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390754401.496:84371): login pid=9313 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=350 >type=USER_START msg=audit(1390754401.496:84372): pid=9313 uid=0 auid=0 ses=350 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390754401.496:84373): pid=9313 uid=0 auid=0 ses=350 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390754401.506:84374): pid=9313 uid=0 auid=0 ses=350 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390754401.506:84375): pid=9313 uid=0 auid=0 ses=350 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390755301.517:84376): pid=9591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390755301.517:84377): pid=9591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390755301.517:84378): login pid=9591 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=351 >type=USER_START msg=audit(1390755301.517:84379): pid=9591 uid=0 auid=0 ses=351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390755301.517:84380): pid=9591 uid=0 auid=0 ses=351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390755301.527:84381): pid=9591 uid=0 auid=0 ses=351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390755301.527:84382): pid=9591 uid=0 auid=0 ses=351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390755661.537:84383): pid=9706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390755661.537:84384): pid=9706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390755661.537:84385): login pid=9706 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=352 >type=USER_START msg=audit(1390755661.537:84386): pid=9706 uid=0 auid=0 ses=352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390755661.537:84387): pid=9706 uid=0 auid=0 ses=352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390755661.557:84388): avc: denied { read } for pid=9722 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390755661.557:84388): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd5ac5de0 a2=84800 a3=0 items=0 ppid=9720 pid=9722 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=352 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390755661.567:84389): pid=9706 uid=0 auid=0 ses=352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390755661.567:84390): pid=9706 uid=0 auid=0 ses=352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390756201.577:84391): pid=9903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390756201.577:84392): pid=9903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390756201.577:84393): login pid=9903 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=353 >type=USER_START msg=audit(1390756201.577:84394): pid=9903 uid=0 auid=0 ses=353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390756201.577:84395): pid=9903 uid=0 auid=0 ses=353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390756201.587:84396): pid=9903 uid=0 auid=0 ses=353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390756201.587:84397): pid=9903 uid=0 auid=0 ses=353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390757101.588:84398): pid=10181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390757101.588:84399): pid=10181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390757101.588:84400): login pid=10181 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=354 >type=USER_START msg=audit(1390757101.588:84401): pid=10181 uid=0 auid=0 ses=354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390757101.588:84402): pid=10181 uid=0 auid=0 ses=354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390757101.598:84403): pid=10181 uid=0 auid=0 ses=354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390757101.608:84404): pid=10181 uid=0 auid=0 ses=354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390758001.618:84405): pid=10458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390758001.618:84406): pid=10458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390758001.618:84407): login pid=10458 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=355 >type=USER_START msg=audit(1390758001.618:84408): pid=10458 uid=0 auid=0 ses=355 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390758001.618:84409): pid=10458 uid=0 auid=0 ses=355 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390758001.628:84410): pid=10458 uid=0 auid=0 ses=355 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390758001.628:84411): pid=10458 uid=0 auid=0 ses=355 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390758901.639:84412): pid=10738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390758901.639:84413): pid=10738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390758901.639:84414): login pid=10738 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=356 >type=USER_START msg=audit(1390758901.639:84415): pid=10738 uid=0 auid=0 ses=356 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390758901.639:84416): pid=10738 uid=0 auid=0 ses=356 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390758901.649:84417): pid=10738 uid=0 auid=0 ses=356 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390758901.649:84418): pid=10738 uid=0 auid=0 ses=356 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390759261.659:84419): pid=10854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390759261.659:84420): pid=10854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390759261.659:84421): login pid=10854 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=357 >type=USER_START msg=audit(1390759261.659:84422): pid=10854 uid=0 auid=0 ses=357 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390759261.659:84423): pid=10854 uid=0 auid=0 ses=357 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390759261.679:84424): avc: denied { read } for pid=10870 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390759261.679:84424): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffeb806080 a2=84800 a3=0 items=0 ppid=10868 pid=10870 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=357 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390759261.689:84425): pid=10854 uid=0 auid=0 ses=357 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390759261.689:84426): pid=10854 uid=0 auid=0 ses=357 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390759801.699:84427): pid=11047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390759801.699:84428): pid=11047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390759801.699:84429): login pid=11047 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=358 >type=USER_START msg=audit(1390759801.699:84430): pid=11047 uid=0 auid=0 ses=358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390759801.699:84431): pid=11047 uid=0 auid=0 ses=358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390759801.719:84432): pid=11047 uid=0 auid=0 ses=358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390759801.719:84433): pid=11047 uid=0 auid=0 ses=358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390760701.730:84434): pid=11328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390760701.730:84435): pid=11328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390760701.730:84436): login pid=11328 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=359 >type=USER_START msg=audit(1390760701.730:84437): pid=11328 uid=0 auid=0 ses=359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390760701.730:84438): pid=11328 uid=0 auid=0 ses=359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390760701.740:84439): pid=11328 uid=0 auid=0 ses=359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390760701.740:84440): pid=11328 uid=0 auid=0 ses=359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390761601.750:84441): pid=11606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390761601.750:84442): pid=11606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390761601.750:84443): login pid=11606 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=360 >type=USER_START msg=audit(1390761601.760:84444): pid=11606 uid=0 auid=0 ses=360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390761601.760:84445): pid=11606 uid=0 auid=0 ses=360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390761601.770:84446): pid=11606 uid=0 auid=0 ses=360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390761601.770:84447): pid=11606 uid=0 auid=0 ses=360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390762501.781:84448): pid=11884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390762501.781:84449): pid=11884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390762501.781:84450): login pid=11884 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=361 >type=USER_START msg=audit(1390762501.791:84451): pid=11884 uid=0 auid=0 ses=361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390762501.791:84452): pid=11884 uid=0 auid=0 ses=361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390762501.791:84453): pid=11884 uid=0 auid=0 ses=361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390762501.791:84454): pid=11884 uid=0 auid=0 ses=361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390762861.801:84455): pid=12003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390762861.801:84456): pid=12003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390762861.801:84457): login pid=12003 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=362 >type=USER_START msg=audit(1390762861.801:84458): pid=12003 uid=0 auid=0 ses=362 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390762861.801:84459): pid=12003 uid=0 auid=0 ses=362 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390762861.821:84460): avc: denied { read } for pid=12019 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390762861.821:84460): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd5efec00 a2=84800 a3=0 items=0 ppid=12017 pid=12019 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=362 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390762861.831:84461): pid=12003 uid=0 auid=0 ses=362 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390762861.841:84462): pid=12003 uid=0 auid=0 ses=362 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390763401.841:84463): pid=12195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390763401.841:84464): pid=12195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390763401.841:84465): login pid=12195 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=363 >type=USER_START msg=audit(1390763401.851:84466): pid=12195 uid=0 auid=0 ses=363 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390763401.851:84467): pid=12195 uid=0 auid=0 ses=363 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390763401.851:84468): pid=12195 uid=0 auid=0 ses=363 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390763401.861:84469): pid=12195 uid=0 auid=0 ses=363 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1390763684.282:84470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1390763684.282:84471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1390764301.872:84472): pid=12474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390764301.872:84473): pid=12474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390764301.872:84474): login pid=12474 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=364 >type=USER_START msg=audit(1390764301.872:84475): pid=12474 uid=0 auid=0 ses=364 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390764301.872:84476): pid=12474 uid=0 auid=0 ses=364 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390764301.882:84477): pid=12474 uid=0 auid=0 ses=364 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390764301.882:84478): pid=12474 uid=0 auid=0 ses=364 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390765201.893:84479): pid=12755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390765201.893:84480): pid=12755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390765201.893:84481): login pid=12755 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=365 >type=USER_START msg=audit(1390765201.893:84482): pid=12755 uid=0 auid=0 ses=365 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390765201.893:84483): pid=12755 uid=0 auid=0 ses=365 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390765201.903:84484): pid=12755 uid=0 auid=0 ses=365 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390765201.903:84485): pid=12755 uid=0 auid=0 ses=365 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390766101.913:84486): pid=13034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390766101.913:84487): pid=13034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390766101.913:84488): login pid=13034 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=366 >type=USER_START msg=audit(1390766101.913:84489): pid=13034 uid=0 auid=0 ses=366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390766101.913:84490): pid=13034 uid=0 auid=0 ses=366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390766101.923:84491): pid=13034 uid=0 auid=0 ses=366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390766101.923:84492): pid=13034 uid=0 auid=0 ses=366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390766461.933:84493): pid=13149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390766461.933:84494): pid=13149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390766461.933:84495): login pid=13149 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=367 >type=USER_START msg=audit(1390766461.933:84496): pid=13149 uid=0 auid=0 ses=367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390766461.933:84497): pid=13149 uid=0 auid=0 ses=367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390766461.953:84498): avc: denied { read } for pid=13165 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390766461.953:84498): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcfaad1f0 a2=84800 a3=0 items=0 ppid=13163 pid=13165 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=367 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390766461.973:84499): pid=13149 uid=0 auid=0 ses=367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390766461.973:84500): pid=13149 uid=0 auid=0 ses=367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390767001.974:84501): pid=13345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390767001.974:84502): pid=13345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390767001.984:84503): login pid=13345 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=368 >type=USER_START msg=audit(1390767001.984:84504): pid=13345 uid=0 auid=0 ses=368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390767001.984:84505): pid=13345 uid=0 auid=0 ses=368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390767001.994:84506): pid=13345 uid=0 auid=0 ses=368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390767001.994:84507): pid=13345 uid=0 auid=0 ses=368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390767902.004:84508): pid=13623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390767902.004:84509): pid=13623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390767902.004:84510): login pid=13623 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=369 >type=USER_START msg=audit(1390767902.004:84511): pid=13623 uid=0 auid=0 ses=369 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390767902.004:84512): pid=13623 uid=0 auid=0 ses=369 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390767902.014:84513): pid=13623 uid=0 auid=0 ses=369 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390767902.014:84514): pid=13623 uid=0 auid=0 ses=369 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390768801.025:84515): pid=13903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390768801.025:84516): pid=13903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390768801.025:84517): login pid=13903 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=370 >type=USER_START msg=audit(1390768801.025:84518): pid=13903 uid=0 auid=0 ses=370 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390768801.025:84519): pid=13903 uid=0 auid=0 ses=370 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390768801.035:84520): pid=13903 uid=0 auid=0 ses=370 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390768801.035:84521): pid=13903 uid=0 auid=0 ses=370 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390769701.055:84522): pid=14182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390769701.055:84523): pid=14182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390769701.055:84524): login pid=14182 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=371 >type=USER_START msg=audit(1390769701.055:84525): pid=14182 uid=0 auid=0 ses=371 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390769701.055:84526): pid=14182 uid=0 auid=0 ses=371 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390769701.075:84527): pid=14182 uid=0 auid=0 ses=371 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390769701.075:84528): pid=14182 uid=0 auid=0 ses=371 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390770061.085:84529): pid=14298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390770061.085:84530): pid=14298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390770061.085:84531): login pid=14298 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=372 >type=USER_START msg=audit(1390770061.085:84532): pid=14298 uid=0 auid=0 ses=372 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390770061.085:84533): pid=14298 uid=0 auid=0 ses=372 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390770061.105:84534): avc: denied { read } for pid=14314 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390770061.105:84534): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffce207050 a2=84800 a3=0 items=0 ppid=14312 pid=14314 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=372 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390770061.115:84535): pid=14298 uid=0 auid=0 ses=372 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390770061.115:84536): pid=14298 uid=0 auid=0 ses=372 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390770601.126:84537): pid=14490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390770601.126:84538): pid=14490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390770601.126:84539): login pid=14490 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=373 >type=USER_START msg=audit(1390770601.136:84540): pid=14490 uid=0 auid=0 ses=373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390770601.136:84541): pid=14490 uid=0 auid=0 ses=373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390770601.146:84542): pid=14490 uid=0 auid=0 ses=373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390770601.146:84543): pid=14490 uid=0 auid=0 ses=373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390771501.156:84544): pid=14768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390771501.156:84545): pid=14768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390771501.166:84546): login pid=14768 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=374 >type=USER_START msg=audit(1390771501.166:84547): pid=14768 uid=0 auid=0 ses=374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390771501.166:84548): pid=14768 uid=0 auid=0 ses=374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390771501.166:84549): pid=14768 uid=0 auid=0 ses=374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390771501.176:84550): pid=14768 uid=0 auid=0 ses=374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390772401.187:84551): pid=15047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390772401.187:84552): pid=15047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390772401.187:84553): login pid=15047 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=375 >type=USER_START msg=audit(1390772401.187:84554): pid=15047 uid=0 auid=0 ses=375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390772401.187:84555): pid=15047 uid=0 auid=0 ses=375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390772401.197:84556): pid=15047 uid=0 auid=0 ses=375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390772401.197:84557): pid=15047 uid=0 auid=0 ses=375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390773301.207:84558): pid=15324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390773301.207:84559): pid=15324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390773301.207:84560): login pid=15324 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=376 >type=USER_START msg=audit(1390773301.207:84561): pid=15324 uid=0 auid=0 ses=376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390773301.207:84562): pid=15324 uid=0 auid=0 ses=376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390773301.217:84563): pid=15324 uid=0 auid=0 ses=376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390773301.217:84564): pid=15324 uid=0 auid=0 ses=376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390773661.218:84565): pid=15441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390773661.218:84566): pid=15441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390773661.218:84567): login pid=15441 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=377 >type=USER_START msg=audit(1390773661.218:84568): pid=15441 uid=0 auid=0 ses=377 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390773661.218:84569): pid=15441 uid=0 auid=0 ses=377 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390773661.228:84570): avc: denied { read } for pid=15457 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390773661.228:84570): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff2a4a4a0 a2=84800 a3=0 items=0 ppid=15455 pid=15457 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=377 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390773661.258:84571): pid=15441 uid=0 auid=0 ses=377 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390773661.258:84572): pid=15441 uid=0 auid=0 ses=377 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390774201.258:84573): pid=15634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390774201.258:84574): pid=15634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390774201.258:84575): login pid=15634 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=378 >type=USER_START msg=audit(1390774201.258:84576): pid=15634 uid=0 auid=0 ses=378 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390774201.258:84577): pid=15634 uid=0 auid=0 ses=378 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390774201.268:84578): pid=15634 uid=0 auid=0 ses=378 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390774201.268:84579): pid=15634 uid=0 auid=0 ses=378 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390775101.278:84580): pid=15912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390775101.278:84581): pid=15912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390775101.278:84582): login pid=15912 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=379 >type=USER_START msg=audit(1390775101.278:84583): pid=15912 uid=0 auid=0 ses=379 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390775101.278:84584): pid=15912 uid=0 auid=0 ses=379 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390775101.298:84585): pid=15912 uid=0 auid=0 ses=379 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390775101.298:84586): pid=15912 uid=0 auid=0 ses=379 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390776001.309:84587): pid=16192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390776001.309:84588): pid=16192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390776001.309:84589): login pid=16192 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=380 >type=USER_START msg=audit(1390776001.309:84590): pid=16192 uid=0 auid=0 ses=380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390776001.309:84591): pid=16192 uid=0 auid=0 ses=380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390776001.319:84592): pid=16192 uid=0 auid=0 ses=380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390776001.319:84593): pid=16192 uid=0 auid=0 ses=380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390776901.330:84594): pid=16469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390776901.330:84595): pid=16469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390776901.330:84596): login pid=16469 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=381 >type=USER_START msg=audit(1390776901.330:84597): pid=16469 uid=0 auid=0 ses=381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390776901.330:84598): pid=16469 uid=0 auid=0 ses=381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390776901.340:84599): pid=16469 uid=0 auid=0 ses=381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390776901.350:84600): pid=16469 uid=0 auid=0 ses=381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390777261.350:84601): pid=16584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390777261.350:84602): pid=16584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390777261.350:84603): login pid=16584 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=382 >type=USER_START msg=audit(1390777261.360:84604): pid=16584 uid=0 auid=0 ses=382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390777261.360:84605): pid=16584 uid=0 auid=0 ses=382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390777261.370:84606): avc: denied { read } for pid=16600 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390777261.370:84606): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd87eba40 a2=84800 a3=0 items=0 ppid=16598 pid=16600 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=382 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390777261.390:84607): pid=16584 uid=0 auid=0 ses=382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390777261.390:84608): pid=16584 uid=0 auid=0 ses=382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390777801.410:84609): pid=16777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390777801.410:84610): pid=16777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390777801.410:84611): login pid=16777 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=383 >type=USER_START msg=audit(1390777801.410:84612): pid=16777 uid=0 auid=0 ses=383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390777801.410:84613): pid=16777 uid=0 auid=0 ses=383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390777801.420:84614): pid=16777 uid=0 auid=0 ses=383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390777801.430:84615): pid=16777 uid=0 auid=0 ses=383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390778701.441:84616): pid=17056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390778701.441:84617): pid=17056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390778701.441:84618): login pid=17056 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=384 >type=USER_START msg=audit(1390778701.441:84619): pid=17056 uid=0 auid=0 ses=384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390778701.441:84620): pid=17056 uid=0 auid=0 ses=384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390778701.451:84621): pid=17056 uid=0 auid=0 ses=384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390778701.451:84622): pid=17056 uid=0 auid=0 ses=384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390779601.461:84623): pid=17332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390779601.461:84624): pid=17332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390779601.461:84625): login pid=17332 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=385 >type=USER_START msg=audit(1390779601.461:84626): pid=17332 uid=0 auid=0 ses=385 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390779601.461:84627): pid=17332 uid=0 auid=0 ses=385 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390779601.471:84628): pid=17332 uid=0 auid=0 ses=385 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390779601.471:84629): pid=17332 uid=0 auid=0 ses=385 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390780501.482:84630): pid=17611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390780501.482:84631): pid=17611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390780501.482:84632): login pid=17611 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=386 >type=USER_START msg=audit(1390780501.482:84633): pid=17611 uid=0 auid=0 ses=386 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390780501.482:84634): pid=17611 uid=0 auid=0 ses=386 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390780501.492:84635): pid=17611 uid=0 auid=0 ses=386 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390780501.492:84636): pid=17611 uid=0 auid=0 ses=386 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390780861.502:84637): pid=17730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390780861.502:84638): pid=17730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390780861.502:84639): login pid=17730 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=387 >type=USER_START msg=audit(1390780861.502:84640): pid=17730 uid=0 auid=0 ses=387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390780861.502:84641): pid=17730 uid=0 auid=0 ses=387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390780861.522:84642): avc: denied { read } for pid=17746 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390780861.522:84642): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc896bb10 a2=84800 a3=0 items=0 ppid=17744 pid=17746 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=387 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390780861.532:84643): pid=17730 uid=0 auid=0 ses=387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390780861.532:84644): pid=17730 uid=0 auid=0 ses=387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390781401.542:84645): pid=17924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390781401.542:84646): pid=17924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390781401.542:84647): login pid=17924 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=388 >type=USER_START msg=audit(1390781401.542:84648): pid=17924 uid=0 auid=0 ses=388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390781401.542:84649): pid=17924 uid=0 auid=0 ses=388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390781401.552:84650): pid=17924 uid=0 auid=0 ses=388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390781401.552:84651): pid=17924 uid=0 auid=0 ses=388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390782301.563:84652): pid=18201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390782301.563:84653): pid=18201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390782301.563:84654): login pid=18201 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=389 >type=USER_START msg=audit(1390782301.563:84655): pid=18201 uid=0 auid=0 ses=389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390782301.563:84656): pid=18201 uid=0 auid=0 ses=389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390782301.573:84657): pid=18201 uid=0 auid=0 ses=389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390782301.573:84658): pid=18201 uid=0 auid=0 ses=389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390783201.583:84659): pid=18480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390783201.583:84660): pid=18480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390783201.583:84661): login pid=18480 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=390 >type=USER_START msg=audit(1390783201.583:84662): pid=18480 uid=0 auid=0 ses=390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390783201.593:84663): pid=18480 uid=0 auid=0 ses=390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390783201.593:84664): pid=18480 uid=0 auid=0 ses=390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390783201.593:84665): pid=18480 uid=0 auid=0 ses=390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390784101.604:84666): pid=18758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390784101.604:84667): pid=18758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390784101.604:84668): login pid=18758 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=391 >type=USER_START msg=audit(1390784101.614:84669): pid=18758 uid=0 auid=0 ses=391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390784101.614:84670): pid=18758 uid=0 auid=0 ses=391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390784101.614:84671): pid=18758 uid=0 auid=0 ses=391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390784101.614:84672): pid=18758 uid=0 auid=0 ses=391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390784461.624:84673): pid=18874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390784461.624:84674): pid=18874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390784461.624:84675): login pid=18874 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=392 >type=USER_START msg=audit(1390784461.624:84676): pid=18874 uid=0 auid=0 ses=392 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390784461.624:84677): pid=18874 uid=0 auid=0 ses=392 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390784461.644:84678): avc: denied { read } for pid=18890 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390784461.644:84678): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff2e06a20 a2=84800 a3=0 items=0 ppid=18888 pid=18890 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=392 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390784461.654:84679): pid=18874 uid=0 auid=0 ses=392 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390784461.664:84680): pid=18874 uid=0 auid=0 ses=392 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390785001.664:84681): pid=19065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390785001.664:84682): pid=19065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390785001.664:84683): login pid=19065 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=393 >type=USER_START msg=audit(1390785001.674:84684): pid=19065 uid=0 auid=0 ses=393 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390785001.674:84685): pid=19065 uid=0 auid=0 ses=393 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390785001.684:84686): pid=19065 uid=0 auid=0 ses=393 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390785001.684:84687): pid=19065 uid=0 auid=0 ses=393 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390785901.695:84688): pid=19344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390785901.695:84689): pid=19344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390785901.695:84690): login pid=19344 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=394 >type=USER_START msg=audit(1390785901.705:84691): pid=19344 uid=0 auid=0 ses=394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390785901.705:84692): pid=19344 uid=0 auid=0 ses=394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390785901.705:84693): pid=19344 uid=0 auid=0 ses=394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390785901.705:84694): pid=19344 uid=0 auid=0 ses=394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390786801.725:84695): pid=19622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390786801.725:84696): pid=19622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390786801.725:84697): login pid=19622 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=395 >type=USER_START msg=audit(1390786801.725:84698): pid=19622 uid=0 auid=0 ses=395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390786801.725:84699): pid=19622 uid=0 auid=0 ses=395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390786801.745:84700): pid=19622 uid=0 auid=0 ses=395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390786801.745:84701): pid=19622 uid=0 auid=0 ses=395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390787701.756:84702): pid=19900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390787701.756:84703): pid=19900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390787701.756:84704): login pid=19900 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=396 >type=USER_START msg=audit(1390787701.766:84705): pid=19900 uid=0 auid=0 ses=396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390787701.766:84706): pid=19900 uid=0 auid=0 ses=396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390787701.776:84707): pid=19900 uid=0 auid=0 ses=396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390787701.776:84708): pid=19900 uid=0 auid=0 ses=396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390788061.786:84709): pid=20016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390788061.786:84710): pid=20016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390788061.786:84711): login pid=20016 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=397 >type=USER_START msg=audit(1390788061.786:84712): pid=20016 uid=0 auid=0 ses=397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390788061.796:84713): pid=20016 uid=0 auid=0 ses=397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390788061.816:84714): avc: denied { read } for pid=20035 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390788061.816:84714): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc87f6e70 a2=84800 a3=0 items=0 ppid=20033 pid=20035 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=397 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390788062.046:84715): pid=20016 uid=0 auid=0 ses=397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390788062.046:84716): pid=20016 uid=0 auid=0 ses=397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390788601.056:84717): pid=20213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390788601.056:84718): pid=20213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390788601.056:84719): login pid=20213 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=398 >type=USER_START msg=audit(1390788601.056:84720): pid=20213 uid=0 auid=0 ses=398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390788601.056:84721): pid=20213 uid=0 auid=0 ses=398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390788601.066:84722): pid=20213 uid=0 auid=0 ses=398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390788601.066:84723): pid=20213 uid=0 auid=0 ses=398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390789501.077:84724): pid=20491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390789501.077:84725): pid=20491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390789501.077:84726): login pid=20491 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=399 >type=USER_START msg=audit(1390789501.077:84727): pid=20491 uid=0 auid=0 ses=399 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390789501.077:84728): pid=20491 uid=0 auid=0 ses=399 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390789501.087:84729): pid=20491 uid=0 auid=0 ses=399 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390789501.087:84730): pid=20491 uid=0 auid=0 ses=399 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390790401.098:84731): pid=20770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390790401.098:84732): pid=20770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390790401.098:84733): login pid=20770 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=400 >type=USER_START msg=audit(1390790401.108:84734): pid=20770 uid=0 auid=0 ses=400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390790401.108:84735): pid=20770 uid=0 auid=0 ses=400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390790401.108:84736): pid=20770 uid=0 auid=0 ses=400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390790401.118:84737): pid=20770 uid=0 auid=0 ses=400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390791301.108:84738): pid=21049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390791301.108:84739): pid=21049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390791301.118:84740): login pid=21049 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=401 >type=USER_START msg=audit(1390791301.118:84741): pid=21049 uid=0 auid=0 ses=401 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390791301.118:84742): pid=21049 uid=0 auid=0 ses=401 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390791301.118:84743): pid=21049 uid=0 auid=0 ses=401 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390791301.128:84744): pid=21049 uid=0 auid=0 ses=401 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390791661.128:84745): pid=21165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390791661.128:84746): pid=21165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390791661.128:84747): login pid=21165 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=402 >type=USER_START msg=audit(1390791661.138:84748): pid=21165 uid=0 auid=0 ses=402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390791661.138:84749): pid=21165 uid=0 auid=0 ses=402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390791661.158:84750): avc: denied { read } for pid=21184 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390791661.158:84750): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe60db3f0 a2=84800 a3=0 items=0 ppid=21182 pid=21184 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=402 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390791661.218:84751): pid=21165 uid=0 auid=0 ses=402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390791661.218:84752): pid=21165 uid=0 auid=0 ses=402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390792201.229:84753): pid=21363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390792201.229:84754): pid=21363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390792201.229:84755): login pid=21363 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=403 >type=USER_START msg=audit(1390792201.229:84756): pid=21363 uid=0 auid=0 ses=403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390792201.229:84757): pid=21363 uid=0 auid=0 ses=403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390792201.239:84758): pid=21363 uid=0 auid=0 ses=403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390792201.239:84759): pid=21363 uid=0 auid=0 ses=403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390793101.249:84760): pid=21639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390793101.249:84761): pid=21639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390793101.249:84762): login pid=21639 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=404 >type=USER_START msg=audit(1390793101.249:84763): pid=21639 uid=0 auid=0 ses=404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390793101.249:84764): pid=21639 uid=0 auid=0 ses=404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390793101.259:84765): pid=21639 uid=0 auid=0 ses=404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390793101.259:84766): pid=21639 uid=0 auid=0 ses=404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390794001.270:84767): pid=21918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390794001.270:84768): pid=21918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390794001.270:84769): login pid=21918 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=405 >type=USER_START msg=audit(1390794001.270:84770): pid=21918 uid=0 auid=0 ses=405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390794001.270:84771): pid=21918 uid=0 auid=0 ses=405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390794001.280:84772): pid=21918 uid=0 auid=0 ses=405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390794001.280:84773): pid=21918 uid=0 auid=0 ses=405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390794901.300:84774): pid=22197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390794901.300:84775): pid=22197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390794901.300:84776): login pid=22197 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=406 >type=USER_START msg=audit(1390794901.300:84777): pid=22197 uid=0 auid=0 ses=406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390794901.300:84778): pid=22197 uid=0 auid=0 ses=406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390794901.310:84779): pid=22197 uid=0 auid=0 ses=406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390794901.320:84780): pid=22197 uid=0 auid=0 ses=406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390795261.320:84781): pid=22313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390795261.320:84782): pid=22313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390795261.320:84783): login pid=22313 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=407 >type=USER_START msg=audit(1390795261.330:84784): pid=22313 uid=0 auid=0 ses=407 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390795261.330:84785): pid=22313 uid=0 auid=0 ses=407 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390795261.350:84786): avc: denied { read } for pid=22332 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390795261.350:84786): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc387b790 a2=84800 a3=0 items=0 ppid=22330 pid=22332 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=407 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390795261.360:84787): pid=22313 uid=0 auid=0 ses=407 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390795261.360:84788): pid=22313 uid=0 auid=0 ses=407 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390795801.371:84789): pid=22508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390795801.371:84790): pid=22508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390795801.371:84791): login pid=22508 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=408 >type=USER_START msg=audit(1390795801.381:84792): pid=22508 uid=0 auid=0 ses=408 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390795801.381:84793): pid=22508 uid=0 auid=0 ses=408 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390795801.391:84794): pid=22508 uid=0 auid=0 ses=408 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390795801.401:84795): pid=22508 uid=0 auid=0 ses=408 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390796701.411:84796): pid=22787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390796701.411:84797): pid=22787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390796701.411:84798): login pid=22787 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=409 >type=USER_START msg=audit(1390796701.411:84799): pid=22787 uid=0 auid=0 ses=409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390796701.411:84800): pid=22787 uid=0 auid=0 ses=409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390796701.421:84801): pid=22787 uid=0 auid=0 ses=409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390796701.421:84802): pid=22787 uid=0 auid=0 ses=409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390797601.432:84803): pid=23065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390797601.432:84804): pid=23065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390797601.432:84805): login pid=23065 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=410 >type=USER_START msg=audit(1390797601.432:84806): pid=23065 uid=0 auid=0 ses=410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390797601.432:84807): pid=23065 uid=0 auid=0 ses=410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390797601.442:84808): pid=23065 uid=0 auid=0 ses=410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390797601.442:84809): pid=23065 uid=0 auid=0 ses=410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390798501.452:84810): pid=23343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390798501.452:84811): pid=23343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390798501.452:84812): login pid=23343 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=411 >type=USER_START msg=audit(1390798501.452:84813): pid=23343 uid=0 auid=0 ses=411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390798501.462:84814): pid=23343 uid=0 auid=0 ses=411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390798501.472:84815): pid=23343 uid=0 auid=0 ses=411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390798501.472:84816): pid=23343 uid=0 auid=0 ses=411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390798861.483:84817): pid=23459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390798861.483:84818): pid=23459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390798861.483:84819): login pid=23459 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=412 >type=USER_START msg=audit(1390798861.483:84820): pid=23459 uid=0 auid=0 ses=412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390798861.483:84821): pid=23459 uid=0 auid=0 ses=412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390798861.503:84822): avc: denied { read } for pid=23478 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390798861.503:84822): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd3ddb400 a2=84800 a3=0 items=0 ppid=23476 pid=23478 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=412 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390798861.513:84823): pid=23459 uid=0 auid=0 ses=412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390798861.513:84824): pid=23459 uid=0 auid=0 ses=412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390799401.523:84825): pid=23654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390799401.523:84826): pid=23654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390799401.523:84827): login pid=23654 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=413 >type=USER_START msg=audit(1390799401.523:84828): pid=23654 uid=0 auid=0 ses=413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390799401.523:84829): pid=23654 uid=0 auid=0 ses=413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390799401.543:84830): pid=23654 uid=0 auid=0 ses=413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390799401.543:84831): pid=23654 uid=0 auid=0 ses=413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390800301.553:84832): pid=23929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390800301.553:84833): pid=23929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390800301.553:84834): login pid=23929 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=414 >type=USER_START msg=audit(1390800301.563:84835): pid=23929 uid=0 auid=0 ses=414 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390800301.563:84836): pid=23929 uid=0 auid=0 ses=414 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390800301.563:84837): pid=23929 uid=0 auid=0 ses=414 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390800301.563:84838): pid=23929 uid=0 auid=0 ses=414 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390800481.514:84839): avc: denied { read } for pid=23993 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390800481.514:84839): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffaa761f0 a2=84800 a3=0 items=0 ppid=23991 pid=23993 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=412 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1390801201.584:84840): pid=24251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390801201.584:84841): pid=24251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390801201.584:84842): login pid=24251 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=415 >type=USER_START msg=audit(1390801201.584:84843): pid=24251 uid=0 auid=0 ses=415 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390801201.584:84844): pid=24251 uid=0 auid=0 ses=415 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390801201.604:84845): pid=24251 uid=0 auid=0 ses=415 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390801201.604:84846): pid=24251 uid=0 auid=0 ses=415 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390802101.614:84847): pid=24529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390802101.614:84848): pid=24529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390802101.614:84849): login pid=24529 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=416 >type=USER_START msg=audit(1390802101.614:84850): pid=24529 uid=0 auid=0 ses=416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390802101.614:84851): pid=24529 uid=0 auid=0 ses=416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390802101.634:84852): pid=24529 uid=0 auid=0 ses=416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390802101.634:84853): pid=24529 uid=0 auid=0 ses=416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390802461.635:84854): pid=24646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390802461.635:84855): pid=24646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390802461.645:84856): login pid=24646 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=417 >type=USER_START msg=audit(1390802461.645:84857): pid=24646 uid=0 auid=0 ses=417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390802461.645:84858): pid=24646 uid=0 auid=0 ses=417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390802461.655:84859): avc: denied { read } for pid=24662 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390802461.655:84859): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffd5a0150 a2=84800 a3=0 items=0 ppid=24660 pid=24662 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=417 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390802461.675:84860): pid=24646 uid=0 auid=0 ses=417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390802461.675:84861): pid=24646 uid=0 auid=0 ses=417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390803001.695:84862): pid=24839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390803001.695:84863): pid=24839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390803001.695:84864): login pid=24839 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=418 >type=USER_START msg=audit(1390803001.695:84865): pid=24839 uid=0 auid=0 ses=418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390803001.695:84866): pid=24839 uid=0 auid=0 ses=418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390803001.715:84867): pid=24839 uid=0 auid=0 ses=418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390803001.715:84868): pid=24839 uid=0 auid=0 ses=418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390803901.726:84869): pid=25118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390803901.726:84870): pid=25118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390803901.726:84871): login pid=25118 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=419 >type=USER_START msg=audit(1390803901.736:84872): pid=25118 uid=0 auid=0 ses=419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390803901.736:84873): pid=25118 uid=0 auid=0 ses=419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390803901.746:84874): pid=25118 uid=0 auid=0 ses=419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390803901.746:84875): pid=25118 uid=0 auid=0 ses=419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390804801.756:84876): pid=25395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390804801.756:84877): pid=25395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390804801.756:84878): login pid=25395 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=420 >type=USER_START msg=audit(1390804801.766:84879): pid=25395 uid=0 auid=0 ses=420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390804801.766:84880): pid=25395 uid=0 auid=0 ses=420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390804801.766:84881): pid=25395 uid=0 auid=0 ses=420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390804801.776:84882): pid=25395 uid=0 auid=0 ses=420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390805701.787:84883): pid=25673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390805701.787:84884): pid=25673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390805701.787:84885): login pid=25673 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=421 >type=USER_START msg=audit(1390805701.787:84886): pid=25673 uid=0 auid=0 ses=421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390805701.787:84887): pid=25673 uid=0 auid=0 ses=421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390805701.797:84888): pid=25673 uid=0 auid=0 ses=421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390805701.797:84889): pid=25673 uid=0 auid=0 ses=421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390806061.807:84890): pid=25791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390806061.807:84891): pid=25791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390806061.807:84892): login pid=25791 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=422 >type=USER_START msg=audit(1390806061.807:84893): pid=25791 uid=0 auid=0 ses=422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390806061.807:84894): pid=25791 uid=0 auid=0 ses=422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390806061.827:84895): avc: denied { read } for pid=25807 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390806061.827:84895): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc2b546a0 a2=84800 a3=0 items=0 ppid=25805 pid=25807 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=422 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390806061.837:84896): pid=25791 uid=0 auid=0 ses=422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390806061.837:84897): pid=25791 uid=0 auid=0 ses=422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390806601.847:84898): pid=25985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390806601.847:84899): pid=25985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390806601.847:84900): login pid=25985 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=423 >type=USER_START msg=audit(1390806601.857:84901): pid=25985 uid=0 auid=0 ses=423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390806601.857:84902): pid=25985 uid=0 auid=0 ses=423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390806601.867:84903): pid=25985 uid=0 auid=0 ses=423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390806601.867:84904): pid=25985 uid=0 auid=0 ses=423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390807501.868:84905): pid=26262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390807501.868:84906): pid=26262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390807501.868:84907): login pid=26262 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=424 >type=USER_START msg=audit(1390807501.868:84908): pid=26262 uid=0 auid=0 ses=424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390807501.868:84909): pid=26262 uid=0 auid=0 ses=424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390807501.878:84910): pid=26262 uid=0 auid=0 ses=424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390807501.878:84911): pid=26262 uid=0 auid=0 ses=424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390808401.888:84912): pid=26540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390808401.888:84913): pid=26540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390808401.888:84914): login pid=26540 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=425 >type=USER_START msg=audit(1390808401.888:84915): pid=26540 uid=0 auid=0 ses=425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390808401.888:84916): pid=26540 uid=0 auid=0 ses=425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390808401.898:84917): pid=26540 uid=0 auid=0 ses=425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390808401.898:84918): pid=26540 uid=0 auid=0 ses=425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390809301.909:84919): pid=26818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390809301.909:84920): pid=26818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390809301.909:84921): login pid=26818 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=426 >type=USER_START msg=audit(1390809301.909:84922): pid=26818 uid=0 auid=0 ses=426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390809301.909:84923): pid=26818 uid=0 auid=0 ses=426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390809301.919:84924): pid=26818 uid=0 auid=0 ses=426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390809301.919:84925): pid=26818 uid=0 auid=0 ses=426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390809661.929:84926): pid=26934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390809661.929:84927): pid=26934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390809661.929:84928): login pid=26934 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=427 >type=USER_START msg=audit(1390809661.929:84929): pid=26934 uid=0 auid=0 ses=427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390809661.929:84930): pid=26934 uid=0 auid=0 ses=427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390809661.949:84931): avc: denied { read } for pid=26950 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390809661.949:84931): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff73f9360 a2=84800 a3=0 items=0 ppid=26948 pid=26950 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=427 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390809661.959:84932): pid=26934 uid=0 auid=0 ses=427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390809661.959:84933): pid=26934 uid=0 auid=0 ses=427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390810201.969:84934): pid=27128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390810201.969:84935): pid=27128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390810201.969:84936): login pid=27128 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=428 >type=USER_START msg=audit(1390810201.979:84937): pid=27128 uid=0 auid=0 ses=428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390810201.979:84938): pid=27128 uid=0 auid=0 ses=428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390810201.979:84939): pid=27128 uid=0 auid=0 ses=428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390810201.979:84940): pid=27128 uid=0 auid=0 ses=428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390811101.990:84941): pid=27409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390811101.990:84942): pid=27409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390811101.990:84943): login pid=27409 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=429 >type=USER_START msg=audit(1390811102.000:84944): pid=27409 uid=0 auid=0 ses=429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390811102.000:84945): pid=27409 uid=0 auid=0 ses=429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390811102.000:84946): pid=27409 uid=0 auid=0 ses=429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390811102.010:84947): pid=27409 uid=0 auid=0 ses=429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390812001.020:84948): pid=27686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390812001.020:84949): pid=27686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390812001.020:84950): login pid=27686 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=430 >type=USER_START msg=audit(1390812001.020:84951): pid=27686 uid=0 auid=0 ses=430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390812001.020:84952): pid=27686 uid=0 auid=0 ses=430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390812001.040:84953): pid=27686 uid=0 auid=0 ses=430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390812001.040:84954): pid=27686 uid=0 auid=0 ses=430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390812901.051:84955): pid=27964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390812901.051:84956): pid=27964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390812901.051:84957): login pid=27964 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=431 >type=USER_START msg=audit(1390812901.061:84958): pid=27964 uid=0 auid=0 ses=431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390812901.061:84959): pid=27964 uid=0 auid=0 ses=431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390812901.081:84960): pid=27964 uid=0 auid=0 ses=431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390812901.081:84961): pid=27964 uid=0 auid=0 ses=431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390813261.091:84962): pid=28080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390813261.091:84963): pid=28080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390813261.091:84964): login pid=28080 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=432 >type=USER_START msg=audit(1390813261.091:84965): pid=28080 uid=0 auid=0 ses=432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390813261.091:84966): pid=28080 uid=0 auid=0 ses=432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390813261.111:84967): avc: denied { read } for pid=28097 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390813261.111:84967): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdfb45c20 a2=84800 a3=0 items=0 ppid=28095 pid=28097 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=432 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390813261.121:84968): pid=28080 uid=0 auid=0 ses=432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390813261.121:84969): pid=28080 uid=0 auid=0 ses=432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390813801.131:84970): pid=28276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390813801.131:84971): pid=28276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390813801.131:84972): login pid=28276 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=433 >type=USER_START msg=audit(1390813801.131:84973): pid=28276 uid=0 auid=0 ses=433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390813801.131:84974): pid=28276 uid=0 auid=0 ses=433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390813801.141:84975): pid=28276 uid=0 auid=0 ses=433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390813801.141:84976): pid=28276 uid=0 auid=0 ses=433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390814701.152:84977): pid=28554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390814701.152:84978): pid=28554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390814701.152:84979): login pid=28554 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=434 >type=USER_START msg=audit(1390814701.162:84980): pid=28554 uid=0 auid=0 ses=434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390814701.162:84981): pid=28554 uid=0 auid=0 ses=434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390814701.162:84982): pid=28554 uid=0 auid=0 ses=434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390814701.162:84983): pid=28554 uid=0 auid=0 ses=434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390815601.173:84984): pid=28832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390815601.173:84985): pid=28832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390815601.173:84986): login pid=28832 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=435 >type=USER_START msg=audit(1390815601.183:84987): pid=28832 uid=0 auid=0 ses=435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390815601.183:84988): pid=28832 uid=0 auid=0 ses=435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390815601.183:84989): pid=28832 uid=0 auid=0 ses=435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390815601.193:84990): pid=28832 uid=0 auid=0 ses=435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390816501.193:84991): pid=29112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390816501.193:84992): pid=29112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390816501.193:84993): login pid=29112 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=436 >type=USER_START msg=audit(1390816501.203:84994): pid=29112 uid=0 auid=0 ses=436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390816501.203:84995): pid=29112 uid=0 auid=0 ses=436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390816501.203:84996): pid=29112 uid=0 auid=0 ses=436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390816501.213:84997): pid=29112 uid=0 auid=0 ses=436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390816861.213:84998): pid=29227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390816861.213:84999): pid=29227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390816861.213:85000): login pid=29227 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=437 >type=USER_START msg=audit(1390816861.223:85001): pid=29227 uid=0 auid=0 ses=437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390816861.223:85002): pid=29227 uid=0 auid=0 ses=437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390816861.233:85003): avc: denied { read } for pid=29243 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390816861.233:85003): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffb974640 a2=84800 a3=0 items=0 ppid=29241 pid=29243 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=437 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390816861.253:85004): pid=29227 uid=0 auid=0 ses=437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390816861.253:85005): pid=29227 uid=0 auid=0 ses=437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390817401.264:85006): pid=29420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390817401.264:85007): pid=29420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390817401.264:85008): login pid=29420 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=438 >type=USER_START msg=audit(1390817401.264:85009): pid=29420 uid=0 auid=0 ses=438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390817401.264:85010): pid=29420 uid=0 auid=0 ses=438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390817401.274:85011): pid=29420 uid=0 auid=0 ses=438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390817401.274:85012): pid=29420 uid=0 auid=0 ses=438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390818301.284:85013): pid=29699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390818301.284:85014): pid=29699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390818301.284:85015): login pid=29699 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=439 >type=USER_START msg=audit(1390818301.284:85016): pid=29699 uid=0 auid=0 ses=439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390818301.284:85017): pid=29699 uid=0 auid=0 ses=439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390818301.294:85018): pid=29699 uid=0 auid=0 ses=439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390818301.294:85019): pid=29699 uid=0 auid=0 ses=439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390819201.305:85020): pid=29976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390819201.305:85021): pid=29976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390819201.305:85022): login pid=29976 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=440 >type=USER_START msg=audit(1390819201.305:85023): pid=29976 uid=0 auid=0 ses=440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390819201.305:85024): pid=29976 uid=0 auid=0 ses=440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390819201.315:85025): pid=29976 uid=0 auid=0 ses=440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390819201.315:85026): pid=29976 uid=0 auid=0 ses=440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390820101.705:85027): pid=30253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390820101.705:85028): pid=30253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390820101.705:85029): login pid=30253 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=441 >type=USER_START msg=audit(1390820101.705:85030): pid=30253 uid=0 auid=0 ses=441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390820101.705:85031): pid=30253 uid=0 auid=0 ses=441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390820101.725:85032): pid=30253 uid=0 auid=0 ses=441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390820101.725:85033): pid=30253 uid=0 auid=0 ses=441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390820461.735:85034): pid=30371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390820461.735:85035): pid=30371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390820461.735:85036): login pid=30371 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=442 >type=USER_START msg=audit(1390820461.735:85037): pid=30371 uid=0 auid=0 ses=442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390820461.735:85038): pid=30371 uid=0 auid=0 ses=442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390820461.745:85039): avc: denied { read } for pid=30387 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390820461.745:85039): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd4663ce0 a2=84800 a3=0 items=0 ppid=30385 pid=30387 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=442 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390820461.765:85040): pid=30371 uid=0 auid=0 ses=442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390820461.765:85041): pid=30371 uid=0 auid=0 ses=442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390821001.776:85042): pid=30563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390821001.776:85043): pid=30563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390821001.776:85044): login pid=30563 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=443 >type=USER_START msg=audit(1390821001.786:85045): pid=30563 uid=0 auid=0 ses=443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390821001.786:85046): pid=30563 uid=0 auid=0 ses=443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390821001.796:85047): pid=30563 uid=0 auid=0 ses=443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390821001.796:85048): pid=30563 uid=0 auid=0 ses=443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390821901.806:85049): pid=30841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390821901.806:85050): pid=30841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390821901.806:85051): login pid=30841 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=444 >type=USER_START msg=audit(1390821901.806:85052): pid=30841 uid=0 auid=0 ses=444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390821901.806:85053): pid=30841 uid=0 auid=0 ses=444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390821901.816:85054): pid=30841 uid=0 auid=0 ses=444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390821901.816:85055): pid=30841 uid=0 auid=0 ses=444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390822801.827:85056): pid=31120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390822801.827:85057): pid=31120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390822801.827:85058): login pid=31120 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=445 >type=USER_START msg=audit(1390822801.837:85059): pid=31120 uid=0 auid=0 ses=445 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390822801.837:85060): pid=31120 uid=0 auid=0 ses=445 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390822801.837:85061): pid=31120 uid=0 auid=0 ses=445 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390822801.837:85062): pid=31120 uid=0 auid=0 ses=445 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390823701.847:85063): pid=31398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390823701.847:85064): pid=31398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390823701.847:85065): login pid=31398 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=446 >type=USER_START msg=audit(1390823701.857:85066): pid=31398 uid=0 auid=0 ses=446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390823701.857:85067): pid=31398 uid=0 auid=0 ses=446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390823701.867:85068): pid=31398 uid=0 auid=0 ses=446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390823701.867:85069): pid=31398 uid=0 auid=0 ses=446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390824061.868:85070): pid=31515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390824061.868:85071): pid=31515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390824061.868:85072): login pid=31515 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=447 >type=USER_START msg=audit(1390824061.878:85073): pid=31515 uid=0 auid=0 ses=447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390824061.878:85074): pid=31515 uid=0 auid=0 ses=447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390824061.888:85075): avc: denied { read } for pid=31531 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390824061.888:85075): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffecc85b60 a2=84800 a3=0 items=0 ppid=31529 pid=31531 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=447 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390824061.908:85076): pid=31515 uid=0 auid=0 ses=447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390824061.908:85077): pid=31515 uid=0 auid=0 ses=447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390824601.908:85078): pid=31708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390824601.908:85079): pid=31708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390824601.908:85080): login pid=31708 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=448 >type=USER_START msg=audit(1390824601.908:85081): pid=31708 uid=0 auid=0 ses=448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390824601.908:85082): pid=31708 uid=0 auid=0 ses=448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390824601.918:85083): pid=31708 uid=0 auid=0 ses=448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390824601.918:85084): pid=31708 uid=0 auid=0 ses=448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390825501.928:85085): pid=31986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390825501.928:85086): pid=31986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390825501.928:85087): login pid=31986 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=449 >type=USER_START msg=audit(1390825501.928:85088): pid=31986 uid=0 auid=0 ses=449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390825501.928:85089): pid=31986 uid=0 auid=0 ses=449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390825501.948:85090): pid=31986 uid=0 auid=0 ses=449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390825501.948:85091): pid=31986 uid=0 auid=0 ses=449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390826401.959:85092): pid=32266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390826401.959:85093): pid=32266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390826401.959:85094): login pid=32266 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=450 >type=USER_START msg=audit(1390826401.959:85095): pid=32266 uid=0 auid=0 ses=450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390826401.959:85096): pid=32266 uid=0 auid=0 ses=450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390826401.969:85097): pid=32266 uid=0 auid=0 ses=450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390826401.969:85098): pid=32266 uid=0 auid=0 ses=450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390827301.979:85099): pid=32544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390827301.979:85100): pid=32544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390827301.979:85101): login pid=32544 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=451 >type=USER_START msg=audit(1390827301.979:85102): pid=32544 uid=0 auid=0 ses=451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390827301.979:85103): pid=32544 uid=0 auid=0 ses=451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390827301.989:85104): pid=32544 uid=0 auid=0 ses=451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390827301.989:85105): pid=32544 uid=0 auid=0 ses=451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390827662.000:85106): pid=32659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390827662.000:85107): pid=32659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390827662.000:85108): login pid=32659 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=452 >type=USER_START msg=audit(1390827662.000:85109): pid=32659 uid=0 auid=0 ses=452 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390827662.000:85110): pid=32659 uid=0 auid=0 ses=452 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390827662.020:85111): avc: denied { read } for pid=32675 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390827662.020:85111): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe3884230 a2=84800 a3=0 items=0 ppid=32673 pid=32675 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=452 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390827662.040:85112): pid=32659 uid=0 auid=0 ses=452 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390827662.040:85113): pid=32659 uid=0 auid=0 ses=452 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390828201.050:85114): pid=32853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390828201.050:85115): pid=32853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390828201.050:85116): login pid=32853 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=453 >type=USER_START msg=audit(1390828201.050:85117): pid=32853 uid=0 auid=0 ses=453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390828201.050:85118): pid=32853 uid=0 auid=0 ses=453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390828201.060:85119): pid=32853 uid=0 auid=0 ses=453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390828201.060:85120): pid=32853 uid=0 auid=0 ses=453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390829101.071:85121): pid=33132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390829101.071:85122): pid=33132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390829101.071:85123): login pid=33132 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=454 >type=USER_START msg=audit(1390829101.081:85124): pid=33132 uid=0 auid=0 ses=454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390829101.081:85125): pid=33132 uid=0 auid=0 ses=454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390829101.091:85126): pid=33132 uid=0 auid=0 ses=454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390829101.091:85127): pid=33132 uid=0 auid=0 ses=454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390830001.111:85128): pid=33407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390830001.111:85129): pid=33407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390830001.111:85130): login pid=33407 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=455 >type=USER_START msg=audit(1390830001.111:85131): pid=33407 uid=0 auid=0 ses=455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390830001.111:85132): pid=33407 uid=0 auid=0 ses=455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390830001.131:85133): pid=33407 uid=0 auid=0 ses=455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390830001.131:85134): pid=33407 uid=0 auid=0 ses=455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390830901.142:85135): pid=33686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390830901.142:85136): pid=33686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390830901.142:85137): login pid=33686 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=456 >type=USER_START msg=audit(1390830901.142:85138): pid=33686 uid=0 auid=0 ses=456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390830901.142:85139): pid=33686 uid=0 auid=0 ses=456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390830901.152:85140): pid=33686 uid=0 auid=0 ses=456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390830901.152:85141): pid=33686 uid=0 auid=0 ses=456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390831261.162:85142): pid=33803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390831261.162:85143): pid=33803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390831261.162:85144): login pid=33803 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=457 >type=USER_START msg=audit(1390831261.162:85145): pid=33803 uid=0 auid=0 ses=457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390831261.162:85146): pid=33803 uid=0 auid=0 ses=457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390831261.182:85147): avc: denied { read } for pid=33819 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390831261.182:85147): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff2a311d0 a2=84800 a3=0 items=0 ppid=33817 pid=33819 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=457 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390831261.192:85148): pid=33803 uid=0 auid=0 ses=457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390831261.192:85149): pid=33803 uid=0 auid=0 ses=457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390831801.202:85150): pid=33995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390831801.202:85151): pid=33995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390831801.202:85152): login pid=33995 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=458 >type=USER_START msg=audit(1390831801.202:85153): pid=33995 uid=0 auid=0 ses=458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390831801.202:85154): pid=33995 uid=0 auid=0 ses=458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390831801.212:85155): pid=33995 uid=0 auid=0 ses=458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390831801.212:85156): pid=33995 uid=0 auid=0 ses=458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390832701.223:85157): pid=34272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390832701.223:85158): pid=34272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390832701.223:85159): login pid=34272 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=459 >type=USER_START msg=audit(1390832701.223:85160): pid=34272 uid=0 auid=0 ses=459 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390832701.223:85161): pid=34272 uid=0 auid=0 ses=459 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390832701.233:85162): pid=34272 uid=0 auid=0 ses=459 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390832701.233:85163): pid=34272 uid=0 auid=0 ses=459 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390833601.243:85164): pid=34552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390833601.243:85165): pid=34552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390833601.243:85166): login pid=34552 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=460 >type=USER_START msg=audit(1390833601.243:85167): pid=34552 uid=0 auid=0 ses=460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390833601.243:85168): pid=34552 uid=0 auid=0 ses=460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390833601.253:85169): pid=34552 uid=0 auid=0 ses=460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390833601.253:85170): pid=34552 uid=0 auid=0 ses=460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390834501.264:85171): pid=34829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390834501.264:85172): pid=34829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390834501.264:85173): login pid=34829 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=461 >type=USER_START msg=audit(1390834501.264:85174): pid=34829 uid=0 auid=0 ses=461 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390834501.264:85175): pid=34829 uid=0 auid=0 ses=461 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390834501.274:85176): pid=34829 uid=0 auid=0 ses=461 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390834501.274:85177): pid=34829 uid=0 auid=0 ses=461 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390834861.284:85178): pid=34945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390834861.284:85179): pid=34945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390834861.284:85180): login pid=34945 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=462 >type=USER_START msg=audit(1390834861.284:85181): pid=34945 uid=0 auid=0 ses=462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390834861.284:85182): pid=34945 uid=0 auid=0 ses=462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390834861.304:85183): avc: denied { read } for pid=34961 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390834861.304:85183): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffd8e54c0 a2=84800 a3=0 items=0 ppid=34959 pid=34961 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=462 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390834861.314:85184): pid=34945 uid=0 auid=0 ses=462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390834861.314:85185): pid=34945 uid=0 auid=0 ses=462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390835401.324:85186): pid=35137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390835401.324:85187): pid=35137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390835401.324:85188): login pid=35137 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=463 >type=USER_START msg=audit(1390835401.324:85189): pid=35137 uid=0 auid=0 ses=463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390835401.324:85190): pid=35137 uid=0 auid=0 ses=463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390835401.334:85191): pid=35137 uid=0 auid=0 ses=463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390835401.334:85192): pid=35137 uid=0 auid=0 ses=463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390836301.345:85193): pid=35415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390836301.345:85194): pid=35415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390836301.345:85195): login pid=35415 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=464 >type=USER_START msg=audit(1390836301.345:85196): pid=35415 uid=0 auid=0 ses=464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390836301.345:85197): pid=35415 uid=0 auid=0 ses=464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390836301.355:85198): pid=35415 uid=0 auid=0 ses=464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390836301.355:85199): pid=35415 uid=0 auid=0 ses=464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390837201.365:85200): pid=35693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390837201.365:85201): pid=35693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390837201.375:85202): login pid=35693 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=465 >type=USER_START msg=audit(1390837201.375:85203): pid=35693 uid=0 auid=0 ses=465 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390837201.375:85204): pid=35693 uid=0 auid=0 ses=465 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390837201.385:85205): pid=35693 uid=0 auid=0 ses=465 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390837201.395:85206): pid=35693 uid=0 auid=0 ses=465 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390838101.406:85207): pid=35971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390838101.406:85208): pid=35971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390838101.406:85209): login pid=35971 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=466 >type=USER_START msg=audit(1390838101.406:85210): pid=35971 uid=0 auid=0 ses=466 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390838101.416:85211): pid=35971 uid=0 auid=0 ses=466 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390838101.426:85212): pid=35971 uid=0 auid=0 ses=466 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390838101.426:85213): pid=35971 uid=0 auid=0 ses=466 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390838461.436:85214): pid=36086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390838461.436:85215): pid=36086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390838461.436:85216): login pid=36086 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=467 >type=USER_START msg=audit(1390838461.436:85217): pid=36086 uid=0 auid=0 ses=467 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390838461.436:85218): pid=36086 uid=0 auid=0 ses=467 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390838461.456:85219): avc: denied { read } for pid=36102 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390838461.456:85219): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc5f849e0 a2=84800 a3=0 items=0 ppid=36100 pid=36102 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=467 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390838461.466:85220): pid=36086 uid=0 auid=0 ses=467 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390838461.476:85221): pid=36086 uid=0 auid=0 ses=467 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390839001.476:85222): pid=36280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390839001.476:85223): pid=36280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390839001.476:85224): login pid=36280 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=468 >type=USER_START msg=audit(1390839001.486:85225): pid=36280 uid=0 auid=0 ses=468 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390839001.486:85226): pid=36280 uid=0 auid=0 ses=468 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390839001.486:85227): pid=36280 uid=0 auid=0 ses=468 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390839001.496:85228): pid=36280 uid=0 auid=0 ses=468 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390839901.497:85229): pid=36559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390839901.507:85230): pid=36559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390839901.507:85231): login pid=36559 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=469 >type=USER_START msg=audit(1390839901.507:85232): pid=36559 uid=0 auid=0 ses=469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390839901.507:85233): pid=36559 uid=0 auid=0 ses=469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390839901.517:85234): pid=36559 uid=0 auid=0 ses=469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390839901.517:85235): pid=36559 uid=0 auid=0 ses=469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390840801.527:85236): pid=36837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390840801.527:85237): pid=36837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390840801.527:85238): login pid=36837 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=470 >type=USER_START msg=audit(1390840801.527:85239): pid=36837 uid=0 auid=0 ses=470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390840801.527:85240): pid=36837 uid=0 auid=0 ses=470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390840801.537:85241): pid=36837 uid=0 auid=0 ses=470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390840801.537:85242): pid=36837 uid=0 auid=0 ses=470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390841701.538:85243): pid=37114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390841701.538:85244): pid=37114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390841701.538:85245): login pid=37114 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=471 >type=USER_START msg=audit(1390841701.538:85246): pid=37114 uid=0 auid=0 ses=471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390841701.538:85247): pid=37114 uid=0 auid=0 ses=471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390841701.548:85248): pid=37114 uid=0 auid=0 ses=471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390841701.548:85249): pid=37114 uid=0 auid=0 ses=471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390842061.558:85250): pid=37231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390842061.558:85251): pid=37231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390842061.558:85252): login pid=37231 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=472 >type=USER_START msg=audit(1390842061.558:85253): pid=37231 uid=0 auid=0 ses=472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390842061.558:85254): pid=37231 uid=0 auid=0 ses=472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390842061.578:85255): avc: denied { read } for pid=37247 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390842061.578:85255): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcd906a00 a2=84800 a3=0 items=0 ppid=37245 pid=37247 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=472 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390842061.588:85256): pid=37231 uid=0 auid=0 ses=472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390842061.588:85257): pid=37231 uid=0 auid=0 ses=472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390842601.599:85258): pid=37426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390842601.599:85259): pid=37426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390842601.599:85260): login pid=37426 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=473 >type=USER_START msg=audit(1390842601.599:85261): pid=37426 uid=0 auid=0 ses=473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390842601.599:85262): pid=37426 uid=0 auid=0 ses=473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390842601.609:85263): pid=37426 uid=0 auid=0 ses=473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390842601.609:85264): pid=37426 uid=0 auid=0 ses=473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390843501.619:85265): pid=37702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390843501.619:85266): pid=37702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390843501.619:85267): login pid=37702 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=474 >type=USER_START msg=audit(1390843501.619:85268): pid=37702 uid=0 auid=0 ses=474 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390843501.619:85269): pid=37702 uid=0 auid=0 ses=474 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390843501.629:85270): pid=37702 uid=0 auid=0 ses=474 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390843501.629:85271): pid=37702 uid=0 auid=0 ses=474 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390844401.640:85272): pid=37981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390844401.640:85273): pid=37981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390844401.640:85274): login pid=37981 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=475 >type=USER_START msg=audit(1390844401.640:85275): pid=37981 uid=0 auid=0 ses=475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390844401.640:85276): pid=37981 uid=0 auid=0 ses=475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390844401.650:85277): pid=37981 uid=0 auid=0 ses=475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390844401.650:85278): pid=37981 uid=0 auid=0 ses=475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390845301.660:85279): pid=38258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390845301.660:85280): pid=38258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390845301.660:85281): login pid=38258 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=476 >type=USER_START msg=audit(1390845301.660:85282): pid=38258 uid=0 auid=0 ses=476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390845301.670:85283): pid=38258 uid=0 auid=0 ses=476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390845301.670:85284): pid=38258 uid=0 auid=0 ses=476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390845301.670:85285): pid=38258 uid=0 auid=0 ses=476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390845661.680:85286): pid=38374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390845661.680:85287): pid=38374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390845661.680:85288): login pid=38374 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=477 >type=USER_START msg=audit(1390845661.680:85289): pid=38374 uid=0 auid=0 ses=477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390845661.680:85290): pid=38374 uid=0 auid=0 ses=477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390845661.700:85291): avc: denied { read } for pid=38390 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390845661.700:85291): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe37cc460 a2=84800 a3=0 items=0 ppid=38388 pid=38390 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=477 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390845661.710:85292): pid=38374 uid=0 auid=0 ses=477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390845661.720:85293): pid=38374 uid=0 auid=0 ses=477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390846201.731:85294): pid=38565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390846201.731:85295): pid=38565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390846201.731:85296): login pid=38565 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=478 >type=USER_START msg=audit(1390846201.731:85297): pid=38565 uid=0 auid=0 ses=478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390846201.731:85298): pid=38565 uid=0 auid=0 ses=478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390846201.751:85299): pid=38565 uid=0 auid=0 ses=478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390846201.751:85300): pid=38565 uid=0 auid=0 ses=478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390847101.761:85301): pid=38846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390847101.761:85302): pid=38846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390847101.761:85303): login pid=38846 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=479 >type=USER_START msg=audit(1390847101.771:85304): pid=38846 uid=0 auid=0 ses=479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390847101.771:85305): pid=38846 uid=0 auid=0 ses=479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390847101.781:85306): pid=38846 uid=0 auid=0 ses=479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390847101.791:85307): pid=38846 uid=0 auid=0 ses=479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390848001.802:85308): pid=39123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390848001.802:85309): pid=39123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390848001.802:85310): login pid=39123 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=480 >type=USER_START msg=audit(1390848001.802:85311): pid=39123 uid=0 auid=0 ses=480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390848001.802:85312): pid=39123 uid=0 auid=0 ses=480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390848001.812:85313): pid=39123 uid=0 auid=0 ses=480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390848001.812:85314): pid=39123 uid=0 auid=0 ses=480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390848901.822:85315): pid=39400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390848901.822:85316): pid=39400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390848901.822:85317): login pid=39400 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=481 >type=USER_START msg=audit(1390848901.822:85318): pid=39400 uid=0 auid=0 ses=481 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390848901.822:85319): pid=39400 uid=0 auid=0 ses=481 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390848901.832:85320): pid=39400 uid=0 auid=0 ses=481 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390848901.832:85321): pid=39400 uid=0 auid=0 ses=481 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390849261.843:85322): pid=39517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390849261.843:85323): pid=39517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390849261.843:85324): login pid=39517 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=482 >type=USER_START msg=audit(1390849261.843:85325): pid=39517 uid=0 auid=0 ses=482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390849261.843:85326): pid=39517 uid=0 auid=0 ses=482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390849261.863:85327): avc: denied { read } for pid=39533 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390849261.863:85327): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd5ad62e0 a2=84800 a3=0 items=0 ppid=39531 pid=39533 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=482 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390849261.873:85328): pid=39517 uid=0 auid=0 ses=482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390849261.873:85329): pid=39517 uid=0 auid=0 ses=482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390849801.883:85330): pid=39709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390849801.883:85331): pid=39709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390849801.883:85332): login pid=39709 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=483 >type=USER_START msg=audit(1390849801.883:85333): pid=39709 uid=0 auid=0 ses=483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390849801.883:85334): pid=39709 uid=0 auid=0 ses=483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390849801.893:85335): pid=39709 uid=0 auid=0 ses=483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390849801.893:85336): pid=39709 uid=0 auid=0 ses=483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1390850084.293:85337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1390850084.293:85338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1390850701.903:85339): pid=39988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390850701.903:85340): pid=39988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390850701.903:85341): login pid=39988 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=484 >type=USER_START msg=audit(1390850701.913:85342): pid=39988 uid=0 auid=0 ses=484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390850701.913:85343): pid=39988 uid=0 auid=0 ses=484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390850701.923:85344): pid=39988 uid=0 auid=0 ses=484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390850701.923:85345): pid=39988 uid=0 auid=0 ses=484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390851601.934:85346): pid=40266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390851601.934:85347): pid=40266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390851601.934:85348): login pid=40266 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=485 >type=USER_START msg=audit(1390851601.934:85349): pid=40266 uid=0 auid=0 ses=485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390851601.934:85350): pid=40266 uid=0 auid=0 ses=485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390851601.944:85351): pid=40266 uid=0 auid=0 ses=485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390851601.944:85352): pid=40266 uid=0 auid=0 ses=485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390852501.954:85353): pid=40545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390852501.954:85354): pid=40545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390852501.954:85355): login pid=40545 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=486 >type=USER_START msg=audit(1390852501.954:85356): pid=40545 uid=0 auid=0 ses=486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390852501.954:85357): pid=40545 uid=0 auid=0 ses=486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390852501.964:85358): pid=40545 uid=0 auid=0 ses=486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390852501.964:85359): pid=40545 uid=0 auid=0 ses=486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390852861.975:85360): pid=40660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390852861.975:85361): pid=40660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390852861.975:85362): login pid=40660 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=487 >type=USER_START msg=audit(1390852861.985:85363): pid=40660 uid=0 auid=0 ses=487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390852861.985:85364): pid=40660 uid=0 auid=0 ses=487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390852861.995:85365): avc: denied { read } for pid=40676 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390852861.995:85365): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdebadb30 a2=84800 a3=0 items=0 ppid=40674 pid=40676 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=487 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390852862.005:85366): pid=40660 uid=0 auid=0 ses=487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390852862.015:85367): pid=40660 uid=0 auid=0 ses=487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390853401.015:85368): pid=40854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390853401.015:85369): pid=40854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390853401.025:85370): login pid=40854 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=488 >type=USER_START msg=audit(1390853401.025:85371): pid=40854 uid=0 auid=0 ses=488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390853401.025:85372): pid=40854 uid=0 auid=0 ses=488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390853401.035:85373): pid=40854 uid=0 auid=0 ses=488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390853401.035:85374): pid=40854 uid=0 auid=0 ses=488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390854301.046:85375): pid=41131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390854301.046:85376): pid=41131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390854301.046:85377): login pid=41131 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=489 >type=USER_START msg=audit(1390854301.056:85378): pid=41131 uid=0 auid=0 ses=489 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390854301.056:85379): pid=41131 uid=0 auid=0 ses=489 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390854301.066:85380): pid=41131 uid=0 auid=0 ses=489 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390854301.066:85381): pid=41131 uid=0 auid=0 ses=489 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390855201.086:85382): pid=41410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390855201.086:85383): pid=41410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390855201.086:85384): login pid=41410 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=490 >type=USER_START msg=audit(1390855201.086:85385): pid=41410 uid=0 auid=0 ses=490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390855201.086:85386): pid=41410 uid=0 auid=0 ses=490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390855201.096:85387): pid=41410 uid=0 auid=0 ses=490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390855201.106:85388): pid=41410 uid=0 auid=0 ses=490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390856101.117:85389): pid=41688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390856101.117:85390): pid=41688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390856101.117:85391): login pid=41688 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=491 >type=USER_START msg=audit(1390856101.117:85392): pid=41688 uid=0 auid=0 ses=491 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390856101.117:85393): pid=41688 uid=0 auid=0 ses=491 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390856101.127:85394): pid=41688 uid=0 auid=0 ses=491 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390856101.127:85395): pid=41688 uid=0 auid=0 ses=491 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390856461.137:85396): pid=41804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390856461.137:85397): pid=41804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390856461.137:85398): login pid=41804 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=492 >type=USER_START msg=audit(1390856461.137:85399): pid=41804 uid=0 auid=0 ses=492 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390856461.137:85400): pid=41804 uid=0 auid=0 ses=492 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390856461.147:85401): avc: denied { read } for pid=41820 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390856461.147:85401): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcc8e6370 a2=84800 a3=0 items=0 ppid=41818 pid=41820 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=492 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390856461.167:85402): pid=41804 uid=0 auid=0 ses=492 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390856461.167:85403): pid=41804 uid=0 auid=0 ses=492 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390857001.177:85404): pid=41995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390857001.177:85405): pid=41995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390857001.177:85406): login pid=41995 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=493 >type=USER_START msg=audit(1390857001.177:85407): pid=41995 uid=0 auid=0 ses=493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390857001.177:85408): pid=41995 uid=0 auid=0 ses=493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390857001.187:85409): pid=41995 uid=0 auid=0 ses=493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390857001.187:85410): pid=41995 uid=0 auid=0 ses=493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390857901.188:85411): pid=42273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390857901.188:85412): pid=42273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390857901.188:85413): login pid=42273 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=494 >type=USER_START msg=audit(1390857901.188:85414): pid=42273 uid=0 auid=0 ses=494 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390857901.188:85415): pid=42273 uid=0 auid=0 ses=494 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390857901.208:85416): pid=42273 uid=0 auid=0 ses=494 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390857901.208:85417): pid=42273 uid=0 auid=0 ses=494 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390858801.218:85418): pid=42552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390858801.218:85419): pid=42552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390858801.218:85420): login pid=42552 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=495 >type=USER_START msg=audit(1390858801.218:85421): pid=42552 uid=0 auid=0 ses=495 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390858801.218:85422): pid=42552 uid=0 auid=0 ses=495 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390858801.228:85423): pid=42552 uid=0 auid=0 ses=495 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390858801.228:85424): pid=42552 uid=0 auid=0 ses=495 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390859701.239:85425): pid=42830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390859701.239:85426): pid=42830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390859701.239:85427): login pid=42830 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=496 >type=USER_START msg=audit(1390859701.239:85428): pid=42830 uid=0 auid=0 ses=496 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390859701.239:85429): pid=42830 uid=0 auid=0 ses=496 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390859701.249:85430): pid=42830 uid=0 auid=0 ses=496 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390859701.249:85431): pid=42830 uid=0 auid=0 ses=496 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390860061.259:85432): pid=42946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390860061.259:85433): pid=42946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390860061.259:85434): login pid=42946 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=497 >type=USER_START msg=audit(1390860061.259:85435): pid=42946 uid=0 auid=0 ses=497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390860061.259:85436): pid=42946 uid=0 auid=0 ses=497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390860061.279:85437): avc: denied { read } for pid=42962 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390860061.279:85437): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff1ada410 a2=84800 a3=0 items=0 ppid=42960 pid=42962 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=497 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390860061.289:85438): pid=42946 uid=0 auid=0 ses=497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390860061.289:85439): pid=42946 uid=0 auid=0 ses=497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390860601.299:85440): pid=43140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390860601.299:85441): pid=43140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390860601.299:85442): login pid=43140 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=498 >type=USER_START msg=audit(1390860601.299:85443): pid=43140 uid=0 auid=0 ses=498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390860601.299:85444): pid=43140 uid=0 auid=0 ses=498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390860601.309:85445): pid=43140 uid=0 auid=0 ses=498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390860601.309:85446): pid=43140 uid=0 auid=0 ses=498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390861501.320:85447): pid=43418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390861501.320:85448): pid=43418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390861501.320:85449): login pid=43418 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=499 >type=USER_START msg=audit(1390861501.320:85450): pid=43418 uid=0 auid=0 ses=499 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390861501.320:85451): pid=43418 uid=0 auid=0 ses=499 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390861501.330:85452): pid=43418 uid=0 auid=0 ses=499 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390861501.330:85453): pid=43418 uid=0 auid=0 ses=499 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390862401.340:85454): pid=43694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390862401.340:85455): pid=43694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390862401.340:85456): login pid=43694 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=500 >type=USER_START msg=audit(1390862401.340:85457): pid=43694 uid=0 auid=0 ses=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390862401.340:85458): pid=43694 uid=0 auid=0 ses=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390862401.350:85459): pid=43694 uid=0 auid=0 ses=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390862401.350:85460): pid=43694 uid=0 auid=0 ses=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390863301.361:85461): pid=43972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390863301.371:85462): pid=43972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390863301.371:85463): login pid=43972 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=501 >type=USER_START msg=audit(1390863301.371:85464): pid=43972 uid=0 auid=0 ses=501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390863301.371:85465): pid=43972 uid=0 auid=0 ses=501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390863301.381:85466): pid=43972 uid=0 auid=0 ses=501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390863301.391:85467): pid=43972 uid=0 auid=0 ses=501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390863661.391:85468): pid=44088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390863661.391:85469): pid=44088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390863661.391:85470): login pid=44088 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=502 >type=USER_START msg=audit(1390863661.401:85471): pid=44088 uid=0 auid=0 ses=502 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390863661.401:85472): pid=44088 uid=0 auid=0 ses=502 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390863661.411:85473): avc: denied { read } for pid=44104 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390863661.411:85473): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff6793b30 a2=84800 a3=0 items=0 ppid=44102 pid=44104 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=502 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390863661.421:85474): pid=44088 uid=0 auid=0 ses=502 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390863661.431:85475): pid=44088 uid=0 auid=0 ses=502 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390864201.431:85476): pid=44283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390864201.431:85477): pid=44283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390864201.431:85478): login pid=44283 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=503 >type=USER_START msg=audit(1390864201.441:85479): pid=44283 uid=0 auid=0 ses=503 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390864201.441:85480): pid=44283 uid=0 auid=0 ses=503 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390864201.441:85481): pid=44283 uid=0 auid=0 ses=503 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390864201.451:85482): pid=44283 uid=0 auid=0 ses=503 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390865101.462:85483): pid=44561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390865101.462:85484): pid=44561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390865101.462:85485): login pid=44561 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=504 >type=USER_START msg=audit(1390865101.462:85486): pid=44561 uid=0 auid=0 ses=504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390865101.462:85487): pid=44561 uid=0 auid=0 ses=504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390865101.472:85488): pid=44561 uid=0 auid=0 ses=504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390865101.472:85489): pid=44561 uid=0 auid=0 ses=504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390866001.482:85490): pid=44839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390866001.482:85491): pid=44839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390866001.482:85492): login pid=44839 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=505 >type=USER_START msg=audit(1390866001.482:85493): pid=44839 uid=0 auid=0 ses=505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390866001.482:85494): pid=44839 uid=0 auid=0 ses=505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390866001.492:85495): pid=44839 uid=0 auid=0 ses=505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390866001.492:85496): pid=44839 uid=0 auid=0 ses=505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390866901.503:85497): pid=45117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390866901.503:85498): pid=45117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390866901.503:85499): login pid=45117 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=506 >type=USER_START msg=audit(1390866901.513:85500): pid=45117 uid=0 auid=0 ses=506 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390866901.513:85501): pid=45117 uid=0 auid=0 ses=506 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390866901.513:85502): pid=45117 uid=0 auid=0 ses=506 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390866901.513:85503): pid=45117 uid=0 auid=0 ses=506 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390867261.523:85504): pid=45234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390867261.523:85505): pid=45234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390867261.523:85506): login pid=45234 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=507 >type=USER_START msg=audit(1390867261.523:85507): pid=45234 uid=0 auid=0 ses=507 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390867261.523:85508): pid=45234 uid=0 auid=0 ses=507 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390867261.543:85509): avc: denied { read } for pid=45250 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390867261.543:85509): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffefc697c0 a2=84800 a3=0 items=0 ppid=45248 pid=45250 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=507 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390867261.553:85510): pid=45234 uid=0 auid=0 ses=507 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390867261.553:85511): pid=45234 uid=0 auid=0 ses=507 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390867801.564:85512): pid=45426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390867801.564:85513): pid=45426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390867801.564:85514): login pid=45426 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=508 >type=USER_START msg=audit(1390867801.564:85515): pid=45426 uid=0 auid=0 ses=508 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390867801.574:85516): pid=45426 uid=0 auid=0 ses=508 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390867801.574:85517): pid=45426 uid=0 auid=0 ses=508 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390867801.574:85518): pid=45426 uid=0 auid=0 ses=508 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390868701.584:85519): pid=45704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390868701.584:85520): pid=45704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390868701.584:85521): login pid=45704 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=509 >type=USER_START msg=audit(1390868701.594:85522): pid=45704 uid=0 auid=0 ses=509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390868701.594:85523): pid=45704 uid=0 auid=0 ses=509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390868701.594:85524): pid=45704 uid=0 auid=0 ses=509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390868701.594:85525): pid=45704 uid=0 auid=0 ses=509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390869601.605:85526): pid=45982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390869601.605:85527): pid=45982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390869601.605:85528): login pid=45982 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=510 >type=USER_START msg=audit(1390869601.615:85529): pid=45982 uid=0 auid=0 ses=510 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390869601.615:85530): pid=45982 uid=0 auid=0 ses=510 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390869601.615:85531): pid=45982 uid=0 auid=0 ses=510 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390869601.625:85532): pid=45982 uid=0 auid=0 ses=510 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390870501.625:85533): pid=46259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390870501.635:85534): pid=46259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390870501.635:85535): login pid=46259 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=511 >type=USER_START msg=audit(1390870501.635:85536): pid=46259 uid=0 auid=0 ses=511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390870501.635:85537): pid=46259 uid=0 auid=0 ses=511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390870501.635:85538): pid=46259 uid=0 auid=0 ses=511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390870501.645:85539): pid=46259 uid=0 auid=0 ses=511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390870861.645:85540): pid=46375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390870861.645:85541): pid=46375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390870861.645:85542): login pid=46375 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=512 >type=USER_START msg=audit(1390870861.655:85543): pid=46375 uid=0 auid=0 ses=512 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390870861.655:85544): pid=46375 uid=0 auid=0 ses=512 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390870861.665:85545): avc: denied { read } for pid=46391 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390870861.665:85545): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffccc86c90 a2=84800 a3=0 items=0 ppid=46389 pid=46391 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=512 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390870861.685:85546): pid=46375 uid=0 auid=0 ses=512 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390870861.685:85547): pid=46375 uid=0 auid=0 ses=512 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390871401.696:85548): pid=46568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390871401.696:85549): pid=46568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390871401.696:85550): login pid=46568 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=513 >type=USER_START msg=audit(1390871401.696:85551): pid=46568 uid=0 auid=0 ses=513 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390871401.696:85552): pid=46568 uid=0 auid=0 ses=513 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390871401.706:85553): pid=46568 uid=0 auid=0 ses=513 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390871401.706:85554): pid=46568 uid=0 auid=0 ses=513 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390872301.716:85555): pid=46847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390872301.716:85556): pid=46847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390872301.716:85557): login pid=46847 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=514 >type=USER_START msg=audit(1390872301.726:85558): pid=46847 uid=0 auid=0 ses=514 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390872301.726:85559): pid=46847 uid=0 auid=0 ses=514 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390872301.736:85560): pid=46847 uid=0 auid=0 ses=514 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390872301.736:85561): pid=46847 uid=0 auid=0 ses=514 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390873201.747:85562): pid=47126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390873201.747:85563): pid=47126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390873201.747:85564): login pid=47126 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=515 >type=USER_START msg=audit(1390873201.757:85565): pid=47126 uid=0 auid=0 ses=515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390873201.757:85566): pid=47126 uid=0 auid=0 ses=515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390873201.757:85567): pid=47126 uid=0 auid=0 ses=515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390873201.757:85568): pid=47126 uid=0 auid=0 ses=515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390874101.767:85569): pid=47403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390874101.767:85570): pid=47403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390874101.767:85571): login pid=47403 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=516 >type=USER_START msg=audit(1390874101.777:85572): pid=47403 uid=0 auid=0 ses=516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390874101.777:85573): pid=47403 uid=0 auid=0 ses=516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390874101.777:85574): pid=47403 uid=0 auid=0 ses=516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390874101.777:85575): pid=47403 uid=0 auid=0 ses=516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390874461.787:85576): pid=47518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390874461.787:85577): pid=47518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390874461.787:85578): login pid=47518 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=517 >type=USER_START msg=audit(1390874461.797:85579): pid=47518 uid=0 auid=0 ses=517 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390874461.797:85580): pid=47518 uid=0 auid=0 ses=517 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390874461.817:85581): avc: denied { read } for pid=47537 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390874461.817:85581): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffcbeacb0 a2=84800 a3=0 items=0 ppid=47535 pid=47537 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=517 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390874461.827:85582): pid=47518 uid=0 auid=0 ses=517 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390874461.827:85583): pid=47518 uid=0 auid=0 ses=517 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390875001.828:85584): pid=47716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390875001.828:85585): pid=47716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390875001.828:85586): login pid=47716 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=518 >type=USER_START msg=audit(1390875001.828:85587): pid=47716 uid=0 auid=0 ses=518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390875001.828:85588): pid=47716 uid=0 auid=0 ses=518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390875001.838:85589): pid=47716 uid=0 auid=0 ses=518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390875001.838:85590): pid=47716 uid=0 auid=0 ses=518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390875901.848:85591): pid=47994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390875901.848:85592): pid=47994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390875901.848:85593): login pid=47994 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=519 >type=USER_START msg=audit(1390875901.848:85594): pid=47994 uid=0 auid=0 ses=519 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390875901.848:85595): pid=47994 uid=0 auid=0 ses=519 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390875901.858:85596): pid=47994 uid=0 auid=0 ses=519 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390875901.858:85597): pid=47994 uid=0 auid=0 ses=519 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390876801.869:85598): pid=48271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390876801.869:85599): pid=48271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390876801.869:85600): login pid=48271 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=520 >type=USER_START msg=audit(1390876801.869:85601): pid=48271 uid=0 auid=0 ses=520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390876801.869:85602): pid=48271 uid=0 auid=0 ses=520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390876801.879:85603): pid=48271 uid=0 auid=0 ses=520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390876801.879:85604): pid=48271 uid=0 auid=0 ses=520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390877701.889:85605): pid=48548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390877701.889:85606): pid=48548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390877701.889:85607): login pid=48548 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=521 >type=USER_START msg=audit(1390877701.889:85608): pid=48548 uid=0 auid=0 ses=521 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390877701.899:85609): pid=48548 uid=0 auid=0 ses=521 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390877701.899:85610): pid=48548 uid=0 auid=0 ses=521 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390877701.899:85611): pid=48548 uid=0 auid=0 ses=521 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390878061.910:85612): pid=48667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390878061.910:85613): pid=48667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390878061.910:85614): login pid=48667 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=522 >type=USER_START msg=audit(1390878061.910:85615): pid=48667 uid=0 auid=0 ses=522 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390878061.910:85616): pid=48667 uid=0 auid=0 ses=522 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390878061.930:85617): avc: denied { read } for pid=48687 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390878061.930:85617): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc55edf50 a2=84800 a3=0 items=0 ppid=48685 pid=48687 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=522 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390878061.950:85618): pid=48667 uid=0 auid=0 ses=522 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390878061.950:85619): pid=48667 uid=0 auid=0 ses=522 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390878601.960:85620): pid=48863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390878601.960:85621): pid=48863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390878601.960:85622): login pid=48863 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=523 >type=USER_START msg=audit(1390878601.960:85623): pid=48863 uid=0 auid=0 ses=523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390878601.960:85624): pid=48863 uid=0 auid=0 ses=523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390878601.970:85625): pid=48863 uid=0 auid=0 ses=523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390878601.970:85626): pid=48863 uid=0 auid=0 ses=523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390879501.980:85627): pid=49140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390879501.980:85628): pid=49140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390879501.980:85629): login pid=49140 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=524 >type=USER_START msg=audit(1390879501.980:85630): pid=49140 uid=0 auid=0 ses=524 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390879501.980:85631): pid=49140 uid=0 auid=0 ses=524 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390879501.990:85632): pid=49140 uid=0 auid=0 ses=524 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390879501.990:85633): pid=49140 uid=0 auid=0 ses=524 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390880402.001:85634): pid=49418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390880402.001:85635): pid=49418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390880402.001:85636): login pid=49418 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=525 >type=USER_START msg=audit(1390880402.011:85637): pid=49418 uid=0 auid=0 ses=525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390880402.011:85638): pid=49418 uid=0 auid=0 ses=525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390880402.021:85639): pid=49418 uid=0 auid=0 ses=525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390880402.021:85640): pid=49418 uid=0 auid=0 ses=525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390881301.032:85641): pid=49696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390881301.032:85642): pid=49696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390881301.032:85643): login pid=49696 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=526 >type=USER_START msg=audit(1390881301.042:85644): pid=49696 uid=0 auid=0 ses=526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390881301.042:85645): pid=49696 uid=0 auid=0 ses=526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390881301.042:85646): pid=49696 uid=0 auid=0 ses=526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390881301.042:85647): pid=49696 uid=0 auid=0 ses=526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390881661.052:85648): pid=49812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390881661.052:85649): pid=49812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390881661.052:85650): login pid=49812 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=527 >type=USER_START msg=audit(1390881661.062:85651): pid=49812 uid=0 auid=0 ses=527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390881661.062:85652): pid=49812 uid=0 auid=0 ses=527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390881661.082:85653): avc: denied { read } for pid=49831 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390881661.082:85653): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdc2452b0 a2=84800 a3=0 items=0 ppid=49829 pid=49831 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=527 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390881661.092:85654): pid=49812 uid=0 auid=0 ses=527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390881661.092:85655): pid=49812 uid=0 auid=0 ses=527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390882201.102:85656): pid=50008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390882201.102:85657): pid=50008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390882201.102:85658): login pid=50008 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=528 >type=USER_START msg=audit(1390882201.102:85659): pid=50008 uid=0 auid=0 ses=528 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390882201.102:85660): pid=50008 uid=0 auid=0 ses=528 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390882201.112:85661): pid=50008 uid=0 auid=0 ses=528 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390882201.112:85662): pid=50008 uid=0 auid=0 ses=528 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390883101.123:85663): pid=50286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390883101.123:85664): pid=50286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390883101.123:85665): login pid=50286 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=529 >type=USER_START msg=audit(1390883101.123:85666): pid=50286 uid=0 auid=0 ses=529 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390883101.123:85667): pid=50286 uid=0 auid=0 ses=529 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390883101.133:85668): pid=50286 uid=0 auid=0 ses=529 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390883101.133:85669): pid=50286 uid=0 auid=0 ses=529 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390884001.143:85670): pid=50563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390884001.143:85671): pid=50563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390884001.143:85672): login pid=50563 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=530 >type=USER_START msg=audit(1390884001.153:85673): pid=50563 uid=0 auid=0 ses=530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390884001.153:85674): pid=50563 uid=0 auid=0 ses=530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390884001.153:85675): pid=50563 uid=0 auid=0 ses=530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390884001.153:85676): pid=50563 uid=0 auid=0 ses=530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390884901.164:85677): pid=50842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390884901.164:85678): pid=50842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390884901.164:85679): login pid=50842 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=531 >type=USER_START msg=audit(1390884901.174:85680): pid=50842 uid=0 auid=0 ses=531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390884901.174:85681): pid=50842 uid=0 auid=0 ses=531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390884901.174:85682): pid=50842 uid=0 auid=0 ses=531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390884901.184:85683): pid=50842 uid=0 auid=0 ses=531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390885261.184:85684): pid=50958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390885261.184:85685): pid=50958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390885261.184:85686): login pid=50958 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=532 >type=USER_START msg=audit(1390885261.194:85687): pid=50958 uid=0 auid=0 ses=532 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390885261.194:85688): pid=50958 uid=0 auid=0 ses=532 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390885261.214:85689): avc: denied { read } for pid=50977 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390885261.214:85689): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd11dc9b0 a2=84800 a3=0 items=0 ppid=50975 pid=50977 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=532 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390885261.224:85690): pid=50958 uid=0 auid=0 ses=532 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390885261.224:85691): pid=50958 uid=0 auid=0 ses=532 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390885801.234:85692): pid=51151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390885801.234:85693): pid=51151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390885801.234:85694): login pid=51151 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=533 >type=USER_START msg=audit(1390885801.234:85695): pid=51151 uid=0 auid=0 ses=533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390885801.234:85696): pid=51151 uid=0 auid=0 ses=533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390885801.244:85697): pid=51151 uid=0 auid=0 ses=533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390885801.244:85698): pid=51151 uid=0 auid=0 ses=533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390885861.224:85699): avc: denied { read } for pid=51179 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390885861.224:85699): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd9af9340 a2=84800 a3=0 items=0 ppid=51177 pid=51179 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=532 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1390886701.255:85700): pid=54497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390886701.255:85701): pid=54497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390886701.265:85702): login pid=54497 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=534 >type=USER_START msg=audit(1390886701.265:85703): pid=54497 uid=0 auid=0 ses=534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390886701.265:85704): pid=54497 uid=0 auid=0 ses=534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390886701.275:85705): pid=54497 uid=0 auid=0 ses=534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390886701.275:85706): pid=54497 uid=0 auid=0 ses=534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390887601.285:85707): pid=54783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390887601.285:85708): pid=54783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390887601.285:85709): login pid=54783 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=535 >type=USER_START msg=audit(1390887601.295:85710): pid=54783 uid=0 auid=0 ses=535 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390887601.295:85711): pid=54783 uid=0 auid=0 ses=535 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390887601.305:85712): pid=54783 uid=0 auid=0 ses=535 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390887601.305:85713): pid=54783 uid=0 auid=0 ses=535 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390888501.316:85714): pid=55061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390888501.326:85715): pid=55061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390888501.326:85716): login pid=55061 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=536 >type=USER_START msg=audit(1390888501.326:85717): pid=55061 uid=0 auid=0 ses=536 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390888501.326:85718): pid=55061 uid=0 auid=0 ses=536 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390888501.336:85719): pid=55061 uid=0 auid=0 ses=536 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390888501.346:85720): pid=55061 uid=0 auid=0 ses=536 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390888861.346:85721): pid=55179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390888861.346:85722): pid=55179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390888861.346:85723): login pid=55179 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=537 >type=USER_START msg=audit(1390888861.356:85724): pid=55179 uid=0 auid=0 ses=537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390888861.356:85725): pid=55179 uid=0 auid=0 ses=537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390888861.366:85726): avc: denied { read } for pid=55195 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390888861.366:85726): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe068edc0 a2=84800 a3=0 items=0 ppid=55193 pid=55195 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=537 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390888861.386:85727): pid=55179 uid=0 auid=0 ses=537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390888861.386:85728): pid=55179 uid=0 auid=0 ses=537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390889401.396:85729): pid=55373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390889401.396:85730): pid=55373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390889401.406:85731): login pid=55373 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=538 >type=USER_START msg=audit(1390889401.406:85732): pid=55373 uid=0 auid=0 ses=538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390889401.406:85733): pid=55373 uid=0 auid=0 ses=538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390889401.416:85734): pid=55373 uid=0 auid=0 ses=538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390889401.426:85735): pid=55373 uid=0 auid=0 ses=538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390890301.437:85736): pid=55651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390890301.437:85737): pid=55651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390890301.437:85738): login pid=55651 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=539 >type=USER_START msg=audit(1390890301.437:85739): pid=55651 uid=0 auid=0 ses=539 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390890301.437:85740): pid=55651 uid=0 auid=0 ses=539 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390890301.447:85741): pid=55651 uid=0 auid=0 ses=539 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390890301.447:85742): pid=55651 uid=0 auid=0 ses=539 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390891201.457:85743): pid=55929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390891201.457:85744): pid=55929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390891201.457:85745): login pid=55929 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=540 >type=USER_START msg=audit(1390891201.457:85746): pid=55929 uid=0 auid=0 ses=540 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390891201.457:85747): pid=55929 uid=0 auid=0 ses=540 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390891201.467:85748): pid=55929 uid=0 auid=0 ses=540 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390891201.467:85749): pid=55929 uid=0 auid=0 ses=540 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390892101.468:85750): pid=56207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390892101.468:85751): pid=56207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390892101.468:85752): login pid=56207 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=541 >type=USER_START msg=audit(1390892101.468:85753): pid=56207 uid=0 auid=0 ses=541 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390892101.468:85754): pid=56207 uid=0 auid=0 ses=541 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390892101.478:85755): pid=56207 uid=0 auid=0 ses=541 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390892101.478:85756): pid=56207 uid=0 auid=0 ses=541 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390892461.488:85757): pid=56324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390892461.488:85758): pid=56324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390892461.488:85759): login pid=56324 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=542 >type=USER_START msg=audit(1390892461.488:85760): pid=56324 uid=0 auid=0 ses=542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390892461.488:85761): pid=56324 uid=0 auid=0 ses=542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390892461.508:85762): avc: denied { read } for pid=56340 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390892461.508:85762): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe438c240 a2=84800 a3=0 items=0 ppid=56338 pid=56340 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=542 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390892461.518:85763): pid=56324 uid=0 auid=0 ses=542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390892461.518:85764): pid=56324 uid=0 auid=0 ses=542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390893001.529:85765): pid=56516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390893001.529:85766): pid=56516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390893001.529:85767): login pid=56516 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=543 >type=USER_START msg=audit(1390893001.529:85768): pid=56516 uid=0 auid=0 ses=543 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390893001.529:85769): pid=56516 uid=0 auid=0 ses=543 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390893001.539:85770): pid=56516 uid=0 auid=0 ses=543 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390893001.539:85771): pid=56516 uid=0 auid=0 ses=543 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390893901.549:85772): pid=56794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390893901.549:85773): pid=56794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390893901.549:85774): login pid=56794 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=544 >type=USER_START msg=audit(1390893901.549:85775): pid=56794 uid=0 auid=0 ses=544 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390893901.549:85776): pid=56794 uid=0 auid=0 ses=544 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390893901.559:85777): pid=56794 uid=0 auid=0 ses=544 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390893901.559:85778): pid=56794 uid=0 auid=0 ses=544 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390894801.570:85779): pid=57072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390894801.570:85780): pid=57072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390894801.570:85781): login pid=57072 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=545 >type=USER_START msg=audit(1390894801.570:85782): pid=57072 uid=0 auid=0 ses=545 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390894801.570:85783): pid=57072 uid=0 auid=0 ses=545 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390894801.580:85784): pid=57072 uid=0 auid=0 ses=545 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390894801.580:85785): pid=57072 uid=0 auid=0 ses=545 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390895701.590:85786): pid=57349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390895701.590:85787): pid=57349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390895701.590:85788): login pid=57349 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=546 >type=USER_START msg=audit(1390895701.590:85789): pid=57349 uid=0 auid=0 ses=546 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390895701.590:85790): pid=57349 uid=0 auid=0 ses=546 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390895701.600:85791): pid=57349 uid=0 auid=0 ses=546 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390895701.600:85792): pid=57349 uid=0 auid=0 ses=546 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390896061.610:85793): pid=57466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390896061.610:85794): pid=57466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390896061.610:85795): login pid=57466 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=547 >type=USER_START msg=audit(1390896061.610:85796): pid=57466 uid=0 auid=0 ses=547 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390896061.610:85797): pid=57466 uid=0 auid=0 ses=547 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390896061.630:85798): avc: denied { read } for pid=57482 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390896061.630:85798): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc8749d70 a2=84800 a3=0 items=0 ppid=57480 pid=57482 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=547 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390896061.640:85799): pid=57466 uid=0 auid=0 ses=547 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390896061.640:85800): pid=57466 uid=0 auid=0 ses=547 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390896601.651:85801): pid=57658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390896601.651:85802): pid=57658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390896601.651:85803): login pid=57658 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=548 >type=USER_START msg=audit(1390896601.661:85804): pid=57658 uid=0 auid=0 ses=548 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390896601.661:85805): pid=57658 uid=0 auid=0 ses=548 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390896601.661:85806): pid=57658 uid=0 auid=0 ses=548 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390896601.661:85807): pid=57658 uid=0 auid=0 ses=548 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390897501.681:85808): pid=57935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390897501.681:85809): pid=57935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390897501.681:85810): login pid=57935 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=549 >type=USER_START msg=audit(1390897501.681:85811): pid=57935 uid=0 auid=0 ses=549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390897501.681:85812): pid=57935 uid=0 auid=0 ses=549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390897501.701:85813): pid=57935 uid=0 auid=0 ses=549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390897501.701:85814): pid=57935 uid=0 auid=0 ses=549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390898401.712:85815): pid=58215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390898401.712:85816): pid=58215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390898401.712:85817): login pid=58215 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=550 >type=USER_START msg=audit(1390898401.712:85818): pid=58215 uid=0 auid=0 ses=550 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390898401.712:85819): pid=58215 uid=0 auid=0 ses=550 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390898401.722:85820): pid=58215 uid=0 auid=0 ses=550 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390898401.722:85821): pid=58215 uid=0 auid=0 ses=550 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390899301.732:85822): pid=58491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390899301.732:85823): pid=58491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390899301.732:85824): login pid=58491 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=551 >type=USER_START msg=audit(1390899301.732:85825): pid=58491 uid=0 auid=0 ses=551 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390899301.732:85826): pid=58491 uid=0 auid=0 ses=551 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390899301.742:85827): pid=58491 uid=0 auid=0 ses=551 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390899301.742:85828): pid=58491 uid=0 auid=0 ses=551 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390899661.752:85829): pid=58607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390899661.752:85830): pid=58607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390899661.752:85831): login pid=58607 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=552 >type=USER_START msg=audit(1390899661.752:85832): pid=58607 uid=0 auid=0 ses=552 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390899661.752:85833): pid=58607 uid=0 auid=0 ses=552 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390899661.772:85834): avc: denied { read } for pid=58623 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390899661.772:85834): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd3f1d810 a2=84800 a3=0 items=0 ppid=58621 pid=58623 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=552 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390899661.782:85835): pid=58607 uid=0 auid=0 ses=552 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390899661.782:85836): pid=58607 uid=0 auid=0 ses=552 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390900201.793:85837): pid=58802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390900201.793:85838): pid=58802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390900201.793:85839): login pid=58802 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=553 >type=USER_START msg=audit(1390900201.793:85840): pid=58802 uid=0 auid=0 ses=553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390900201.793:85841): pid=58802 uid=0 auid=0 ses=553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390900201.803:85842): pid=58802 uid=0 auid=0 ses=553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390900201.803:85843): pid=58802 uid=0 auid=0 ses=553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390901101.813:85844): pid=59080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390901101.813:85845): pid=59080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390901101.813:85846): login pid=59080 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=554 >type=USER_START msg=audit(1390901101.813:85847): pid=59080 uid=0 auid=0 ses=554 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390901101.823:85848): pid=59080 uid=0 auid=0 ses=554 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390901101.823:85849): pid=59080 uid=0 auid=0 ses=554 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390901101.823:85850): pid=59080 uid=0 auid=0 ses=554 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390902001.834:85851): pid=59356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390902001.834:85852): pid=59356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390902001.834:85853): login pid=59356 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=555 >type=USER_START msg=audit(1390902001.844:85854): pid=59356 uid=0 auid=0 ses=555 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390902001.844:85855): pid=59356 uid=0 auid=0 ses=555 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390902001.854:85856): pid=59356 uid=0 auid=0 ses=555 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390902001.854:85857): pid=59356 uid=0 auid=0 ses=555 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390902901.864:85858): pid=59636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390902901.864:85859): pid=59636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390902901.864:85860): login pid=59636 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=556 >type=USER_START msg=audit(1390902901.864:85861): pid=59636 uid=0 auid=0 ses=556 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390902901.864:85862): pid=59636 uid=0 auid=0 ses=556 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390902901.874:85863): pid=59636 uid=0 auid=0 ses=556 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390902901.874:85864): pid=59636 uid=0 auid=0 ses=556 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390903261.885:85865): pid=59753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390903261.885:85866): pid=59753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390903261.885:85867): login pid=59753 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=557 >type=USER_START msg=audit(1390903261.885:85868): pid=59753 uid=0 auid=0 ses=557 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390903261.885:85869): pid=59753 uid=0 auid=0 ses=557 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390903261.905:85870): avc: denied { read } for pid=59769 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390903261.905:85870): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc9cf8140 a2=84800 a3=0 items=0 ppid=59767 pid=59769 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=557 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390903261.915:85871): pid=59753 uid=0 auid=0 ses=557 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390903261.925:85872): pid=59753 uid=0 auid=0 ses=557 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390903801.925:85873): pid=59946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390903801.925:85874): pid=59946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390903801.925:85875): login pid=59946 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=558 >type=USER_START msg=audit(1390903801.935:85876): pid=59946 uid=0 auid=0 ses=558 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390903801.935:85877): pid=59946 uid=0 auid=0 ses=558 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390903801.935:85878): pid=59946 uid=0 auid=0 ses=558 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390903801.945:85879): pid=59946 uid=0 auid=0 ses=558 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390904701.945:85880): pid=60224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390904701.945:85881): pid=60224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390904701.945:85882): login pid=60224 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=559 >type=USER_START msg=audit(1390904701.955:85883): pid=60224 uid=0 auid=0 ses=559 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390904701.955:85884): pid=60224 uid=0 auid=0 ses=559 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390904701.955:85885): pid=60224 uid=0 auid=0 ses=559 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390904701.965:85886): pid=60224 uid=0 auid=0 ses=559 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390905601.976:85887): pid=60503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390905601.976:85888): pid=60503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390905601.976:85889): login pid=60503 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=560 >type=USER_START msg=audit(1390905601.986:85890): pid=60503 uid=0 auid=0 ses=560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390905601.986:85891): pid=60503 uid=0 auid=0 ses=560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390905601.996:85892): pid=60503 uid=0 auid=0 ses=560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390905601.996:85893): pid=60503 uid=0 auid=0 ses=560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390906502.017:85894): pid=60780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390906502.017:85895): pid=60780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390906502.017:85896): login pid=60780 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=561 >type=USER_START msg=audit(1390906502.017:85897): pid=60780 uid=0 auid=0 ses=561 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390906502.017:85898): pid=60780 uid=0 auid=0 ses=561 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390906502.027:85899): pid=60780 uid=0 auid=0 ses=561 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390906502.037:85900): pid=60780 uid=0 auid=0 ses=561 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390906861.037:85901): pid=60897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390906861.037:85902): pid=60897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390906861.037:85903): login pid=60897 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=562 >type=USER_START msg=audit(1390906861.047:85904): pid=60897 uid=0 auid=0 ses=562 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390906861.047:85905): pid=60897 uid=0 auid=0 ses=562 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390906861.057:85906): avc: denied { read } for pid=60913 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390906861.057:85906): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe8e4a450 a2=84800 a3=0 items=0 ppid=60911 pid=60913 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=562 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390906861.067:85907): pid=60897 uid=0 auid=0 ses=562 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390906861.077:85908): pid=60897 uid=0 auid=0 ses=562 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390907401.077:85909): pid=61089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390907401.077:85910): pid=61089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390907401.087:85911): login pid=61089 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=563 >type=USER_START msg=audit(1390907401.087:85912): pid=61089 uid=0 auid=0 ses=563 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390907401.087:85913): pid=61089 uid=0 auid=0 ses=563 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390907401.097:85914): pid=61089 uid=0 auid=0 ses=563 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390907401.097:85915): pid=61089 uid=0 auid=0 ses=563 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390908301.098:85916): pid=61366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390908301.098:85917): pid=61366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390908301.098:85918): login pid=61366 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=564 >type=USER_START msg=audit(1390908301.098:85919): pid=61366 uid=0 auid=0 ses=564 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390908301.098:85920): pid=61366 uid=0 auid=0 ses=564 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390908301.108:85921): pid=61366 uid=0 auid=0 ses=564 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390908301.108:85922): pid=61366 uid=0 auid=0 ses=564 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390909201.118:85923): pid=61645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390909201.118:85924): pid=61645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390909201.118:85925): login pid=61645 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=565 >type=USER_START msg=audit(1390909201.118:85926): pid=61645 uid=0 auid=0 ses=565 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390909201.118:85927): pid=61645 uid=0 auid=0 ses=565 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390909201.128:85928): pid=61645 uid=0 auid=0 ses=565 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390909201.128:85929): pid=61645 uid=0 auid=0 ses=565 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390910101.139:85930): pid=61922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390910101.139:85931): pid=61922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390910101.139:85932): login pid=61922 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=566 >type=USER_START msg=audit(1390910101.139:85933): pid=61922 uid=0 auid=0 ses=566 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390910101.139:85934): pid=61922 uid=0 auid=0 ses=566 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390910101.149:85935): pid=61922 uid=0 auid=0 ses=566 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390910101.149:85936): pid=61922 uid=0 auid=0 ses=566 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390910461.159:85937): pid=62038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390910461.159:85938): pid=62038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390910461.159:85939): login pid=62038 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=567 >type=USER_START msg=audit(1390910461.159:85940): pid=62038 uid=0 auid=0 ses=567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390910461.159:85941): pid=62038 uid=0 auid=0 ses=567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390910461.179:85942): avc: denied { read } for pid=62054 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390910461.179:85942): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe7bb0410 a2=84800 a3=0 items=0 ppid=62052 pid=62054 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=567 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390910461.189:85943): pid=62038 uid=0 auid=0 ses=567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390910461.189:85944): pid=62038 uid=0 auid=0 ses=567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390911001.199:85945): pid=62231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390911001.199:85946): pid=62231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390911001.199:85947): login pid=62231 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=568 >type=USER_START msg=audit(1390911001.199:85948): pid=62231 uid=0 auid=0 ses=568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390911001.199:85949): pid=62231 uid=0 auid=0 ses=568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390911001.209:85950): pid=62231 uid=0 auid=0 ses=568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390911001.209:85951): pid=62231 uid=0 auid=0 ses=568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390911901.220:85952): pid=62512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390911901.220:85953): pid=62512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390911901.220:85954): login pid=62512 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=569 >type=USER_START msg=audit(1390911901.230:85955): pid=62512 uid=0 auid=0 ses=569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390911901.230:85956): pid=62512 uid=0 auid=0 ses=569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390911901.230:85957): pid=62512 uid=0 auid=0 ses=569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390911901.230:85958): pid=62512 uid=0 auid=0 ses=569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390912801.240:85959): pid=62791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390912801.240:85960): pid=62791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390912801.240:85961): login pid=62791 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=570 >type=USER_START msg=audit(1390912801.250:85962): pid=62791 uid=0 auid=0 ses=570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390912801.250:85963): pid=62791 uid=0 auid=0 ses=570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390912801.250:85964): pid=62791 uid=0 auid=0 ses=570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390912801.250:85965): pid=62791 uid=0 auid=0 ses=570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390913701.271:85966): pid=63068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390913701.271:85967): pid=63068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390913701.271:85968): login pid=63068 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=571 >type=USER_START msg=audit(1390913701.271:85969): pid=63068 uid=0 auid=0 ses=571 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390913701.271:85970): pid=63068 uid=0 auid=0 ses=571 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390913701.291:85971): pid=63068 uid=0 auid=0 ses=571 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390913701.291:85972): pid=63068 uid=0 auid=0 ses=571 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390914061.301:85973): pid=63184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390914061.301:85974): pid=63184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390914061.301:85975): login pid=63184 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=572 >type=USER_START msg=audit(1390914061.301:85976): pid=63184 uid=0 auid=0 ses=572 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390914061.301:85977): pid=63184 uid=0 auid=0 ses=572 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390914061.321:85978): avc: denied { read } for pid=63201 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390914061.321:85978): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff41770d0 a2=84800 a3=0 items=0 ppid=63199 pid=63201 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=572 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390914061.331:85979): pid=63184 uid=0 auid=0 ses=572 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390914061.331:85980): pid=63184 uid=0 auid=0 ses=572 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390914601.341:85981): pid=63386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390914601.341:85982): pid=63386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390914601.341:85983): login pid=63386 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=573 >type=USER_START msg=audit(1390914601.351:85984): pid=63386 uid=0 auid=0 ses=573 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390914601.351:85985): pid=63386 uid=0 auid=0 ses=573 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390914601.361:85986): pid=63386 uid=0 auid=0 ses=573 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390914601.371:85987): pid=63386 uid=0 auid=0 ses=573 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390915501.382:85988): pid=63662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390915501.382:85989): pid=63662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390915501.382:85990): login pid=63662 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=574 >type=USER_START msg=audit(1390915501.382:85991): pid=63662 uid=0 auid=0 ses=574 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390915501.382:85992): pid=63662 uid=0 auid=0 ses=574 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390915501.392:85993): pid=63662 uid=0 auid=0 ses=574 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390915501.392:85994): pid=63662 uid=0 auid=0 ses=574 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390916401.402:85995): pid=63943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390916401.402:85996): pid=63943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390916401.402:85997): login pid=63943 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=575 >type=USER_START msg=audit(1390916401.402:85998): pid=63943 uid=0 auid=0 ses=575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390916401.402:85999): pid=63943 uid=0 auid=0 ses=575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390916401.412:86000): pid=63943 uid=0 auid=0 ses=575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390916401.412:86001): pid=63943 uid=0 auid=0 ses=575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390917301.423:86002): pid=64220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390917301.423:86003): pid=64220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390917301.423:86004): login pid=64220 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=576 >type=USER_START msg=audit(1390917301.423:86005): pid=64220 uid=0 auid=0 ses=576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390917301.423:86006): pid=64220 uid=0 auid=0 ses=576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390917301.433:86007): pid=64220 uid=0 auid=0 ses=576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390917301.433:86008): pid=64220 uid=0 auid=0 ses=576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390917661.443:86009): pid=64335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390917661.443:86010): pid=64335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390917661.443:86011): login pid=64335 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=577 >type=USER_START msg=audit(1390917661.443:86012): pid=64335 uid=0 auid=0 ses=577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390917661.443:86013): pid=64335 uid=0 auid=0 ses=577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390917661.463:86014): avc: denied { read } for pid=64351 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390917661.463:86014): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdd7163d0 a2=84800 a3=0 items=0 ppid=64349 pid=64351 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=577 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390917661.473:86015): pid=64335 uid=0 auid=0 ses=577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390917661.473:86016): pid=64335 uid=0 auid=0 ses=577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390918201.483:86017): pid=64530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390918201.483:86018): pid=64530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390918201.483:86019): login pid=64530 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=578 >type=USER_START msg=audit(1390918201.493:86020): pid=64530 uid=0 auid=0 ses=578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390918201.493:86021): pid=64530 uid=0 auid=0 ses=578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390918201.493:86022): pid=64530 uid=0 auid=0 ses=578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390918201.503:86023): pid=64530 uid=0 auid=0 ses=578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390919101.504:86024): pid=64807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390919101.504:86025): pid=64807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390919101.514:86026): login pid=64807 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=579 >type=USER_START msg=audit(1390919101.514:86027): pid=64807 uid=0 auid=0 ses=579 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390919101.514:86028): pid=64807 uid=0 auid=0 ses=579 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390919101.514:86029): pid=64807 uid=0 auid=0 ses=579 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390919101.524:86030): pid=64807 uid=0 auid=0 ses=579 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390920001.535:86031): pid=65085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390920001.535:86032): pid=65085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390920001.535:86033): login pid=65085 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=580 >type=USER_START msg=audit(1390920001.535:86034): pid=65085 uid=0 auid=0 ses=580 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390920001.545:86035): pid=65085 uid=0 auid=0 ses=580 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390920001.555:86036): pid=65085 uid=0 auid=0 ses=580 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390920001.555:86037): pid=65085 uid=0 auid=0 ses=580 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390920901.565:86038): pid=65363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390920901.565:86039): pid=65363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390920901.565:86040): login pid=65363 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=581 >type=USER_START msg=audit(1390920901.575:86041): pid=65363 uid=0 auid=0 ses=581 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390920901.575:86042): pid=65363 uid=0 auid=0 ses=581 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390920901.585:86043): pid=65363 uid=0 auid=0 ses=581 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390920901.585:86044): pid=65363 uid=0 auid=0 ses=581 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390921261.595:86045): pid=65481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390921261.595:86046): pid=65481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390921261.595:86047): login pid=65481 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=582 >type=USER_START msg=audit(1390921261.605:86048): pid=65481 uid=0 auid=0 ses=582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390921261.605:86049): pid=65481 uid=0 auid=0 ses=582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390921261.615:86050): avc: denied { read } for pid=65497 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390921261.615:86050): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd543b6c0 a2=84800 a3=0 items=0 ppid=65495 pid=65497 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=582 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390921261.625:86051): pid=65481 uid=0 auid=0 ses=582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390921261.635:86052): pid=65481 uid=0 auid=0 ses=582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390921801.636:86053): pid=464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390921801.636:86054): pid=464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390921801.636:86055): login pid=464 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=583 >type=USER_START msg=audit(1390921801.646:86056): pid=464 uid=0 auid=0 ses=583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390921801.646:86057): pid=464 uid=0 auid=0 ses=583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390921801.646:86058): pid=464 uid=0 auid=0 ses=583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390921801.656:86059): pid=464 uid=0 auid=0 ses=583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390922701.656:86060): pid=791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390922701.656:86061): pid=791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390922701.666:86062): login pid=791 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=584 >type=USER_START msg=audit(1390922701.666:86063): pid=791 uid=0 auid=0 ses=584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390922701.666:86064): pid=791 uid=0 auid=0 ses=584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390922701.666:86065): pid=791 uid=0 auid=0 ses=584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390922701.676:86066): pid=791 uid=0 auid=0 ses=584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390923601.687:86067): pid=1083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390923601.687:86068): pid=1083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390923601.687:86069): login pid=1083 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=585 >type=USER_START msg=audit(1390923601.687:86070): pid=1083 uid=0 auid=0 ses=585 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390923601.687:86071): pid=1083 uid=0 auid=0 ses=585 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390923601.697:86072): pid=1083 uid=0 auid=0 ses=585 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390923601.697:86073): pid=1083 uid=0 auid=0 ses=585 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390924501.707:86074): pid=1410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390924501.707:86075): pid=1410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390924501.707:86076): login pid=1410 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=586 >type=USER_START msg=audit(1390924501.707:86077): pid=1410 uid=0 auid=0 ses=586 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390924501.707:86078): pid=1410 uid=0 auid=0 ses=586 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390924501.717:86079): pid=1410 uid=0 auid=0 ses=586 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390924501.717:86080): pid=1410 uid=0 auid=0 ses=586 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390924861.717:86081): pid=1541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390924861.717:86082): pid=1541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390924861.727:86083): login pid=1541 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=587 >type=USER_START msg=audit(1390924861.727:86084): pid=1541 uid=0 auid=0 ses=587 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390924861.727:86085): pid=1541 uid=0 auid=0 ses=587 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390924861.737:86086): avc: denied { read } for pid=1560 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390924861.737:86086): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffceff9380 a2=84800 a3=0 items=0 ppid=1558 pid=1560 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=587 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390924861.747:86087): pid=1541 uid=0 auid=0 ses=587 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390924861.757:86088): pid=1541 uid=0 auid=0 ses=587 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390925401.748:86089): pid=1738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390925401.748:86090): pid=1738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390925401.748:86091): login pid=1738 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=588 >type=USER_START msg=audit(1390925401.758:86092): pid=1738 uid=0 auid=0 ses=588 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390925401.758:86093): pid=1738 uid=0 auid=0 ses=588 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390925401.768:86094): pid=1738 uid=0 auid=0 ses=588 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390925401.768:86095): pid=1738 uid=0 auid=0 ses=588 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390926301.778:86096): pid=2019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390926301.778:86097): pid=2019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390926301.778:86098): login pid=2019 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=589 >type=USER_START msg=audit(1390926301.778:86099): pid=2019 uid=0 auid=0 ses=589 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390926301.778:86100): pid=2019 uid=0 auid=0 ses=589 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390926301.788:86101): pid=2019 uid=0 auid=0 ses=589 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390926301.788:86102): pid=2019 uid=0 auid=0 ses=589 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390927201.799:86103): pid=2298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390927201.799:86104): pid=2298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390927201.799:86105): login pid=2298 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=590 >type=USER_START msg=audit(1390927201.799:86106): pid=2298 uid=0 auid=0 ses=590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390927201.799:86107): pid=2298 uid=0 auid=0 ses=590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390927201.809:86108): pid=2298 uid=0 auid=0 ses=590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390927201.809:86109): pid=2298 uid=0 auid=0 ses=590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390928101.819:86110): pid=2576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390928101.819:86111): pid=2576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390928101.819:86112): login pid=2576 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=591 >type=USER_START msg=audit(1390928101.819:86113): pid=2576 uid=0 auid=0 ses=591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390928101.829:86114): pid=2576 uid=0 auid=0 ses=591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390928101.829:86115): pid=2576 uid=0 auid=0 ses=591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390928101.829:86116): pid=2576 uid=0 auid=0 ses=591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390928461.840:86117): pid=2692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390928461.840:86118): pid=2692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390928461.840:86119): login pid=2692 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=592 >type=USER_START msg=audit(1390928461.840:86120): pid=2692 uid=0 auid=0 ses=592 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390928461.840:86121): pid=2692 uid=0 auid=0 ses=592 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390928461.860:86122): avc: denied { read } for pid=2708 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390928461.860:86122): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc15cdf80 a2=84800 a3=0 items=0 ppid=2706 pid=2708 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=592 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390928461.880:86123): pid=2692 uid=0 auid=0 ses=592 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390928461.880:86124): pid=2692 uid=0 auid=0 ses=592 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390929001.890:86125): pid=2887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390929001.890:86126): pid=2887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390929001.890:86127): login pid=2887 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=593 >type=USER_START msg=audit(1390929001.890:86128): pid=2887 uid=0 auid=0 ses=593 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390929001.890:86129): pid=2887 uid=0 auid=0 ses=593 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390929001.900:86130): pid=2887 uid=0 auid=0 ses=593 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390929001.900:86131): pid=2887 uid=0 auid=0 ses=593 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390929901.910:86132): pid=3165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390929901.910:86133): pid=3165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390929901.910:86134): login pid=3165 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=594 >type=USER_START msg=audit(1390929901.910:86135): pid=3165 uid=0 auid=0 ses=594 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390929901.910:86136): pid=3165 uid=0 auid=0 ses=594 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390929901.920:86137): pid=3165 uid=0 auid=0 ses=594 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390929901.920:86138): pid=3165 uid=0 auid=0 ses=594 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390930801.931:86139): pid=3443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390930801.931:86140): pid=3443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390930801.931:86141): login pid=3443 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=595 >type=USER_START msg=audit(1390930801.931:86142): pid=3443 uid=0 auid=0 ses=595 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390930801.931:86143): pid=3443 uid=0 auid=0 ses=595 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390930801.941:86144): pid=3443 uid=0 auid=0 ses=595 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390930801.941:86145): pid=3443 uid=0 auid=0 ses=595 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390931701.952:86146): pid=3722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390931701.952:86147): pid=3722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390931701.952:86148): login pid=3722 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=596 >type=USER_START msg=audit(1390931701.952:86149): pid=3722 uid=0 auid=0 ses=596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390931701.952:86150): pid=3722 uid=0 auid=0 ses=596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390931701.962:86151): pid=3722 uid=0 auid=0 ses=596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390931701.962:86152): pid=3722 uid=0 auid=0 ses=596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390932061.972:86153): pid=3837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390932061.972:86154): pid=3837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390932061.972:86155): login pid=3837 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=597 >type=USER_START msg=audit(1390932061.972:86156): pid=3837 uid=0 auid=0 ses=597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390932061.972:86157): pid=3837 uid=0 auid=0 ses=597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390932061.992:86158): avc: denied { read } for pid=3853 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390932061.992:86158): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffda79bb00 a2=84800 a3=0 items=0 ppid=3851 pid=3853 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=597 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390932062.002:86159): pid=3837 uid=0 auid=0 ses=597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390932062.002:86160): pid=3837 uid=0 auid=0 ses=597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390932601.012:86161): pid=4032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390932601.012:86162): pid=4032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390932601.012:86163): login pid=4032 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=598 >type=USER_START msg=audit(1390932601.022:86164): pid=4032 uid=0 auid=0 ses=598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390932601.022:86165): pid=4032 uid=0 auid=0 ses=598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390932601.022:86166): pid=4032 uid=0 auid=0 ses=598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390932601.022:86167): pid=4032 uid=0 auid=0 ses=598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390933501.043:86168): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390933501.043:86169): pid=4310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390933501.043:86170): login pid=4310 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=599 >type=USER_START msg=audit(1390933501.043:86171): pid=4310 uid=0 auid=0 ses=599 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390933501.043:86172): pid=4310 uid=0 auid=0 ses=599 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390933501.063:86173): pid=4310 uid=0 auid=0 ses=599 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390933501.063:86174): pid=4310 uid=0 auid=0 ses=599 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390934401.073:86175): pid=4589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390934401.073:86176): pid=4589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390934401.073:86177): login pid=4589 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=600 >type=USER_START msg=audit(1390934401.073:86178): pid=4589 uid=0 auid=0 ses=600 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390934401.073:86179): pid=4589 uid=0 auid=0 ses=600 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390934401.083:86180): pid=4589 uid=0 auid=0 ses=600 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390934401.083:86181): pid=4589 uid=0 auid=0 ses=600 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390935301.094:86182): pid=4866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390935301.094:86183): pid=4866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390935301.094:86184): login pid=4866 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=601 >type=USER_START msg=audit(1390935301.094:86185): pid=4866 uid=0 auid=0 ses=601 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390935301.094:86186): pid=4866 uid=0 auid=0 ses=601 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390935301.104:86187): pid=4866 uid=0 auid=0 ses=601 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390935301.104:86188): pid=4866 uid=0 auid=0 ses=601 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390935661.114:86189): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390935661.114:86190): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390935661.114:86191): login pid=4982 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=602 >type=USER_START msg=audit(1390935661.114:86192): pid=4982 uid=0 auid=0 ses=602 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390935661.114:86193): pid=4982 uid=0 auid=0 ses=602 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390935661.134:86194): avc: denied { read } for pid=4998 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390935661.134:86194): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffda1dc380 a2=84800 a3=0 items=0 ppid=4996 pid=4998 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=602 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390935661.144:86195): pid=4982 uid=0 auid=0 ses=602 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390935661.144:86196): pid=4982 uid=0 auid=0 ses=602 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390936201.154:86197): pid=5176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390936201.154:86198): pid=5176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390936201.154:86199): login pid=5176 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=603 >type=USER_START msg=audit(1390936201.154:86200): pid=5176 uid=0 auid=0 ses=603 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390936201.154:86201): pid=5176 uid=0 auid=0 ses=603 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390936201.164:86202): pid=5176 uid=0 auid=0 ses=603 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390936201.164:86203): pid=5176 uid=0 auid=0 ses=603 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1390936484.294:86204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1390936484.294:86205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1390937101.175:86206): pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390937101.175:86207): pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390937101.175:86208): login pid=5455 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=604 >type=USER_START msg=audit(1390937101.185:86209): pid=5455 uid=0 auid=0 ses=604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390937101.185:86210): pid=5455 uid=0 auid=0 ses=604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390937101.185:86211): pid=5455 uid=0 auid=0 ses=604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390937101.195:86212): pid=5455 uid=0 auid=0 ses=604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390938001.205:86213): pid=5733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390938001.205:86214): pid=5733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390938001.205:86215): login pid=5733 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=605 >type=USER_START msg=audit(1390938001.205:86216): pid=5733 uid=0 auid=0 ses=605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390938001.205:86217): pid=5733 uid=0 auid=0 ses=605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390938001.215:86218): pid=5733 uid=0 auid=0 ses=605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390938001.215:86219): pid=5733 uid=0 auid=0 ses=605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390938901.226:86220): pid=6013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390938901.226:86221): pid=6013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390938901.226:86222): login pid=6013 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=606 >type=USER_START msg=audit(1390938901.226:86223): pid=6013 uid=0 auid=0 ses=606 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390938901.236:86224): pid=6013 uid=0 auid=0 ses=606 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390938901.236:86225): pid=6013 uid=0 auid=0 ses=606 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390938901.236:86226): pid=6013 uid=0 auid=0 ses=606 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390939261.246:86227): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390939261.246:86228): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390939261.246:86229): login pid=6129 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=607 >type=USER_START msg=audit(1390939261.246:86230): pid=6129 uid=0 auid=0 ses=607 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390939261.246:86231): pid=6129 uid=0 auid=0 ses=607 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390939261.266:86232): avc: denied { read } for pid=6145 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390939261.266:86232): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd8a415f0 a2=84800 a3=0 items=0 ppid=6143 pid=6145 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=607 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390939261.276:86233): pid=6129 uid=0 auid=0 ses=607 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390939261.286:86234): pid=6129 uid=0 auid=0 ses=607 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390939801.286:86235): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390939801.286:86236): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390939801.286:86237): login pid=6323 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=608 >type=USER_START msg=audit(1390939801.296:86238): pid=6323 uid=0 auid=0 ses=608 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390939801.296:86239): pid=6323 uid=0 auid=0 ses=608 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390939801.306:86240): pid=6323 uid=0 auid=0 ses=608 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390939801.306:86241): pid=6323 uid=0 auid=0 ses=608 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390940701.317:86242): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390940701.317:86243): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390940701.317:86244): login pid=6604 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=609 >type=USER_START msg=audit(1390940701.317:86245): pid=6604 uid=0 auid=0 ses=609 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390940701.317:86246): pid=6604 uid=0 auid=0 ses=609 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390940701.327:86247): pid=6604 uid=0 auid=0 ses=609 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390940701.327:86248): pid=6604 uid=0 auid=0 ses=609 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390941601.337:86249): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390941601.337:86250): pid=6881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390941601.337:86251): login pid=6881 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=610 >type=USER_START msg=audit(1390941601.337:86252): pid=6881 uid=0 auid=0 ses=610 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390941601.337:86253): pid=6881 uid=0 auid=0 ses=610 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390941601.347:86254): pid=6881 uid=0 auid=0 ses=610 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390941601.347:86255): pid=6881 uid=0 auid=0 ses=610 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390942501.348:86256): pid=7160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390942501.348:86257): pid=7160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390942501.348:86258): login pid=7160 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=611 >type=USER_START msg=audit(1390942501.358:86259): pid=7160 uid=0 auid=0 ses=611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390942501.358:86260): pid=7160 uid=0 auid=0 ses=611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390942501.358:86261): pid=7160 uid=0 auid=0 ses=611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390942501.358:86262): pid=7160 uid=0 auid=0 ses=611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390942861.368:86263): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390942861.368:86264): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390942861.368:86265): login pid=7277 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=612 >type=USER_START msg=audit(1390942861.368:86266): pid=7277 uid=0 auid=0 ses=612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390942861.368:86267): pid=7277 uid=0 auid=0 ses=612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390942861.388:86268): avc: denied { read } for pid=7293 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390942861.388:86268): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff500d0b0 a2=84800 a3=0 items=0 ppid=7291 pid=7293 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=612 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390942861.398:86269): pid=7277 uid=0 auid=0 ses=612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390942861.398:86270): pid=7277 uid=0 auid=0 ses=612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390943401.408:86271): pid=7469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390943401.408:86272): pid=7469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390943401.408:86273): login pid=7469 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=613 >type=USER_START msg=audit(1390943401.408:86274): pid=7469 uid=0 auid=0 ses=613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390943401.408:86275): pid=7469 uid=0 auid=0 ses=613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390943401.418:86276): pid=7469 uid=0 auid=0 ses=613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390943401.418:86277): pid=7469 uid=0 auid=0 ses=613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390944301.429:86278): pid=7748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390944301.429:86279): pid=7748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390944301.429:86280): login pid=7748 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=614 >type=USER_START msg=audit(1390944301.439:86281): pid=7748 uid=0 auid=0 ses=614 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390944301.439:86282): pid=7748 uid=0 auid=0 ses=614 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390944301.439:86283): pid=7748 uid=0 auid=0 ses=614 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390944301.439:86284): pid=7748 uid=0 auid=0 ses=614 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390945201.450:86285): pid=8027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390945201.450:86286): pid=8027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390945201.450:86287): login pid=8027 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=615 >type=USER_START msg=audit(1390945201.460:86288): pid=8027 uid=0 auid=0 ses=615 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390945201.460:86289): pid=8027 uid=0 auid=0 ses=615 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390945201.460:86290): pid=8027 uid=0 auid=0 ses=615 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390945201.460:86291): pid=8027 uid=0 auid=0 ses=615 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390946101.470:86292): pid=8305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390946101.470:86293): pid=8305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390946101.470:86294): login pid=8305 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=616 >type=USER_START msg=audit(1390946101.480:86295): pid=8305 uid=0 auid=0 ses=616 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390946101.480:86296): pid=8305 uid=0 auid=0 ses=616 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390946101.480:86297): pid=8305 uid=0 auid=0 ses=616 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390946101.490:86298): pid=8305 uid=0 auid=0 ses=616 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390946461.490:86299): pid=8423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390946461.490:86300): pid=8423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390946461.490:86301): login pid=8423 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=617 >type=USER_START msg=audit(1390946461.500:86302): pid=8423 uid=0 auid=0 ses=617 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390946461.500:86303): pid=8423 uid=0 auid=0 ses=617 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390946461.510:86304): avc: denied { read } for pid=8440 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390946461.510:86304): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffef391a00 a2=84800 a3=0 items=0 ppid=8438 pid=8440 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=617 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390946461.530:86305): pid=8423 uid=0 auid=0 ses=617 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390946461.530:86306): pid=8423 uid=0 auid=0 ses=617 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390947001.531:86307): pid=8618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390947001.531:86308): pid=8618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390947001.541:86309): login pid=8618 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=618 >type=USER_START msg=audit(1390947001.541:86310): pid=8618 uid=0 auid=0 ses=618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390947001.541:86311): pid=8618 uid=0 auid=0 ses=618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390947001.541:86312): pid=8618 uid=0 auid=0 ses=618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390947001.551:86313): pid=8618 uid=0 auid=0 ses=618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390947901.561:86314): pid=8895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390947901.561:86315): pid=8895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390947901.561:86316): login pid=8895 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=619 >type=USER_START msg=audit(1390947901.561:86317): pid=8895 uid=0 auid=0 ses=619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390947901.561:86318): pid=8895 uid=0 auid=0 ses=619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390947901.571:86319): pid=8895 uid=0 auid=0 ses=619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390947901.571:86320): pid=8895 uid=0 auid=0 ses=619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390948801.582:86321): pid=9174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390948801.582:86322): pid=9174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390948801.582:86323): login pid=9174 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=620 >type=USER_START msg=audit(1390948801.582:86324): pid=9174 uid=0 auid=0 ses=620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390948801.582:86325): pid=9174 uid=0 auid=0 ses=620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390948801.592:86326): pid=9174 uid=0 auid=0 ses=620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390948801.592:86327): pid=9174 uid=0 auid=0 ses=620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390949701.612:86328): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390949701.612:86329): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390949701.612:86330): login pid=9451 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=621 >type=USER_START msg=audit(1390949701.612:86331): pid=9451 uid=0 auid=0 ses=621 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390949701.612:86332): pid=9451 uid=0 auid=0 ses=621 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390949701.622:86333): pid=9451 uid=0 auid=0 ses=621 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390949701.632:86334): pid=9451 uid=0 auid=0 ses=621 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390950061.632:86335): pid=9567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390950061.632:86336): pid=9567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390950061.642:86337): login pid=9567 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=622 >type=USER_START msg=audit(1390950061.642:86338): pid=9567 uid=0 auid=0 ses=622 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390950061.642:86339): pid=9567 uid=0 auid=0 ses=622 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390950061.652:86340): avc: denied { read } for pid=9583 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390950061.652:86340): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd55f1b20 a2=84800 a3=0 items=0 ppid=9581 pid=9583 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=622 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390950061.672:86341): pid=9567 uid=0 auid=0 ses=622 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390950061.672:86342): pid=9567 uid=0 auid=0 ses=622 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390950601.683:86343): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390950601.683:86344): pid=9759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390950601.683:86345): login pid=9759 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=623 >type=USER_START msg=audit(1390950601.693:86346): pid=9759 uid=0 auid=0 ses=623 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390950601.693:86347): pid=9759 uid=0 auid=0 ses=623 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390950601.703:86348): pid=9759 uid=0 auid=0 ses=623 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390950601.703:86349): pid=9759 uid=0 auid=0 ses=623 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390951501.713:86350): pid=10040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390951501.713:86351): pid=10040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390951501.713:86352): login pid=10040 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=624 >type=USER_START msg=audit(1390951501.723:86353): pid=10040 uid=0 auid=0 ses=624 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390951501.723:86354): pid=10040 uid=0 auid=0 ses=624 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390951501.723:86355): pid=10040 uid=0 auid=0 ses=624 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390951501.733:86356): pid=10040 uid=0 auid=0 ses=624 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390952401.744:86357): pid=10318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390952401.744:86358): pid=10318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390952401.744:86359): login pid=10318 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=625 >type=USER_START msg=audit(1390952401.744:86360): pid=10318 uid=0 auid=0 ses=625 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390952401.744:86361): pid=10318 uid=0 auid=0 ses=625 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390952401.754:86362): pid=10318 uid=0 auid=0 ses=625 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390952401.754:86363): pid=10318 uid=0 auid=0 ses=625 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390953301.764:86364): pid=10598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390953301.764:86365): pid=10598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390953301.764:86366): login pid=10598 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=626 >type=USER_START msg=audit(1390953301.764:86367): pid=10598 uid=0 auid=0 ses=626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390953301.764:86368): pid=10598 uid=0 auid=0 ses=626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390953301.774:86369): pid=10598 uid=0 auid=0 ses=626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390953301.774:86370): pid=10598 uid=0 auid=0 ses=626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390953661.785:86371): pid=10714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390953661.785:86372): pid=10714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390953661.785:86373): login pid=10714 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=627 >type=USER_START msg=audit(1390953661.785:86374): pid=10714 uid=0 auid=0 ses=627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390953661.785:86375): pid=10714 uid=0 auid=0 ses=627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390953661.805:86376): avc: denied { read } for pid=10730 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390953661.805:86376): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff7b73660 a2=84800 a3=0 items=0 ppid=10728 pid=10730 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=627 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390953661.815:86377): pid=10714 uid=0 auid=0 ses=627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390953661.825:86378): pid=10714 uid=0 auid=0 ses=627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390954201.835:86379): pid=10907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390954201.835:86380): pid=10907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390954201.835:86381): login pid=10907 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=628 >type=USER_START msg=audit(1390954201.835:86382): pid=10907 uid=0 auid=0 ses=628 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390954201.835:86383): pid=10907 uid=0 auid=0 ses=628 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390954201.845:86384): pid=10907 uid=0 auid=0 ses=628 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390954201.845:86385): pid=10907 uid=0 auid=0 ses=628 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390955101.855:86386): pid=11184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390955101.855:86387): pid=11184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390955101.855:86388): login pid=11184 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=629 >type=USER_START msg=audit(1390955101.855:86389): pid=11184 uid=0 auid=0 ses=629 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390955101.855:86390): pid=11184 uid=0 auid=0 ses=629 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390955101.865:86391): pid=11184 uid=0 auid=0 ses=629 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390955101.865:86392): pid=11184 uid=0 auid=0 ses=629 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390956001.876:86393): pid=11464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390956001.876:86394): pid=11464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390956001.876:86395): login pid=11464 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=630 >type=USER_START msg=audit(1390956001.876:86396): pid=11464 uid=0 auid=0 ses=630 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390956001.876:86397): pid=11464 uid=0 auid=0 ses=630 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390956001.886:86398): pid=11464 uid=0 auid=0 ses=630 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390956001.886:86399): pid=11464 uid=0 auid=0 ses=630 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390956901.896:86400): pid=11743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390956901.896:86401): pid=11743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390956901.896:86402): login pid=11743 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=631 >type=USER_START msg=audit(1390956901.896:86403): pid=11743 uid=0 auid=0 ses=631 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390956901.896:86404): pid=11743 uid=0 auid=0 ses=631 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390956901.906:86405): pid=11743 uid=0 auid=0 ses=631 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390956901.906:86406): pid=11743 uid=0 auid=0 ses=631 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390957261.917:86407): pid=11859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390957261.917:86408): pid=11859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390957261.917:86409): login pid=11859 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=632 >type=USER_START msg=audit(1390957261.917:86410): pid=11859 uid=0 auid=0 ses=632 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390957261.917:86411): pid=11859 uid=0 auid=0 ses=632 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390957261.937:86412): avc: denied { read } for pid=11875 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390957261.937:86412): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd72d5b90 a2=84800 a3=0 items=0 ppid=11873 pid=11875 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=632 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390957261.947:86413): pid=11859 uid=0 auid=0 ses=632 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390957261.947:86414): pid=11859 uid=0 auid=0 ses=632 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390957801.957:86415): pid=12054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390957801.957:86416): pid=12054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390957801.957:86417): login pid=12054 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=633 >type=USER_START msg=audit(1390957801.967:86418): pid=12054 uid=0 auid=0 ses=633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390957801.967:86419): pid=12054 uid=0 auid=0 ses=633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390957801.977:86420): pid=12054 uid=0 auid=0 ses=633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390957801.977:86421): pid=12054 uid=0 auid=0 ses=633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390958701.988:86422): pid=12331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390958701.988:86423): pid=12331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390958701.988:86424): login pid=12331 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=634 >type=USER_START msg=audit(1390958701.998:86425): pid=12331 uid=0 auid=0 ses=634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390958701.998:86426): pid=12331 uid=0 auid=0 ses=634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390958701.998:86427): pid=12331 uid=0 auid=0 ses=634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390958702.008:86428): pid=12331 uid=0 auid=0 ses=634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390959602.008:86429): pid=12609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390959602.008:86430): pid=12609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390959602.008:86431): login pid=12609 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=635 >type=USER_START msg=audit(1390959602.008:86432): pid=12609 uid=0 auid=0 ses=635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390959602.008:86433): pid=12609 uid=0 auid=0 ses=635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390959602.018:86434): pid=12609 uid=0 auid=0 ses=635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390959602.018:86435): pid=12609 uid=0 auid=0 ses=635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390960501.029:86436): pid=12890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390960501.029:86437): pid=12890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390960501.029:86438): login pid=12890 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=636 >type=USER_START msg=audit(1390960501.029:86439): pid=12890 uid=0 auid=0 ses=636 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390960501.029:86440): pid=12890 uid=0 auid=0 ses=636 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390960501.039:86441): pid=12890 uid=0 auid=0 ses=636 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390960501.039:86442): pid=12890 uid=0 auid=0 ses=636 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390960861.049:86443): pid=13006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390960861.049:86444): pid=13006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390960861.049:86445): login pid=13006 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=637 >type=USER_START msg=audit(1390960861.049:86446): pid=13006 uid=0 auid=0 ses=637 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390960861.049:86447): pid=13006 uid=0 auid=0 ses=637 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390960861.069:86448): avc: denied { read } for pid=13025 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390960861.069:86448): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdae00950 a2=84800 a3=0 items=0 ppid=13023 pid=13025 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=637 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390960861.079:86449): pid=13006 uid=0 auid=0 ses=637 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390960861.079:86450): pid=13006 uid=0 auid=0 ses=637 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390961401.089:86451): pid=13202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390961401.089:86452): pid=13202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390961401.089:86453): login pid=13202 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=638 >type=USER_START msg=audit(1390961401.089:86454): pid=13202 uid=0 auid=0 ses=638 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390961401.089:86455): pid=13202 uid=0 auid=0 ses=638 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390961401.099:86456): pid=13202 uid=0 auid=0 ses=638 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390961401.099:86457): pid=13202 uid=0 auid=0 ses=638 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390962301.110:86458): pid=13485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390962301.110:86459): pid=13485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390962301.110:86460): login pid=13485 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=639 >type=USER_START msg=audit(1390962301.110:86461): pid=13485 uid=0 auid=0 ses=639 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390962301.120:86462): pid=13485 uid=0 auid=0 ses=639 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390962301.130:86463): pid=13485 uid=0 auid=0 ses=639 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390962301.130:86464): pid=13485 uid=0 auid=0 ses=639 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390963201.140:86465): pid=13762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390963201.140:86466): pid=13762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390963201.140:86467): login pid=13762 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=640 >type=USER_START msg=audit(1390963201.140:86468): pid=13762 uid=0 auid=0 ses=640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390963201.140:86469): pid=13762 uid=0 auid=0 ses=640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390963201.160:86470): pid=13762 uid=0 auid=0 ses=640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390963201.160:86471): pid=13762 uid=0 auid=0 ses=640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390964101.171:86472): pid=14044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390964101.171:86473): pid=14044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390964101.171:86474): login pid=14044 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=641 >type=USER_START msg=audit(1390964101.171:86475): pid=14044 uid=0 auid=0 ses=641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390964101.171:86476): pid=14044 uid=0 auid=0 ses=641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390964101.181:86477): pid=14044 uid=0 auid=0 ses=641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390964101.181:86478): pid=14044 uid=0 auid=0 ses=641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390964461.191:86479): pid=14161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390964461.191:86480): pid=14161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390964461.191:86481): login pid=14161 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=642 >type=USER_START msg=audit(1390964461.191:86482): pid=14161 uid=0 auid=0 ses=642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390964461.191:86483): pid=14161 uid=0 auid=0 ses=642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390964461.211:86484): avc: denied { read } for pid=14180 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390964461.211:86484): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffb188f80 a2=84800 a3=0 items=0 ppid=14178 pid=14180 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=642 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390964461.221:86485): pid=14161 uid=0 auid=0 ses=642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390964461.221:86486): pid=14161 uid=0 auid=0 ses=642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390965001.231:86487): pid=14357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390965001.231:86488): pid=14357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390965001.231:86489): login pid=14357 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=643 >type=USER_START msg=audit(1390965001.241:86490): pid=14357 uid=0 auid=0 ses=643 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390965001.241:86491): pid=14357 uid=0 auid=0 ses=643 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390965001.241:86492): pid=14357 uid=0 auid=0 ses=643 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390965001.241:86493): pid=14357 uid=0 auid=0 ses=643 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390965901.252:86494): pid=14633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390965901.252:86495): pid=14633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390965901.252:86496): login pid=14633 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=644 >type=USER_START msg=audit(1390965901.262:86497): pid=14633 uid=0 auid=0 ses=644 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390965901.262:86498): pid=14633 uid=0 auid=0 ses=644 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390965901.262:86499): pid=14633 uid=0 auid=0 ses=644 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390965901.272:86500): pid=14633 uid=0 auid=0 ses=644 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390966801.282:86501): pid=14912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390966801.282:86502): pid=14912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390966801.282:86503): login pid=14912 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=645 >type=USER_START msg=audit(1390966801.282:86504): pid=14912 uid=0 auid=0 ses=645 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390966801.282:86505): pid=14912 uid=0 auid=0 ses=645 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390966801.302:86506): pid=14912 uid=0 auid=0 ses=645 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390966801.302:86507): pid=14912 uid=0 auid=0 ses=645 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390967701.313:86508): pid=15192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390967701.313:86509): pid=15192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390967701.313:86510): login pid=15192 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=646 >type=USER_START msg=audit(1390967701.323:86511): pid=15192 uid=0 auid=0 ses=646 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390967701.323:86512): pid=15192 uid=0 auid=0 ses=646 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390967701.333:86513): pid=15192 uid=0 auid=0 ses=646 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390967701.333:86514): pid=15192 uid=0 auid=0 ses=646 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390968061.343:86515): pid=15307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390968061.343:86516): pid=15307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390968061.343:86517): login pid=15307 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=647 >type=USER_START msg=audit(1390968061.353:86518): pid=15307 uid=0 auid=0 ses=647 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390968061.353:86519): pid=15307 uid=0 auid=0 ses=647 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390968061.373:86520): avc: denied { read } for pid=15326 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390968061.373:86520): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd79b7640 a2=84800 a3=0 items=0 ppid=15324 pid=15326 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=647 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390968061.383:86521): pid=15307 uid=0 auid=0 ses=647 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390968061.383:86522): pid=15307 uid=0 auid=0 ses=647 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390968601.393:86523): pid=15505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390968601.393:86524): pid=15505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390968601.393:86525): login pid=15505 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=648 >type=USER_START msg=audit(1390968601.393:86526): pid=15505 uid=0 auid=0 ses=648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390968601.393:86527): pid=15505 uid=0 auid=0 ses=648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390968601.403:86528): pid=15505 uid=0 auid=0 ses=648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390968601.403:86529): pid=15505 uid=0 auid=0 ses=648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390969501.414:86530): pid=15782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390969501.414:86531): pid=15782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390969501.414:86532): login pid=15782 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=649 >type=USER_START msg=audit(1390969501.414:86533): pid=15782 uid=0 auid=0 ses=649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390969501.414:86534): pid=15782 uid=0 auid=0 ses=649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390969501.424:86535): pid=15782 uid=0 auid=0 ses=649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390969501.424:86536): pid=15782 uid=0 auid=0 ses=649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390970401.435:86537): pid=16061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390970401.435:86538): pid=16061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390970401.435:86539): login pid=16061 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=650 >type=USER_START msg=audit(1390970401.435:86540): pid=16061 uid=0 auid=0 ses=650 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390970401.435:86541): pid=16061 uid=0 auid=0 ses=650 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390970401.445:86542): pid=16061 uid=0 auid=0 ses=650 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390970401.445:86543): pid=16061 uid=0 auid=0 ses=650 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390971301.455:86544): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390971301.455:86545): pid=16340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390971301.455:86546): login pid=16340 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=651 >type=USER_START msg=audit(1390971301.455:86547): pid=16340 uid=0 auid=0 ses=651 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390971301.465:86548): pid=16340 uid=0 auid=0 ses=651 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390971301.475:86549): pid=16340 uid=0 auid=0 ses=651 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390971301.475:86550): pid=16340 uid=0 auid=0 ses=651 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390971661.485:86551): pid=16459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390971661.485:86552): pid=16459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390971661.485:86553): login pid=16459 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=652 >type=USER_START msg=audit(1390971661.485:86554): pid=16459 uid=0 auid=0 ses=652 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390971661.485:86555): pid=16459 uid=0 auid=0 ses=652 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390971661.505:86556): avc: denied { read } for pid=16478 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390971661.505:86556): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffdba6f00 a2=84800 a3=0 items=0 ppid=16476 pid=16478 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=652 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390971661.515:86557): pid=16459 uid=0 auid=0 ses=652 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390971661.515:86558): pid=16459 uid=0 auid=0 ses=652 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390972201.526:86559): pid=16651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390972201.526:86560): pid=16651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390972201.526:86561): login pid=16651 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=653 >type=USER_START msg=audit(1390972201.526:86562): pid=16651 uid=0 auid=0 ses=653 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390972201.526:86563): pid=16651 uid=0 auid=0 ses=653 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390972201.536:86564): pid=16651 uid=0 auid=0 ses=653 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390972201.536:86565): pid=16651 uid=0 auid=0 ses=653 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390972981.516:86566): avc: denied { read } for pid=16897 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390972981.516:86566): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc9a9a4f0 a2=84800 a3=0 items=0 ppid=16895 pid=16897 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=652 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1390973101.546:86567): pid=16975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390973101.546:86568): pid=16975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390973101.546:86569): login pid=16975 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=654 >type=USER_START msg=audit(1390973101.556:86570): pid=16975 uid=0 auid=0 ses=654 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390973101.556:86571): pid=16975 uid=0 auid=0 ses=654 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390973101.566:86572): pid=16975 uid=0 auid=0 ses=654 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390973101.566:86573): pid=16975 uid=0 auid=0 ses=654 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390974001.577:86574): pid=17252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390974001.577:86575): pid=17252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390974001.577:86576): login pid=17252 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=655 >type=USER_START msg=audit(1390974001.577:86577): pid=17252 uid=0 auid=0 ses=655 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390974001.577:86578): pid=17252 uid=0 auid=0 ses=655 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390974001.587:86579): pid=17252 uid=0 auid=0 ses=655 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390974001.587:86580): pid=17252 uid=0 auid=0 ses=655 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390974901.597:86581): pid=17531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390974901.607:86582): pid=17531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390974901.607:86583): login pid=17531 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=656 >type=USER_START msg=audit(1390974901.607:86584): pid=17531 uid=0 auid=0 ses=656 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390974901.607:86585): pid=17531 uid=0 auid=0 ses=656 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390974901.617:86586): pid=17531 uid=0 auid=0 ses=656 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390974901.627:86587): pid=17531 uid=0 auid=0 ses=656 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390975261.627:86588): pid=17649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390975261.627:86589): pid=17649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390975261.627:86590): login pid=17649 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=657 >type=USER_START msg=audit(1390975261.637:86591): pid=17649 uid=0 auid=0 ses=657 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390975261.637:86592): pid=17649 uid=0 auid=0 ses=657 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390975261.657:86593): avc: denied { read } for pid=17665 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390975261.657:86593): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc7550a50 a2=84800 a3=0 items=0 ppid=17663 pid=17665 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=657 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390975261.667:86594): pid=17649 uid=0 auid=0 ses=657 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390975261.667:86595): pid=17649 uid=0 auid=0 ses=657 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390975801.668:86596): pid=17844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390975801.668:86597): pid=17844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390975801.668:86598): login pid=17844 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=658 >type=USER_START msg=audit(1390975801.678:86599): pid=17844 uid=0 auid=0 ses=658 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390975801.678:86600): pid=17844 uid=0 auid=0 ses=658 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390975801.698:86601): pid=17844 uid=0 auid=0 ses=658 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390975801.698:86602): pid=17844 uid=0 auid=0 ses=658 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390976701.708:86603): pid=18121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390976701.708:86604): pid=18121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390976701.708:86605): login pid=18121 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=659 >type=USER_START msg=audit(1390976701.708:86606): pid=18121 uid=0 auid=0 ses=659 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390976701.708:86607): pid=18121 uid=0 auid=0 ses=659 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390976701.718:86608): pid=18121 uid=0 auid=0 ses=659 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390976701.718:86609): pid=18121 uid=0 auid=0 ses=659 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390977601.729:86610): pid=18399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390977601.729:86611): pid=18399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390977601.729:86612): login pid=18399 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=660 >type=USER_START msg=audit(1390977601.739:86613): pid=18399 uid=0 auid=0 ses=660 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390977601.739:86614): pid=18399 uid=0 auid=0 ses=660 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390977601.739:86615): pid=18399 uid=0 auid=0 ses=660 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390977601.749:86616): pid=18399 uid=0 auid=0 ses=660 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390978501.749:86617): pid=18677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390978501.749:86618): pid=18677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390978501.749:86619): login pid=18677 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=661 >type=USER_START msg=audit(1390978501.759:86620): pid=18677 uid=0 auid=0 ses=661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390978501.759:86621): pid=18677 uid=0 auid=0 ses=661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390978501.759:86622): pid=18677 uid=0 auid=0 ses=661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390978501.769:86623): pid=18677 uid=0 auid=0 ses=661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390978861.770:86624): pid=18792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390978861.770:86625): pid=18792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390978861.770:86626): login pid=18792 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=662 >type=USER_START msg=audit(1390978861.780:86627): pid=18792 uid=0 auid=0 ses=662 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390978861.780:86628): pid=18792 uid=0 auid=0 ses=662 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390978861.790:86629): avc: denied { read } for pid=18808 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390978861.790:86629): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff540ed60 a2=84800 a3=0 items=0 ppid=18806 pid=18808 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=662 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390978861.800:86630): pid=18792 uid=0 auid=0 ses=662 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390978861.810:86631): pid=18792 uid=0 auid=0 ses=662 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390979401.810:86632): pid=18986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390979401.810:86633): pid=18986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390979401.810:86634): login pid=18986 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=663 >type=USER_START msg=audit(1390979401.820:86635): pid=18986 uid=0 auid=0 ses=663 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390979401.820:86636): pid=18986 uid=0 auid=0 ses=663 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390979401.820:86637): pid=18986 uid=0 auid=0 ses=663 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390979401.830:86638): pid=18986 uid=0 auid=0 ses=663 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390980301.830:86639): pid=19264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390980301.830:86640): pid=19264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390980301.840:86641): login pid=19264 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=664 >type=USER_START msg=audit(1390980301.840:86642): pid=19264 uid=0 auid=0 ses=664 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390980301.840:86643): pid=19264 uid=0 auid=0 ses=664 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390980301.850:86644): pid=19264 uid=0 auid=0 ses=664 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390980301.850:86645): pid=19264 uid=0 auid=0 ses=664 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390981201.861:86646): pid=19541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390981201.861:86647): pid=19541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390981201.861:86648): login pid=19541 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=665 >type=USER_START msg=audit(1390981201.861:86649): pid=19541 uid=0 auid=0 ses=665 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390981201.861:86650): pid=19541 uid=0 auid=0 ses=665 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390981201.871:86651): pid=19541 uid=0 auid=0 ses=665 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390981201.871:86652): pid=19541 uid=0 auid=0 ses=665 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390982101.881:86653): pid=19819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390982101.881:86654): pid=19819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390982101.881:86655): login pid=19819 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=666 >type=USER_START msg=audit(1390982101.881:86656): pid=19819 uid=0 auid=0 ses=666 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390982101.881:86657): pid=19819 uid=0 auid=0 ses=666 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390982101.891:86658): pid=19819 uid=0 auid=0 ses=666 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390982101.891:86659): pid=19819 uid=0 auid=0 ses=666 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390982461.902:86660): pid=19936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390982461.902:86661): pid=19936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390982461.902:86662): login pid=19936 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=667 >type=USER_START msg=audit(1390982461.902:86663): pid=19936 uid=0 auid=0 ses=667 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390982461.902:86664): pid=19936 uid=0 auid=0 ses=667 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390982461.922:86665): avc: denied { read } for pid=19952 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390982461.922:86665): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc2700800 a2=84800 a3=0 items=0 ppid=19950 pid=19952 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=667 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390982461.932:86666): pid=19936 uid=0 auid=0 ses=667 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390982461.932:86667): pid=19936 uid=0 auid=0 ses=667 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390983001.942:86668): pid=20128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390983001.952:86669): pid=20128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390983001.952:86670): login pid=20128 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=668 >type=USER_START msg=audit(1390983001.952:86671): pid=20128 uid=0 auid=0 ses=668 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390983001.952:86672): pid=20128 uid=0 auid=0 ses=668 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390983001.962:86673): pid=20128 uid=0 auid=0 ses=668 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390983001.972:86674): pid=20128 uid=0 auid=0 ses=668 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390983901.983:86675): pid=20406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390983901.983:86676): pid=20406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390983901.983:86677): login pid=20406 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=669 >type=USER_START msg=audit(1390983901.983:86678): pid=20406 uid=0 auid=0 ses=669 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390983901.983:86679): pid=20406 uid=0 auid=0 ses=669 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390983901.993:86680): pid=20406 uid=0 auid=0 ses=669 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390983901.993:86681): pid=20406 uid=0 auid=0 ses=669 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390984802.003:86682): pid=20686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390984802.003:86683): pid=20686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390984802.003:86684): login pid=20686 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=670 >type=USER_START msg=audit(1390984802.003:86685): pid=20686 uid=0 auid=0 ses=670 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390984802.003:86686): pid=20686 uid=0 auid=0 ses=670 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390984802.013:86687): pid=20686 uid=0 auid=0 ses=670 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390984802.013:86688): pid=20686 uid=0 auid=0 ses=670 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390985701.024:86689): pid=20962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390985701.024:86690): pid=20962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390985701.024:86691): login pid=20962 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=671 >type=USER_START msg=audit(1390985701.024:86692): pid=20962 uid=0 auid=0 ses=671 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390985701.024:86693): pid=20962 uid=0 auid=0 ses=671 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390985701.034:86694): pid=20962 uid=0 auid=0 ses=671 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390985701.034:86695): pid=20962 uid=0 auid=0 ses=671 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390986061.044:86696): pid=21079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390986061.044:86697): pid=21079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390986061.044:86698): login pid=21079 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=672 >type=USER_START msg=audit(1390986061.044:86699): pid=21079 uid=0 auid=0 ses=672 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390986061.044:86700): pid=21079 uid=0 auid=0 ses=672 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390986061.064:86701): avc: denied { read } for pid=21095 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390986061.064:86701): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffca815210 a2=84800 a3=0 items=0 ppid=21093 pid=21095 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=672 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390986061.084:86702): pid=21079 uid=0 auid=0 ses=672 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390986061.084:86703): pid=21079 uid=0 auid=0 ses=672 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390986601.094:86704): pid=21273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390986601.094:86705): pid=21273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390986601.094:86706): login pid=21273 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=673 >type=USER_START msg=audit(1390986601.094:86707): pid=21273 uid=0 auid=0 ses=673 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390986601.094:86708): pid=21273 uid=0 auid=0 ses=673 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390986601.104:86709): pid=21273 uid=0 auid=0 ses=673 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390986601.104:86710): pid=21273 uid=0 auid=0 ses=673 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390987501.115:86711): pid=21551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390987501.115:86712): pid=21551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390987501.115:86713): login pid=21551 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=674 >type=USER_START msg=audit(1390987501.115:86714): pid=21551 uid=0 auid=0 ses=674 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390987501.115:86715): pid=21551 uid=0 auid=0 ses=674 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390987501.125:86716): pid=21551 uid=0 auid=0 ses=674 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390987501.125:86717): pid=21551 uid=0 auid=0 ses=674 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390988401.135:86718): pid=21830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390988401.135:86719): pid=21830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390988401.135:86720): login pid=21830 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=675 >type=USER_START msg=audit(1390988401.135:86721): pid=21830 uid=0 auid=0 ses=675 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390988401.135:86722): pid=21830 uid=0 auid=0 ses=675 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390988401.145:86723): pid=21830 uid=0 auid=0 ses=675 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390988401.145:86724): pid=21830 uid=0 auid=0 ses=675 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390989301.156:86725): pid=22109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390989301.156:86726): pid=22109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390989301.156:86727): login pid=22109 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=676 >type=USER_START msg=audit(1390989301.156:86728): pid=22109 uid=0 auid=0 ses=676 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390989301.156:86729): pid=22109 uid=0 auid=0 ses=676 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390989301.166:86730): pid=22109 uid=0 auid=0 ses=676 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390989301.166:86731): pid=22109 uid=0 auid=0 ses=676 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390989661.176:86732): pid=22224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390989661.176:86733): pid=22224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390989661.176:86734): login pid=22224 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=677 >type=USER_START msg=audit(1390989661.176:86735): pid=22224 uid=0 auid=0 ses=677 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390989661.176:86736): pid=22224 uid=0 auid=0 ses=677 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390989661.196:86737): avc: denied { read } for pid=22240 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390989661.196:86737): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffda742be0 a2=84800 a3=0 items=0 ppid=22238 pid=22240 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=677 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390989661.206:86738): pid=22224 uid=0 auid=0 ses=677 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390989661.206:86739): pid=22224 uid=0 auid=0 ses=677 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390990201.216:86740): pid=22418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390990201.216:86741): pid=22418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390990201.216:86742): login pid=22418 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=678 >type=USER_START msg=audit(1390990201.216:86743): pid=22418 uid=0 auid=0 ses=678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390990201.216:86744): pid=22418 uid=0 auid=0 ses=678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390990201.236:86745): pid=22418 uid=0 auid=0 ses=678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390990201.236:86746): pid=22418 uid=0 auid=0 ses=678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390991101.247:86747): pid=22694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390991101.247:86748): pid=22694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390991101.247:86749): login pid=22694 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=679 >type=USER_START msg=audit(1390991101.247:86750): pid=22694 uid=0 auid=0 ses=679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390991101.247:86751): pid=22694 uid=0 auid=0 ses=679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390991101.257:86752): pid=22694 uid=0 auid=0 ses=679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390991101.257:86753): pid=22694 uid=0 auid=0 ses=679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390992001.267:86754): pid=22972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390992001.267:86755): pid=22972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390992001.267:86756): login pid=22972 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=680 >type=USER_START msg=audit(1390992001.267:86757): pid=22972 uid=0 auid=0 ses=680 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390992001.267:86758): pid=22972 uid=0 auid=0 ses=680 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390992001.277:86759): pid=22972 uid=0 auid=0 ses=680 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390992001.277:86760): pid=22972 uid=0 auid=0 ses=680 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390992901.278:86761): pid=23250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390992901.278:86762): pid=23250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390992901.278:86763): login pid=23250 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=681 >type=USER_START msg=audit(1390992901.288:86764): pid=23250 uid=0 auid=0 ses=681 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390992901.288:86765): pid=23250 uid=0 auid=0 ses=681 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390992901.298:86766): pid=23250 uid=0 auid=0 ses=681 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390992901.298:86767): pid=23250 uid=0 auid=0 ses=681 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390993261.308:86768): pid=23367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390993261.308:86769): pid=23367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390993261.308:86770): login pid=23367 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=682 >type=USER_START msg=audit(1390993261.308:86771): pid=23367 uid=0 auid=0 ses=682 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390993261.308:86772): pid=23367 uid=0 auid=0 ses=682 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390993261.328:86773): avc: denied { read } for pid=23383 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390993261.328:86773): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe3ac56b0 a2=84800 a3=0 items=0 ppid=23381 pid=23383 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=682 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390993261.348:86774): pid=23367 uid=0 auid=0 ses=682 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390993261.348:86775): pid=23367 uid=0 auid=0 ses=682 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390993801.348:86776): pid=23560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390993801.348:86777): pid=23560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390993801.348:86778): login pid=23560 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=683 >type=USER_START msg=audit(1390993801.358:86779): pid=23560 uid=0 auid=0 ses=683 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390993801.358:86780): pid=23560 uid=0 auid=0 ses=683 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390993801.358:86781): pid=23560 uid=0 auid=0 ses=683 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390993801.368:86782): pid=23560 uid=0 auid=0 ses=683 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390994701.369:86783): pid=23838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390994701.379:86784): pid=23838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390994701.379:86785): login pid=23838 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=684 >type=USER_START msg=audit(1390994701.379:86786): pid=23838 uid=0 auid=0 ses=684 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390994701.379:86787): pid=23838 uid=0 auid=0 ses=684 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390994701.389:86788): pid=23838 uid=0 auid=0 ses=684 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390994701.389:86789): pid=23838 uid=0 auid=0 ses=684 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1390994950.279:86790): pid=23920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=23920 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1390994950.279:86791): pid=23920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=23920 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1390994950.289:86792): pid=23919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23920 suid=74 rport=58356 laddr=10 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1390994950.289:86793): pid=23919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=23920 suid=74 rport=58356 laddr=10 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_AUTH msg=audit(1390994950.369:86794): pid=23919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_ACCT msg=audit(1390994950.369:86795): pid=23919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1390994950.369:86796): pid=23919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23920 suid=74 rport=58356 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_AUTH msg=audit(1390994950.369:86797): pid=23919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1390994950.369:86798): pid=23919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=LOGIN msg=audit(1390994950.369:86799): login pid=23919 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=685 >type=CRYPTO_KEY_USER msg=audit(1390994950.419:86800): pid=23925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=23925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1390994950.419:86801): pid=23925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=23925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1390994950.419:86802): pid=23924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=blowfish-cbc ksize=128 mac=hmac-sha1 spid=23925 suid=74 rport=58357 laddr=10.10.27.64 lpo exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1390994950.419:86803): pid=23924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=blowfish-cbc ksize=128 mac=hmac-sha1 spid=23925 suid=74 rport=58357 laddr=10.10.27.64 lpo exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1390994950.429:86804): pid=23919 uid=0 auid=0 ses=685 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_START msg=audit(1390994950.429:86805): pid=23919 uid=0 auid=0 ses=685 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_AUTH msg=audit(1390994950.449:86806): pid=23924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_ACCT msg=audit(1390994950.459:86807): pid=23924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1390994950.459:86808): pid=23924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23925 suid=74 rport=58357 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_AUTH msg=audit(1390994950.459:86809): pid=23924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1390994950.459:86810): pid=23924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=LOGIN msg=audit(1390994950.459:86811): login pid=23924 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=686 >type=USER_ROLE_CHANGE msg=audit(1390994950.489:86812): pid=23924 uid=0 auid=0 ses=686 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_START msg=audit(1390994950.499:86813): pid=23924 uid=0 auid=0 ses=686 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1390994950.499:86814): pid=23924 uid=0 auid=0 ses=686 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_START msg=audit(1390994950.499:86815): pid=23924 uid=0 auid=0 ses=686 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1390994950.509:86816): pid=23928 uid=0 auid=0 ses=686 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=23928 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1390994950.509:86817): pid=23928 uid=0 auid=0 ses=686 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=23928 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRED_REFR msg=audit(1390994950.509:86818): pid=23928 uid=0 auid=0 ses=686 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1390994950.799:86819): pid=23938 uid=0 auid=0 ses=685 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1390994950.799:86820): pid=23938 uid=0 auid=0 ses=685 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1390994950.799:86821): pid=23938 uid=0 auid=0 ses=685 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=23938 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1390994950.799:86822): pid=23938 uid=0 auid=0 ses=685 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=23938 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1390994950.799:86823): pid=23938 uid=0 auid=0 ses=685 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_ACCT msg=audit(1390995601.399:86824): pid=27727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390995601.399:86825): pid=27727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390995601.399:86826): login pid=27727 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=687 >type=USER_START msg=audit(1390995601.399:86827): pid=27727 uid=0 auid=0 ses=687 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390995601.409:86828): pid=27727 uid=0 auid=0 ses=687 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390995601.419:86829): pid=27727 uid=0 auid=0 ses=687 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390995601.419:86830): pid=27727 uid=0 auid=0 ses=687 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390996501.430:86831): pid=28002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390996501.430:86832): pid=28002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390996501.430:86833): login pid=28002 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=688 >type=USER_START msg=audit(1390996501.430:86834): pid=28002 uid=0 auid=0 ses=688 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390996501.430:86835): pid=28002 uid=0 auid=0 ses=688 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390996501.440:86836): pid=28002 uid=0 auid=0 ses=688 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390996501.440:86837): pid=28002 uid=0 auid=0 ses=688 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390996861.450:86838): pid=28119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390996861.450:86839): pid=28119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390996861.450:86840): login pid=28119 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=689 >type=USER_START msg=audit(1390996861.450:86841): pid=28119 uid=0 auid=0 ses=689 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390996861.450:86842): pid=28119 uid=0 auid=0 ses=689 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1390996861.470:86843): avc: denied { read } for pid=28135 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1390996861.470:86843): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff2ca0a50 a2=84800 a3=0 items=0 ppid=28133 pid=28135 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=689 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1390996861.480:86844): pid=28119 uid=0 auid=0 ses=689 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390996861.490:86845): pid=28119 uid=0 auid=0 ses=689 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390997401.491:86846): pid=28311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390997401.491:86847): pid=28311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390997401.491:86848): login pid=28311 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=690 >type=USER_START msg=audit(1390997401.501:86849): pid=28311 uid=0 auid=0 ses=690 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390997401.501:86850): pid=28311 uid=0 auid=0 ses=690 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390997401.511:86851): pid=28311 uid=0 auid=0 ses=690 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390997401.511:86852): pid=28311 uid=0 auid=0 ses=690 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_STOP msg=audit(1390997989.151:86853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1390998080.491:86854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390998080.741:86855): pid=28805 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D7031746C705966 terminal=? res=success' >type=CRED_ACQ msg=audit(1390998080.741:86856): pid=28805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390998080.741:86857): pid=28805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390998080.741:86858): pid=28805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390998080.741:86859): pid=28805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390998081.811:86860): pid=28826 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1390998081.811:86861): pid=28826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390998081.811:86862): pid=28826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390998081.821:86863): pid=28826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390998081.821:86864): pid=28826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390998081.851:86865): pid=28830 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390998081.851:86866): pid=28830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390998081.851:86867): pid=28830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390998081.851:86868): pid=28830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390998081.851:86869): pid=28830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390998083.881:86870): pid=28850 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390998083.881:86871): pid=28850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390998083.881:86872): pid=28850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390998083.911:86873): pid=28850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390998083.911:86874): pid=28850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390998083.931:86875): pid=28870 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20707673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C73697A652C76675F6E616D652C76675F757569642C70655F73746172742C70655F636F756E742C70655F616C6C6F635F636F756E742C6D64615F636F756E742C6465765F73697A' >type=CRED_ACQ msg=audit(1390998083.931:86876): pid=28870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390998083.931:86877): pid=28870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390998083.941:86878): pid=28870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390998083.941:86879): pid=28870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390998083.951:86880): pid=28873 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390998083.951:86881): pid=28873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390998083.951:86882): pid=28873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390998083.961:86883): pid=28873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390998083.961:86884): pid=28873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390998083.971:86885): pid=28876 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_ACQ msg=audit(1390998083.971:86886): pid=28876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390998083.971:86887): pid=28876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390998083.981:86888): pid=28876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390998083.981:86889): pid=28876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390998083.991:86890): pid=28879 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1390998083.991:86891): pid=28879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390998083.991:86892): pid=28879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390998084.001:86893): pid=28879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390998084.001:86894): pid=28879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390998158.871:86895): pid=28919 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D332031302E31302E32372E36383A2F73746F72616765202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1390998158.871:86896): pid=28919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390998158.871:86897): pid=28919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390998158.881:86898): pid=28919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390998158.881:86899): pid=28919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390998159.151:86900): pid=28928 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1390998159.151:86901): pid=28928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390998159.151:86902): pid=28928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390998159.151:86903): pid=28928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390998159.151:86904): pid=28928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390998159.171:86905): pid=28930 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1390998159.171:86906): pid=28930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390998159.171:86907): pid=28930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390998159.201:86908): pid=28930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390998159.201:86909): pid=28930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1390998159.591:86910): pid=28951 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1390998159.591:86911): pid=28951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1390998159.591:86912): pid=28951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1390998159.601:86913): pid=28951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1390998159.601:86914): pid=28951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1390998301.521:86915): pid=29087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390998301.521:86916): pid=29087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390998301.531:86917): login pid=29087 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=691 >type=USER_START msg=audit(1390998301.531:86918): pid=29087 uid=0 auid=0 ses=691 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390998301.531:86919): pid=29087 uid=0 auid=0 ses=691 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390998301.541:86920): pid=29087 uid=0 auid=0 ses=691 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390998301.541:86921): pid=29087 uid=0 auid=0 ses=691 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1390999201.552:86922): pid=29702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1390999201.552:86923): pid=29702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1390999201.552:86924): login pid=29702 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=692 >type=USER_START msg=audit(1390999201.552:86925): pid=29702 uid=0 auid=0 ses=692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1390999201.552:86926): pid=29702 uid=0 auid=0 ses=692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1390999201.562:86927): pid=29702 uid=0 auid=0 ses=692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1390999201.562:86928): pid=29702 uid=0 auid=0 ses=692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391000101.582:86929): pid=30190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391000101.582:86930): pid=30190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391000101.582:86931): login pid=30190 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=693 >type=USER_START msg=audit(1391000101.592:86932): pid=30190 uid=0 auid=0 ses=693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391000101.592:86933): pid=30190 uid=0 auid=0 ses=693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391000101.602:86934): pid=30190 uid=0 auid=0 ses=693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391000101.612:86935): pid=30190 uid=0 auid=0 ses=693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391000461.622:86936): pid=30386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391000461.622:86937): pid=30386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391000461.622:86938): login pid=30386 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=694 >type=USER_START msg=audit(1391000461.622:86939): pid=30386 uid=0 auid=0 ses=694 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391000461.622:86940): pid=30386 uid=0 auid=0 ses=694 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391000461.642:86941): avc: denied { read } for pid=30402 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391000461.642:86941): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffc1c0390 a2=84800 a3=0 items=0 ppid=30400 pid=30402 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=694 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391000461.652:86942): pid=30386 uid=0 auid=0 ses=694 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391000461.652:86943): pid=30386 uid=0 auid=0 ses=694 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391001001.673:86944): pid=30688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391001001.673:86945): pid=30688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391001001.673:86946): login pid=30688 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=695 >type=USER_START msg=audit(1391001001.673:86947): pid=30688 uid=0 auid=0 ses=695 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391001001.673:86948): pid=30688 uid=0 auid=0 ses=695 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391001001.693:86949): pid=30688 uid=0 auid=0 ses=695 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391001001.693:86950): pid=30688 uid=0 auid=0 ses=695 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391001901.703:86951): pid=31149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391001901.703:86952): pid=31149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391001901.703:86953): login pid=31149 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=696 >type=USER_START msg=audit(1391001901.703:86954): pid=31149 uid=0 auid=0 ses=696 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391001901.703:86955): pid=31149 uid=0 auid=0 ses=696 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391001901.713:86956): pid=31149 uid=0 auid=0 ses=696 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391001901.713:86957): pid=31149 uid=0 auid=0 ses=696 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391002801.724:86958): pid=31609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391002801.724:86959): pid=31609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391002801.724:86960): login pid=31609 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=697 >type=USER_START msg=audit(1391002801.724:86961): pid=31609 uid=0 auid=0 ses=697 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391002801.724:86962): pid=31609 uid=0 auid=0 ses=697 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391002801.734:86963): pid=31609 uid=0 auid=0 ses=697 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391002801.734:86964): pid=31609 uid=0 auid=0 ses=697 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391003701.744:86965): pid=32067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391003701.744:86966): pid=32067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391003701.744:86967): login pid=32067 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=698 >type=USER_START msg=audit(1391003701.754:86968): pid=32067 uid=0 auid=0 ses=698 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391003701.754:86969): pid=32067 uid=0 auid=0 ses=698 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391003701.754:86970): pid=32067 uid=0 auid=0 ses=698 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391003701.764:86971): pid=32067 uid=0 auid=0 ses=698 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391004061.765:86972): pid=32256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391004061.765:86973): pid=32256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391004061.765:86974): login pid=32256 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=699 >type=USER_START msg=audit(1391004061.775:86975): pid=32256 uid=0 auid=0 ses=699 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391004061.775:86976): pid=32256 uid=0 auid=0 ses=699 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391004061.785:86977): avc: denied { read } for pid=32273 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391004061.785:86977): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffaa89020 a2=84800 a3=0 items=0 ppid=32270 pid=32273 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=699 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391004065.705:86978): pid=32256 uid=0 auid=0 ses=699 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391004065.705:86979): pid=32256 uid=0 auid=0 ses=699 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391004601.715:86980): pid=32559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391004601.715:86981): pid=32559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391004601.715:86982): login pid=32559 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=700 >type=USER_START msg=audit(1391004601.715:86983): pid=32559 uid=0 auid=0 ses=700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391004601.715:86984): pid=32559 uid=0 auid=0 ses=700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391004601.725:86985): pid=32559 uid=0 auid=0 ses=700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391004601.725:86986): pid=32559 uid=0 auid=0 ses=700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391005501.735:86987): pid=33020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391005501.735:86988): pid=33020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391005501.735:86989): login pid=33020 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=701 >type=USER_START msg=audit(1391005501.735:86990): pid=33020 uid=0 auid=0 ses=701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391005501.735:86991): pid=33020 uid=0 auid=0 ses=701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391005501.745:86992): pid=33020 uid=0 auid=0 ses=701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391005501.745:86993): pid=33020 uid=0 auid=0 ses=701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391006401.756:86994): pid=33480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391006401.756:86995): pid=33480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391006401.756:86996): login pid=33480 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=702 >type=USER_START msg=audit(1391006401.766:86997): pid=33480 uid=0 auid=0 ses=702 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391006401.766:86998): pid=33480 uid=0 auid=0 ses=702 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391006401.766:86999): pid=33480 uid=0 auid=0 ses=702 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391006401.766:87000): pid=33480 uid=0 auid=0 ses=702 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391007301.776:87001): pid=33938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391007301.776:87002): pid=33938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391007301.776:87003): login pid=33938 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=703 >type=USER_START msg=audit(1391007301.786:87004): pid=33938 uid=0 auid=0 ses=703 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391007301.786:87005): pid=33938 uid=0 auid=0 ses=703 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391007301.786:87006): pid=33938 uid=0 auid=0 ses=703 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391007301.786:87007): pid=33938 uid=0 auid=0 ses=703 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391007661.797:87008): pid=34126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391007661.797:87009): pid=34126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391007661.797:87010): login pid=34126 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=704 >type=USER_START msg=audit(1391007661.807:87011): pid=34126 uid=0 auid=0 ses=704 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391007661.807:87012): pid=34126 uid=0 auid=0 ses=704 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391007661.817:87013): avc: denied { read } for pid=34142 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391007661.817:87013): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffdbbe250 a2=84800 a3=0 items=0 ppid=34140 pid=34142 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=704 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391007661.827:87014): pid=34126 uid=0 auid=0 ses=704 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391007661.827:87015): pid=34126 uid=0 auid=0 ses=704 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391008201.837:87016): pid=34429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391008201.837:87017): pid=34429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391008201.837:87018): login pid=34429 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=705 >type=USER_START msg=audit(1391008201.847:87019): pid=34429 uid=0 auid=0 ses=705 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391008201.847:87020): pid=34429 uid=0 auid=0 ses=705 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391008201.857:87021): pid=34429 uid=0 auid=0 ses=705 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391008201.857:87022): pid=34429 uid=0 auid=0 ses=705 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391009101.867:87023): pid=34888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391009101.867:87024): pid=34888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391009101.867:87025): login pid=34888 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=706 >type=USER_START msg=audit(1391009101.867:87026): pid=34888 uid=0 auid=0 ses=706 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391009101.867:87027): pid=34888 uid=0 auid=0 ses=706 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391009101.877:87028): pid=34888 uid=0 auid=0 ses=706 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391009101.877:87029): pid=34888 uid=0 auid=0 ses=706 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391010001.888:87030): pid=35348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391010001.888:87031): pid=35348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391010001.888:87032): login pid=35348 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=707 >type=USER_START msg=audit(1391010001.888:87033): pid=35348 uid=0 auid=0 ses=707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391010001.888:87034): pid=35348 uid=0 auid=0 ses=707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391010001.898:87035): pid=35348 uid=0 auid=0 ses=707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391010001.908:87036): pid=35348 uid=0 auid=0 ses=707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391010901.919:87037): pid=35807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391010901.919:87038): pid=35807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391010901.919:87039): login pid=35807 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=708 >type=USER_START msg=audit(1391010901.919:87040): pid=35807 uid=0 auid=0 ses=708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391010901.919:87041): pid=35807 uid=0 auid=0 ses=708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391010901.929:87042): pid=35807 uid=0 auid=0 ses=708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391010901.929:87043): pid=35807 uid=0 auid=0 ses=708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391011261.939:87044): pid=35995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391011261.939:87045): pid=35995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391011261.939:87046): login pid=35995 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=709 >type=USER_START msg=audit(1391011261.939:87047): pid=35995 uid=0 auid=0 ses=709 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391011261.939:87048): pid=35995 uid=0 auid=0 ses=709 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391011261.949:87049): avc: denied { read } for pid=36011 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391011261.949:87049): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff9d23500 a2=84800 a3=0 items=0 ppid=36009 pid=36011 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=709 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391011261.969:87050): pid=35995 uid=0 auid=0 ses=709 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391011261.969:87051): pid=35995 uid=0 auid=0 ses=709 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391011801.979:87052): pid=36297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391011801.979:87053): pid=36297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391011801.979:87054): login pid=36297 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=710 >type=USER_START msg=audit(1391011801.979:87055): pid=36297 uid=0 auid=0 ses=710 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391011801.979:87056): pid=36297 uid=0 auid=0 ses=710 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391011801.989:87057): pid=36297 uid=0 auid=0 ses=710 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391011801.989:87058): pid=36297 uid=0 auid=0 ses=710 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391012702.000:87059): pid=36758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391012702.000:87060): pid=36758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391012702.000:87061): login pid=36758 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=711 >type=USER_START msg=audit(1391012702.000:87062): pid=36758 uid=0 auid=0 ses=711 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391012702.000:87063): pid=36758 uid=0 auid=0 ses=711 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391012702.010:87064): pid=36758 uid=0 auid=0 ses=711 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391012702.010:87065): pid=36758 uid=0 auid=0 ses=711 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391013601.020:87066): pid=37218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391013601.020:87067): pid=37218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391013601.020:87068): login pid=37218 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=712 >type=USER_START msg=audit(1391013601.020:87069): pid=37218 uid=0 auid=0 ses=712 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391013601.020:87070): pid=37218 uid=0 auid=0 ses=712 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391013601.030:87071): pid=37218 uid=0 auid=0 ses=712 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391013601.030:87072): pid=37218 uid=0 auid=0 ses=712 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391014501.041:87073): pid=37676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391014501.041:87074): pid=37676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391014501.041:87075): login pid=37676 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=713 >type=USER_START msg=audit(1391014501.041:87076): pid=37676 uid=0 auid=0 ses=713 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391014501.041:87077): pid=37676 uid=0 auid=0 ses=713 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391014501.051:87078): pid=37676 uid=0 auid=0 ses=713 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391014501.051:87079): pid=37676 uid=0 auid=0 ses=713 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391014861.061:87080): pid=37864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391014861.061:87081): pid=37864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391014861.061:87082): login pid=37864 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=714 >type=USER_START msg=audit(1391014861.061:87083): pid=37864 uid=0 auid=0 ses=714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391014861.061:87084): pid=37864 uid=0 auid=0 ses=714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391014861.081:87085): avc: denied { read } for pid=37880 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391014861.081:87085): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff38bf830 a2=84800 a3=0 items=0 ppid=37878 pid=37880 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=714 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391014861.091:87086): pid=37864 uid=0 auid=0 ses=714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391014861.101:87087): pid=37864 uid=0 auid=0 ses=714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391015401.101:87088): pid=38166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391015401.101:87089): pid=38166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391015401.101:87090): login pid=38166 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=715 >type=USER_START msg=audit(1391015401.111:87091): pid=38166 uid=0 auid=0 ses=715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391015401.111:87092): pid=38166 uid=0 auid=0 ses=715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391015401.111:87093): pid=38166 uid=0 auid=0 ses=715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391015401.121:87094): pid=38166 uid=0 auid=0 ses=715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391016301.122:87095): pid=38626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391016301.122:87096): pid=38626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391016301.132:87097): login pid=38626 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=716 >type=USER_START msg=audit(1391016301.132:87098): pid=38626 uid=0 auid=0 ses=716 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391016301.132:87099): pid=38626 uid=0 auid=0 ses=716 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391016301.142:87100): pid=38626 uid=0 auid=0 ses=716 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391016301.142:87101): pid=38626 uid=0 auid=0 ses=716 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391017201.152:87102): pid=39087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391017201.152:87103): pid=39087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391017201.152:87104): login pid=39087 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=717 >type=USER_START msg=audit(1391017201.152:87105): pid=39087 uid=0 auid=0 ses=717 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391017201.152:87106): pid=39087 uid=0 auid=0 ses=717 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391017201.162:87107): pid=39087 uid=0 auid=0 ses=717 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391017201.162:87108): pid=39087 uid=0 auid=0 ses=717 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391018101.173:87109): pid=39545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391018101.173:87110): pid=39545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391018101.173:87111): login pid=39545 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=718 >type=USER_START msg=audit(1391018101.173:87112): pid=39545 uid=0 auid=0 ses=718 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391018101.173:87113): pid=39545 uid=0 auid=0 ses=718 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391018101.183:87114): pid=39545 uid=0 auid=0 ses=718 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391018101.183:87115): pid=39545 uid=0 auid=0 ses=718 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391018461.193:87116): pid=39734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391018461.193:87117): pid=39734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391018461.193:87118): login pid=39734 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=719 >type=USER_START msg=audit(1391018461.193:87119): pid=39734 uid=0 auid=0 ses=719 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391018461.193:87120): pid=39734 uid=0 auid=0 ses=719 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391018461.213:87121): avc: denied { read } for pid=39750 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391018461.213:87121): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd52794b0 a2=84800 a3=0 items=0 ppid=39748 pid=39750 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=719 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391018461.223:87122): pid=39734 uid=0 auid=0 ses=719 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391018461.223:87123): pid=39734 uid=0 auid=0 ses=719 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391019001.233:87124): pid=40034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391019001.233:87125): pid=40034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391019001.233:87126): login pid=40034 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=720 >type=USER_START msg=audit(1391019001.233:87127): pid=40034 uid=0 auid=0 ses=720 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391019001.233:87128): pid=40034 uid=0 auid=0 ses=720 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391019001.243:87129): pid=40034 uid=0 auid=0 ses=720 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391019001.243:87130): pid=40034 uid=0 auid=0 ses=720 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391019901.254:87131): pid=40495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391019901.254:87132): pid=40495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391019901.254:87133): login pid=40495 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=721 >type=USER_START msg=audit(1391019901.254:87134): pid=40495 uid=0 auid=0 ses=721 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391019901.254:87135): pid=40495 uid=0 auid=0 ses=721 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391019901.264:87136): pid=40495 uid=0 auid=0 ses=721 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391019901.264:87137): pid=40495 uid=0 auid=0 ses=721 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391020801.274:87138): pid=40956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391020801.274:87139): pid=40956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391020801.274:87140): login pid=40956 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=722 >type=USER_START msg=audit(1391020801.274:87141): pid=40956 uid=0 auid=0 ses=722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391020801.274:87142): pid=40956 uid=0 auid=0 ses=722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391020801.284:87143): pid=40956 uid=0 auid=0 ses=722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391020801.284:87144): pid=40956 uid=0 auid=0 ses=722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391021701.295:87145): pid=41415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391021701.295:87146): pid=41415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391021701.295:87147): login pid=41415 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=723 >type=USER_START msg=audit(1391021701.295:87148): pid=41415 uid=0 auid=0 ses=723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391021701.295:87149): pid=41415 uid=0 auid=0 ses=723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391021701.305:87150): pid=41415 uid=0 auid=0 ses=723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391021701.305:87151): pid=41415 uid=0 auid=0 ses=723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391022061.315:87152): pid=41602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391022061.315:87153): pid=41602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391022061.315:87154): login pid=41602 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=724 >type=USER_START msg=audit(1391022061.315:87155): pid=41602 uid=0 auid=0 ses=724 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391022061.315:87156): pid=41602 uid=0 auid=0 ses=724 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391022061.335:87157): avc: denied { read } for pid=41618 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391022061.335:87157): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffde0e6290 a2=84800 a3=0 items=0 ppid=41616 pid=41618 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=724 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391022061.345:87158): pid=41602 uid=0 auid=0 ses=724 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391022061.345:87159): pid=41602 uid=0 auid=0 ses=724 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391022601.356:87160): pid=41903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391022601.356:87161): pid=41903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391022601.356:87162): login pid=41903 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=725 >type=USER_START msg=audit(1391022601.366:87163): pid=41903 uid=0 auid=0 ses=725 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391022601.366:87164): pid=41903 uid=0 auid=0 ses=725 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391022601.366:87165): pid=41903 uid=0 auid=0 ses=725 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391022601.366:87166): pid=41903 uid=0 auid=0 ses=725 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1391022884.306:87167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391022884.306:87168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391023501.376:87169): pid=42366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391023501.376:87170): pid=42366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391023501.376:87171): login pid=42366 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=726 >type=USER_START msg=audit(1391023501.386:87172): pid=42366 uid=0 auid=0 ses=726 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391023501.386:87173): pid=42366 uid=0 auid=0 ses=726 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391023501.396:87174): pid=42366 uid=0 auid=0 ses=726 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391023501.396:87175): pid=42366 uid=0 auid=0 ses=726 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391024401.407:87176): pid=42825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391024401.407:87177): pid=42825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391024401.407:87178): login pid=42825 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=727 >type=USER_START msg=audit(1391024401.407:87179): pid=42825 uid=0 auid=0 ses=727 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391024401.407:87180): pid=42825 uid=0 auid=0 ses=727 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391024401.417:87181): pid=42825 uid=0 auid=0 ses=727 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391024401.417:87182): pid=42825 uid=0 auid=0 ses=727 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391025301.427:87183): pid=43286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391025301.427:87184): pid=43286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391025301.427:87185): login pid=43286 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=728 >type=USER_START msg=audit(1391025301.427:87186): pid=43286 uid=0 auid=0 ses=728 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391025301.427:87187): pid=43286 uid=0 auid=0 ses=728 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391025301.437:87188): pid=43286 uid=0 auid=0 ses=728 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391025301.437:87189): pid=43286 uid=0 auid=0 ses=728 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391025661.447:87190): pid=43472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391025661.447:87191): pid=43472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391025661.447:87192): login pid=43472 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=729 >type=USER_START msg=audit(1391025661.447:87193): pid=43472 uid=0 auid=0 ses=729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391025661.447:87194): pid=43472 uid=0 auid=0 ses=729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391025661.467:87195): avc: denied { read } for pid=43488 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391025661.467:87195): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdc1d09a0 a2=84800 a3=0 items=0 ppid=43486 pid=43488 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=729 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391025661.477:87196): pid=43472 uid=0 auid=0 ses=729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391025661.477:87197): pid=43472 uid=0 auid=0 ses=729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391026201.478:87198): pid=43775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391026201.478:87199): pid=43775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391026201.478:87200): login pid=43775 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=730 >type=USER_START msg=audit(1391026201.488:87201): pid=43775 uid=0 auid=0 ses=730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391026201.488:87202): pid=43775 uid=0 auid=0 ses=730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391026201.498:87203): pid=43775 uid=0 auid=0 ses=730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391026201.498:87204): pid=43775 uid=0 auid=0 ses=730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391027101.518:87205): pid=44235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391027101.518:87206): pid=44235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391027101.518:87207): login pid=44235 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=731 >type=USER_START msg=audit(1391027101.518:87208): pid=44235 uid=0 auid=0 ses=731 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391027101.518:87209): pid=44235 uid=0 auid=0 ses=731 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391027101.538:87210): pid=44235 uid=0 auid=0 ses=731 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391027101.538:87211): pid=44235 uid=0 auid=0 ses=731 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391028001.549:87212): pid=44695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391028001.549:87213): pid=44695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391028001.549:87214): login pid=44695 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=732 >type=USER_START msg=audit(1391028001.549:87215): pid=44695 uid=0 auid=0 ses=732 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391028001.549:87216): pid=44695 uid=0 auid=0 ses=732 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391028001.559:87217): pid=44695 uid=0 auid=0 ses=732 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391028001.559:87218): pid=44695 uid=0 auid=0 ses=732 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391028901.569:87219): pid=45155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391028901.569:87220): pid=45155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391028901.569:87221): login pid=45155 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=733 >type=USER_START msg=audit(1391028901.569:87222): pid=45155 uid=0 auid=0 ses=733 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391028901.569:87223): pid=45155 uid=0 auid=0 ses=733 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391028901.579:87224): pid=45155 uid=0 auid=0 ses=733 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391028901.579:87225): pid=45155 uid=0 auid=0 ses=733 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391029261.589:87226): pid=45344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391029261.589:87227): pid=45344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391029261.589:87228): login pid=45344 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=734 >type=USER_START msg=audit(1391029261.589:87229): pid=45344 uid=0 auid=0 ses=734 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391029261.589:87230): pid=45344 uid=0 auid=0 ses=734 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391029261.609:87231): avc: denied { read } for pid=45360 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391029261.609:87231): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd269dec0 a2=84800 a3=0 items=0 ppid=45358 pid=45360 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=734 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391029261.619:87232): pid=45344 uid=0 auid=0 ses=734 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391029261.619:87233): pid=45344 uid=0 auid=0 ses=734 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391029801.630:87234): pid=45643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391029801.630:87235): pid=45643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391029801.630:87236): login pid=45643 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=735 >type=USER_START msg=audit(1391029801.630:87237): pid=45643 uid=0 auid=0 ses=735 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391029801.630:87238): pid=45643 uid=0 auid=0 ses=735 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391029801.640:87239): pid=45643 uid=0 auid=0 ses=735 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391029801.640:87240): pid=45643 uid=0 auid=0 ses=735 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391030701.650:87241): pid=46104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391030701.650:87242): pid=46104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391030701.650:87243): login pid=46104 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=736 >type=USER_START msg=audit(1391030701.650:87244): pid=46104 uid=0 auid=0 ses=736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391030701.650:87245): pid=46104 uid=0 auid=0 ses=736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391030701.660:87246): pid=46104 uid=0 auid=0 ses=736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391030701.660:87247): pid=46104 uid=0 auid=0 ses=736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391031601.671:87248): pid=46564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391031601.671:87249): pid=46564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391031601.671:87250): login pid=46564 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=737 >type=USER_START msg=audit(1391031601.671:87251): pid=46564 uid=0 auid=0 ses=737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391031601.681:87252): pid=46564 uid=0 auid=0 ses=737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391031601.681:87253): pid=46564 uid=0 auid=0 ses=737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391031601.681:87254): pid=46564 uid=0 auid=0 ses=737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391032501.691:87255): pid=47023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391032501.691:87256): pid=47023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391032501.691:87257): login pid=47023 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=738 >type=USER_START msg=audit(1391032501.701:87258): pid=47023 uid=0 auid=0 ses=738 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391032501.701:87259): pid=47023 uid=0 auid=0 ses=738 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391032501.701:87260): pid=47023 uid=0 auid=0 ses=738 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391032501.701:87261): pid=47023 uid=0 auid=0 ses=738 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391032861.712:87262): pid=47212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391032861.712:87263): pid=47212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391032861.712:87264): login pid=47212 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=739 >type=USER_START msg=audit(1391032861.712:87265): pid=47212 uid=0 auid=0 ses=739 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391032861.712:87266): pid=47212 uid=0 auid=0 ses=739 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391032861.732:87267): avc: denied { read } for pid=47228 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391032861.732:87267): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffda7700b0 a2=84800 a3=0 items=0 ppid=47226 pid=47228 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=739 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391032861.742:87268): pid=47212 uid=0 auid=0 ses=739 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391032861.742:87269): pid=47212 uid=0 auid=0 ses=739 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391033401.752:87270): pid=47512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391033401.752:87271): pid=47512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391033401.752:87272): login pid=47512 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=740 >type=USER_START msg=audit(1391033401.752:87273): pid=47512 uid=0 auid=0 ses=740 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391033401.762:87274): pid=47512 uid=0 auid=0 ses=740 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391033401.762:87275): pid=47512 uid=0 auid=0 ses=740 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391033401.762:87276): pid=47512 uid=0 auid=0 ses=740 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391034301.782:87277): pid=47973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391034301.782:87278): pid=47973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391034301.782:87279): login pid=47973 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=741 >type=USER_START msg=audit(1391034301.782:87280): pid=47973 uid=0 auid=0 ses=741 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391034301.782:87281): pid=47973 uid=0 auid=0 ses=741 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391034301.792:87282): pid=47973 uid=0 auid=0 ses=741 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391034301.802:87283): pid=47973 uid=0 auid=0 ses=741 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391035201.813:87284): pid=48432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391035201.813:87285): pid=48432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391035201.813:87286): login pid=48432 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=742 >type=USER_START msg=audit(1391035201.823:87287): pid=48432 uid=0 auid=0 ses=742 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391035201.823:87288): pid=48432 uid=0 auid=0 ses=742 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391035201.833:87289): pid=48432 uid=0 auid=0 ses=742 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391035201.833:87290): pid=48432 uid=0 auid=0 ses=742 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391036101.844:87291): pid=48894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391036101.844:87292): pid=48894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391036101.844:87293): login pid=48894 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=743 >type=USER_START msg=audit(1391036101.844:87294): pid=48894 uid=0 auid=0 ses=743 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391036101.844:87295): pid=48894 uid=0 auid=0 ses=743 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391036101.854:87296): pid=48894 uid=0 auid=0 ses=743 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391036101.854:87297): pid=48894 uid=0 auid=0 ses=743 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391036461.864:87298): pid=49081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391036461.864:87299): pid=49081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391036461.864:87300): login pid=49081 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=744 >type=USER_START msg=audit(1391036461.864:87301): pid=49081 uid=0 auid=0 ses=744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391036461.864:87302): pid=49081 uid=0 auid=0 ses=744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391036461.884:87303): avc: denied { read } for pid=49097 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391036461.884:87303): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdfc72af0 a2=84800 a3=0 items=0 ppid=49095 pid=49097 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=744 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391036461.904:87304): pid=49081 uid=0 auid=0 ses=744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391036461.904:87305): pid=49081 uid=0 auid=0 ses=744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391037001.904:87306): pid=49384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391037001.914:87307): pid=49384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391037001.914:87308): login pid=49384 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=745 >type=USER_START msg=audit(1391037001.914:87309): pid=49384 uid=0 auid=0 ses=745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391037001.914:87310): pid=49384 uid=0 auid=0 ses=745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391037001.914:87311): pid=49384 uid=0 auid=0 ses=745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391037001.924:87312): pid=49384 uid=0 auid=0 ses=745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391037901.935:87313): pid=49841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391037901.935:87314): pid=49841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391037901.935:87315): login pid=49841 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=746 >type=USER_START msg=audit(1391037901.935:87316): pid=49841 uid=0 auid=0 ses=746 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391037901.935:87317): pid=49841 uid=0 auid=0 ses=746 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391037901.945:87318): pid=49841 uid=0 auid=0 ses=746 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391037901.945:87319): pid=49841 uid=0 auid=0 ses=746 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391038801.955:87320): pid=50302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391038801.955:87321): pid=50302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391038801.955:87322): login pid=50302 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=747 >type=USER_START msg=audit(1391038801.955:87323): pid=50302 uid=0 auid=0 ses=747 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391038801.955:87324): pid=50302 uid=0 auid=0 ses=747 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391038801.965:87325): pid=50302 uid=0 auid=0 ses=747 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391038801.965:87326): pid=50302 uid=0 auid=0 ses=747 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391039701.976:87327): pid=50763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391039701.976:87328): pid=50763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391039701.976:87329): login pid=50763 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=748 >type=USER_START msg=audit(1391039701.976:87330): pid=50763 uid=0 auid=0 ses=748 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391039701.976:87331): pid=50763 uid=0 auid=0 ses=748 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391039701.986:87332): pid=50763 uid=0 auid=0 ses=748 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391039701.986:87333): pid=50763 uid=0 auid=0 ses=748 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391040061.996:87334): pid=50951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391040061.996:87335): pid=50951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391040061.996:87336): login pid=50951 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=749 >type=USER_START msg=audit(1391040061.996:87337): pid=50951 uid=0 auid=0 ses=749 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391040061.996:87338): pid=50951 uid=0 auid=0 ses=749 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391040062.016:87339): avc: denied { read } for pid=50967 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391040062.016:87339): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe5bce850 a2=84800 a3=0 items=0 ppid=50965 pid=50967 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=749 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391040062.026:87340): pid=50951 uid=0 auid=0 ses=749 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391040062.026:87341): pid=50951 uid=0 auid=0 ses=749 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391040601.036:87342): pid=51248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391040601.036:87343): pid=51248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391040601.036:87344): login pid=51248 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=750 >type=USER_START msg=audit(1391040601.036:87345): pid=51248 uid=0 auid=0 ses=750 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391040601.036:87346): pid=51248 uid=0 auid=0 ses=750 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391040601.046:87347): pid=51248 uid=0 auid=0 ses=750 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391040601.046:87348): pid=51248 uid=0 auid=0 ses=750 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391041501.057:87349): pid=51709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391041501.057:87350): pid=51709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391041501.057:87351): login pid=51709 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=751 >type=USER_START msg=audit(1391041501.057:87352): pid=51709 uid=0 auid=0 ses=751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391041501.057:87353): pid=51709 uid=0 auid=0 ses=751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391041501.067:87354): pid=51709 uid=0 auid=0 ses=751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391041501.067:87355): pid=51709 uid=0 auid=0 ses=751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391042401.077:87356): pid=52170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391042401.077:87357): pid=52170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391042401.077:87358): login pid=52170 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=752 >type=USER_START msg=audit(1391042401.087:87359): pid=52170 uid=0 auid=0 ses=752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391042401.087:87360): pid=52170 uid=0 auid=0 ses=752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391042401.097:87361): pid=52170 uid=0 auid=0 ses=752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391042401.097:87362): pid=52170 uid=0 auid=0 ses=752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391043301.108:87363): pid=52630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391043301.108:87364): pid=52630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391043301.108:87365): login pid=52630 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=753 >type=USER_START msg=audit(1391043301.108:87366): pid=52630 uid=0 auid=0 ses=753 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391043301.108:87367): pid=52630 uid=0 auid=0 ses=753 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391043301.128:87368): pid=52630 uid=0 auid=0 ses=753 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391043301.128:87369): pid=52630 uid=0 auid=0 ses=753 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391043661.138:87370): pid=52817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391043661.138:87371): pid=52817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391043661.138:87372): login pid=52817 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=754 >type=USER_START msg=audit(1391043661.138:87373): pid=52817 uid=0 auid=0 ses=754 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391043661.138:87374): pid=52817 uid=0 auid=0 ses=754 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391043661.158:87375): avc: denied { read } for pid=52833 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391043661.158:87375): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc008ca10 a2=84800 a3=0 items=0 ppid=52831 pid=52833 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=754 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391043661.168:87376): pid=52817 uid=0 auid=0 ses=754 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391043661.168:87377): pid=52817 uid=0 auid=0 ses=754 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391044201.178:87378): pid=53118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391044201.178:87379): pid=53118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391044201.178:87380): login pid=53118 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=755 >type=USER_START msg=audit(1391044201.178:87381): pid=53118 uid=0 auid=0 ses=755 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391044201.178:87382): pid=53118 uid=0 auid=0 ses=755 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391044201.188:87383): pid=53118 uid=0 auid=0 ses=755 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391044201.188:87384): pid=53118 uid=0 auid=0 ses=755 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391045101.199:87385): pid=53579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391045101.199:87386): pid=53579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391045101.199:87387): login pid=53579 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=756 >type=USER_START msg=audit(1391045101.199:87388): pid=53579 uid=0 auid=0 ses=756 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391045101.199:87389): pid=53579 uid=0 auid=0 ses=756 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391045101.209:87390): pid=53579 uid=0 auid=0 ses=756 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391045101.209:87391): pid=53579 uid=0 auid=0 ses=756 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391046001.219:87392): pid=54039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391046001.219:87393): pid=54039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391046001.219:87394): login pid=54039 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=757 >type=USER_START msg=audit(1391046001.219:87395): pid=54039 uid=0 auid=0 ses=757 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391046001.219:87396): pid=54039 uid=0 auid=0 ses=757 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391046001.229:87397): pid=54039 uid=0 auid=0 ses=757 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391046001.229:87398): pid=54039 uid=0 auid=0 ses=757 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391046901.240:87399): pid=54499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391046901.240:87400): pid=54499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391046901.240:87401): login pid=54499 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=758 >type=USER_START msg=audit(1391046901.240:87402): pid=54499 uid=0 auid=0 ses=758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391046901.240:87403): pid=54499 uid=0 auid=0 ses=758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391046901.250:87404): pid=54499 uid=0 auid=0 ses=758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391046901.250:87405): pid=54499 uid=0 auid=0 ses=758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391047261.260:87406): pid=54688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391047261.260:87407): pid=54688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391047261.260:87408): login pid=54688 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=759 >type=USER_START msg=audit(1391047261.260:87409): pid=54688 uid=0 auid=0 ses=759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391047261.260:87410): pid=54688 uid=0 auid=0 ses=759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391047261.280:87411): avc: denied { read } for pid=54707 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391047261.280:87411): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc3b4b9a0 a2=84800 a3=0 items=0 ppid=54705 pid=54707 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=759 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391047261.290:87412): pid=54688 uid=0 auid=0 ses=759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391047261.290:87413): pid=54688 uid=0 auid=0 ses=759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391047801.300:87414): pid=54991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391047801.300:87415): pid=54991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391047801.300:87416): login pid=54991 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=760 >type=USER_START msg=audit(1391047801.310:87417): pid=54991 uid=0 auid=0 ses=760 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391047801.310:87418): pid=54991 uid=0 auid=0 ses=760 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391047801.310:87419): pid=54991 uid=0 auid=0 ses=760 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391047801.310:87420): pid=54991 uid=0 auid=0 ses=760 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391048701.321:87421): pid=55451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391048701.321:87422): pid=55451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391048701.321:87423): login pid=55451 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=761 >type=USER_START msg=audit(1391048701.331:87424): pid=55451 uid=0 auid=0 ses=761 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391048701.331:87425): pid=55451 uid=0 auid=0 ses=761 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391048701.331:87426): pid=55451 uid=0 auid=0 ses=761 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391048701.341:87427): pid=55451 uid=0 auid=0 ses=761 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391049601.352:87428): pid=55911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391049601.352:87429): pid=55911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391049601.352:87430): login pid=55911 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=762 >type=USER_START msg=audit(1391049601.352:87431): pid=55911 uid=0 auid=0 ses=762 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391049601.352:87432): pid=55911 uid=0 auid=0 ses=762 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391049601.362:87433): pid=55911 uid=0 auid=0 ses=762 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391049601.362:87434): pid=55911 uid=0 auid=0 ses=762 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391050501.372:87435): pid=56371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391050501.372:87436): pid=56371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391050501.372:87437): login pid=56371 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=763 >type=USER_START msg=audit(1391050501.372:87438): pid=56371 uid=0 auid=0 ses=763 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391050501.382:87439): pid=56371 uid=0 auid=0 ses=763 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391050501.392:87440): pid=56371 uid=0 auid=0 ses=763 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391050501.392:87441): pid=56371 uid=0 auid=0 ses=763 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391050861.402:87442): pid=56559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391050861.402:87443): pid=56559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391050861.402:87444): login pid=56559 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=764 >type=USER_START msg=audit(1391050861.402:87445): pid=56559 uid=0 auid=0 ses=764 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391050861.402:87446): pid=56559 uid=0 auid=0 ses=764 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391050861.422:87447): avc: denied { read } for pid=56578 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391050861.422:87447): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffca82dcc0 a2=84800 a3=0 items=0 ppid=56576 pid=56578 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=764 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391050861.442:87448): pid=56559 uid=0 auid=0 ses=764 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391050861.442:87449): pid=56559 uid=0 auid=0 ses=764 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391051401.453:87450): pid=56864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391051401.453:87451): pid=56864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391051401.453:87452): login pid=56864 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=765 >type=USER_START msg=audit(1391051401.463:87453): pid=56864 uid=0 auid=0 ses=765 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391051401.463:87454): pid=56864 uid=0 auid=0 ses=765 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391051401.473:87455): pid=56864 uid=0 auid=0 ses=765 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391051401.473:87456): pid=56864 uid=0 auid=0 ses=765 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391052301.483:87457): pid=57320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391052301.483:87458): pid=57320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391052301.483:87459): login pid=57320 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=766 >type=USER_START msg=audit(1391052301.483:87460): pid=57320 uid=0 auid=0 ses=766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391052301.493:87461): pid=57320 uid=0 auid=0 ses=766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391052301.493:87462): pid=57320 uid=0 auid=0 ses=766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391052301.493:87463): pid=57320 uid=0 auid=0 ses=766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391053201.504:87464): pid=57782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391053201.504:87465): pid=57782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391053201.504:87466): login pid=57782 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=767 >type=USER_START msg=audit(1391053201.514:87467): pid=57782 uid=0 auid=0 ses=767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391053201.514:87468): pid=57782 uid=0 auid=0 ses=767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391053201.524:87469): pid=57782 uid=0 auid=0 ses=767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391053201.524:87470): pid=57782 uid=0 auid=0 ses=767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391054101.534:87471): pid=58242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391054101.534:87472): pid=58242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391054101.534:87473): login pid=58242 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=768 >type=USER_START msg=audit(1391054101.534:87474): pid=58242 uid=0 auid=0 ses=768 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391054101.534:87475): pid=58242 uid=0 auid=0 ses=768 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391054101.544:87476): pid=58242 uid=0 auid=0 ses=768 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391054101.544:87477): pid=58242 uid=0 auid=0 ses=768 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391054461.554:87478): pid=58430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391054461.554:87479): pid=58430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391054461.554:87480): login pid=58430 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=769 >type=USER_START msg=audit(1391054461.554:87481): pid=58430 uid=0 auid=0 ses=769 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391054461.554:87482): pid=58430 uid=0 auid=0 ses=769 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391054461.574:87483): avc: denied { read } for pid=58449 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391054461.574:87483): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdd4f9720 a2=84800 a3=0 items=0 ppid=58447 pid=58449 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=769 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391054461.584:87484): pid=58430 uid=0 auid=0 ses=769 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391054461.584:87485): pid=58430 uid=0 auid=0 ses=769 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391055001.595:87486): pid=58734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391055001.595:87487): pid=58734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391055001.595:87488): login pid=58734 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=770 >type=USER_START msg=audit(1391055001.595:87489): pid=58734 uid=0 auid=0 ses=770 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391055001.595:87490): pid=58734 uid=0 auid=0 ses=770 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391055001.605:87491): pid=58734 uid=0 auid=0 ses=770 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391055001.605:87492): pid=58734 uid=0 auid=0 ses=770 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391055901.615:87493): pid=59193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391055901.615:87494): pid=59193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391055901.615:87495): login pid=59193 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=771 >type=USER_START msg=audit(1391055901.615:87496): pid=59193 uid=0 auid=0 ses=771 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391055901.615:87497): pid=59193 uid=0 auid=0 ses=771 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391055901.625:87498): pid=59193 uid=0 auid=0 ses=771 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391055901.625:87499): pid=59193 uid=0 auid=0 ses=771 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391056801.636:87500): pid=59654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391056801.636:87501): pid=59654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391056801.636:87502): login pid=59654 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=772 >type=USER_START msg=audit(1391056801.636:87503): pid=59654 uid=0 auid=0 ses=772 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391056801.636:87504): pid=59654 uid=0 auid=0 ses=772 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391056801.646:87505): pid=59654 uid=0 auid=0 ses=772 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391056801.646:87506): pid=59654 uid=0 auid=0 ses=772 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391057701.656:87507): pid=60114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391057701.656:87508): pid=60114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391057701.656:87509): login pid=60114 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=773 >type=USER_START msg=audit(1391057701.666:87510): pid=60114 uid=0 auid=0 ses=773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391057701.666:87511): pid=60114 uid=0 auid=0 ses=773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391057701.666:87512): pid=60114 uid=0 auid=0 ses=773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391057701.666:87513): pid=60114 uid=0 auid=0 ses=773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391058061.677:87514): pid=60306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391058061.677:87515): pid=60306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391058061.677:87516): login pid=60306 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=774 >type=USER_START msg=audit(1391058061.677:87517): pid=60306 uid=0 auid=0 ses=774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391058061.677:87518): pid=60306 uid=0 auid=0 ses=774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391058061.707:87519): avc: denied { read } for pid=60325 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391058061.707:87519): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc5263bf0 a2=84800 a3=0 items=0 ppid=60323 pid=60325 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=774 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391058061.717:87520): pid=60306 uid=0 auid=0 ses=774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391058061.717:87521): pid=60306 uid=0 auid=0 ses=774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391058601.727:87522): pid=60610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391058601.727:87523): pid=60610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391058601.727:87524): login pid=60610 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=775 >type=USER_START msg=audit(1391058601.727:87525): pid=60610 uid=0 auid=0 ses=775 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391058601.727:87526): pid=60610 uid=0 auid=0 ses=775 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391058601.737:87527): pid=60610 uid=0 auid=0 ses=775 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391058601.737:87528): pid=60610 uid=0 auid=0 ses=775 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391059441.707:87529): avc: denied { read } for pid=61044 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391059441.707:87529): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff5fe2c60 a2=84800 a3=0 items=0 ppid=61042 pid=61044 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=774 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1391059501.747:87530): pid=61112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391059501.747:87531): pid=61112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391059501.747:87532): login pid=61112 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=776 >type=USER_START msg=audit(1391059501.757:87533): pid=61112 uid=0 auid=0 ses=776 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391059501.757:87534): pid=61112 uid=0 auid=0 ses=776 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391059501.767:87535): pid=61112 uid=0 auid=0 ses=776 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391059501.767:87536): pid=61112 uid=0 auid=0 ses=776 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391060401.768:87537): pid=61572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391060401.768:87538): pid=61572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391060401.768:87539): login pid=61572 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=777 >type=USER_START msg=audit(1391060401.778:87540): pid=61572 uid=0 auid=0 ses=777 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391060401.778:87541): pid=61572 uid=0 auid=0 ses=777 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391060401.788:87542): pid=61572 uid=0 auid=0 ses=777 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391060401.798:87543): pid=61572 uid=0 auid=0 ses=777 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391061301.809:87544): pid=62031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391061301.809:87545): pid=62031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391061301.809:87546): login pid=62031 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=778 >type=USER_START msg=audit(1391061301.809:87547): pid=62031 uid=0 auid=0 ses=778 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391061301.809:87548): pid=62031 uid=0 auid=0 ses=778 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391061301.819:87549): pid=62031 uid=0 auid=0 ses=778 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391061301.819:87550): pid=62031 uid=0 auid=0 ses=778 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391061661.829:87551): pid=62219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391061661.829:87552): pid=62219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391061661.829:87553): login pid=62219 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=779 >type=USER_START msg=audit(1391061661.829:87554): pid=62219 uid=0 auid=0 ses=779 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391061661.829:87555): pid=62219 uid=0 auid=0 ses=779 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391061661.849:87556): avc: denied { read } for pid=62235 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391061661.849:87556): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff758f690 a2=84800 a3=0 items=0 ppid=62233 pid=62235 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=779 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391061661.859:87557): pid=62219 uid=0 auid=0 ses=779 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391061661.859:87558): pid=62219 uid=0 auid=0 ses=779 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391062201.869:87559): pid=62521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391062201.869:87560): pid=62521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391062201.869:87561): login pid=62521 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=780 >type=USER_START msg=audit(1391062201.869:87562): pid=62521 uid=0 auid=0 ses=780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391062201.879:87563): pid=62521 uid=0 auid=0 ses=780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391062201.879:87564): pid=62521 uid=0 auid=0 ses=780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391062201.879:87565): pid=62521 uid=0 auid=0 ses=780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391063101.890:87566): pid=62977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391063101.890:87567): pid=62977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391063101.890:87568): login pid=62977 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=781 >type=USER_START msg=audit(1391063101.900:87569): pid=62977 uid=0 auid=0 ses=781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391063101.900:87570): pid=62977 uid=0 auid=0 ses=781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391063101.900:87571): pid=62977 uid=0 auid=0 ses=781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391063101.900:87572): pid=62977 uid=0 auid=0 ses=781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391064001.910:87573): pid=63439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391064001.910:87574): pid=63439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391064001.920:87575): login pid=63439 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=782 >type=USER_START msg=audit(1391064001.920:87576): pid=63439 uid=0 auid=0 ses=782 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391064001.920:87577): pid=63439 uid=0 auid=0 ses=782 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391064001.920:87578): pid=63439 uid=0 auid=0 ses=782 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391064001.930:87579): pid=63439 uid=0 auid=0 ses=782 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391064901.941:87580): pid=63899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391064901.941:87581): pid=63899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391064901.941:87582): login pid=63899 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=783 >type=USER_START msg=audit(1391064901.941:87583): pid=63899 uid=0 auid=0 ses=783 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391064901.941:87584): pid=63899 uid=0 auid=0 ses=783 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391064901.951:87585): pid=63899 uid=0 auid=0 ses=783 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391064901.951:87586): pid=63899 uid=0 auid=0 ses=783 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391065261.951:87587): pid=64087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391065261.951:87588): pid=64087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391065261.951:87589): login pid=64087 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=784 >type=USER_START msg=audit(1391065261.961:87590): pid=64087 uid=0 auid=0 ses=784 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391065261.961:87591): pid=64087 uid=0 auid=0 ses=784 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391065261.971:87592): avc: denied { read } for pid=64103 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391065261.971:87592): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe9f363f0 a2=84800 a3=0 items=0 ppid=64101 pid=64103 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=784 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391065261.991:87593): pid=64087 uid=0 auid=0 ses=784 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391065261.991:87594): pid=64087 uid=0 auid=0 ses=784 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391065801.991:87595): pid=64387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391065802.001:87596): pid=64387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391065802.001:87597): login pid=64387 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=785 >type=USER_START msg=audit(1391065802.001:87598): pid=64387 uid=0 auid=0 ses=785 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391065802.001:87599): pid=64387 uid=0 auid=0 ses=785 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391065802.001:87600): pid=64387 uid=0 auid=0 ses=785 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391065802.011:87601): pid=64387 uid=0 auid=0 ses=785 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391066701.022:87602): pid=64846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391066701.022:87603): pid=64846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391066701.022:87604): login pid=64846 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=786 >type=USER_START msg=audit(1391066701.022:87605): pid=64846 uid=0 auid=0 ses=786 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391066701.022:87606): pid=64846 uid=0 auid=0 ses=786 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391066701.032:87607): pid=64846 uid=0 auid=0 ses=786 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391066701.032:87608): pid=64846 uid=0 auid=0 ses=786 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391067601.042:87609): pid=65306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391067601.042:87610): pid=65306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391067601.042:87611): login pid=65306 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=787 >type=USER_START msg=audit(1391067601.052:87612): pid=65306 uid=0 auid=0 ses=787 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391067601.052:87613): pid=65306 uid=0 auid=0 ses=787 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391067601.062:87614): pid=65306 uid=0 auid=0 ses=787 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391067601.062:87615): pid=65306 uid=0 auid=0 ses=787 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391068501.083:87616): pid=559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391068501.083:87617): pid=559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391068501.083:87618): login pid=559 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=788 >type=USER_START msg=audit(1391068501.083:87619): pid=559 uid=0 auid=0 ses=788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391068501.083:87620): pid=559 uid=0 auid=0 ses=788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391068501.103:87621): pid=559 uid=0 auid=0 ses=788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391068501.103:87622): pid=559 uid=0 auid=0 ses=788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391068861.113:87623): pid=799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391068861.113:87624): pid=799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391068861.113:87625): login pid=799 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=789 >type=USER_START msg=audit(1391068861.113:87626): pid=799 uid=0 auid=0 ses=789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391068861.113:87627): pid=799 uid=0 auid=0 ses=789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391068861.133:87628): avc: denied { read } for pid=816 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391068861.133:87628): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffedf55b0 a2=84800 a3=0 items=0 ppid=814 pid=816 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=789 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391068861.143:87629): pid=799 uid=0 auid=0 ses=789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391068861.143:87630): pid=799 uid=0 auid=0 ses=789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391069401.153:87631): pid=1131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391069401.153:87632): pid=1131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391069401.153:87633): login pid=1131 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=790 >type=USER_START msg=audit(1391069401.153:87634): pid=1131 uid=0 auid=0 ses=790 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391069401.153:87635): pid=1131 uid=0 auid=0 ses=790 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391069401.163:87636): pid=1131 uid=0 auid=0 ses=790 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391069401.163:87637): pid=1131 uid=0 auid=0 ses=790 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391070301.174:87638): pid=1599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391070301.174:87639): pid=1599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391070301.174:87640): login pid=1599 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=791 >type=USER_START msg=audit(1391070301.174:87641): pid=1599 uid=0 auid=0 ses=791 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391070301.174:87642): pid=1599 uid=0 auid=0 ses=791 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391070301.184:87643): pid=1599 uid=0 auid=0 ses=791 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391070301.184:87644): pid=1599 uid=0 auid=0 ses=791 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391071201.194:87645): pid=2061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391071201.194:87646): pid=2061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391071201.194:87647): login pid=2061 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=792 >type=USER_START msg=audit(1391071201.194:87648): pid=2061 uid=0 auid=0 ses=792 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391071201.194:87649): pid=2061 uid=0 auid=0 ses=792 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391071201.204:87650): pid=2061 uid=0 auid=0 ses=792 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391071201.204:87651): pid=2061 uid=0 auid=0 ses=792 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391072101.215:87652): pid=2523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391072101.215:87653): pid=2523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391072101.215:87654): login pid=2523 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=793 >type=USER_START msg=audit(1391072101.215:87655): pid=2523 uid=0 auid=0 ses=793 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391072101.215:87656): pid=2523 uid=0 auid=0 ses=793 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391072101.225:87657): pid=2523 uid=0 auid=0 ses=793 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391072101.225:87658): pid=2523 uid=0 auid=0 ses=793 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391072461.235:87659): pid=2713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391072461.235:87660): pid=2713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391072461.235:87661): login pid=2713 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=794 >type=USER_START msg=audit(1391072461.235:87662): pid=2713 uid=0 auid=0 ses=794 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391072461.235:87663): pid=2713 uid=0 auid=0 ses=794 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391072461.255:87664): avc: denied { read } for pid=2729 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391072461.255:87664): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffe80e430 a2=84800 a3=0 items=0 ppid=2727 pid=2729 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=794 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391072461.265:87665): pid=2713 uid=0 auid=0 ses=794 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391072461.265:87666): pid=2713 uid=0 auid=0 ses=794 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391073001.275:87667): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391073001.275:87668): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391073001.275:87669): login pid=3014 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=795 >type=USER_START msg=audit(1391073001.285:87670): pid=3014 uid=0 auid=0 ses=795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391073001.285:87671): pid=3014 uid=0 auid=0 ses=795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391073001.285:87672): pid=3014 uid=0 auid=0 ses=795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391073001.285:87673): pid=3014 uid=0 auid=0 ses=795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391073901.296:87674): pid=3474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391073901.296:87675): pid=3474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391073901.296:87676): login pid=3474 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=796 >type=USER_START msg=audit(1391073901.306:87677): pid=3474 uid=0 auid=0 ses=796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391073901.306:87678): pid=3474 uid=0 auid=0 ses=796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391073901.306:87679): pid=3474 uid=0 auid=0 ses=796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391073901.306:87680): pid=3474 uid=0 auid=0 ses=796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391074801.317:87681): pid=3934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391074801.317:87682): pid=3934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391074801.317:87683): login pid=3934 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=797 >type=USER_START msg=audit(1391074801.327:87684): pid=3934 uid=0 auid=0 ses=797 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391074801.327:87685): pid=3934 uid=0 auid=0 ses=797 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391074801.327:87686): pid=3934 uid=0 auid=0 ses=797 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391074801.327:87687): pid=3934 uid=0 auid=0 ses=797 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391075701.347:87688): pid=4395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391075701.347:87689): pid=4395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391075701.347:87690): login pid=4395 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=798 >type=USER_START msg=audit(1391075701.347:87691): pid=4395 uid=0 auid=0 ses=798 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391075701.357:87692): pid=4395 uid=0 auid=0 ses=798 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391075701.367:87693): pid=4395 uid=0 auid=0 ses=798 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391075701.367:87694): pid=4395 uid=0 auid=0 ses=798 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391076061.377:87695): pid=4584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391076061.377:87696): pid=4584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391076061.377:87697): login pid=4584 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=799 >type=USER_START msg=audit(1391076061.377:87698): pid=4584 uid=0 auid=0 ses=799 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391076061.377:87699): pid=4584 uid=0 auid=0 ses=799 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391076061.397:87700): avc: denied { read } for pid=4600 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391076061.397:87700): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffff062870 a2=84800 a3=0 items=0 ppid=4598 pid=4600 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=799 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391076061.417:87701): pid=4584 uid=0 auid=0 ses=799 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391076061.417:87702): pid=4584 uid=0 auid=0 ses=799 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391076601.418:87703): pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391076601.418:87704): pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391076601.418:87705): login pid=4886 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=800 >type=USER_START msg=audit(1391076601.418:87706): pid=4886 uid=0 auid=0 ses=800 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391076601.418:87707): pid=4886 uid=0 auid=0 ses=800 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391076601.428:87708): pid=4886 uid=0 auid=0 ses=800 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391076601.428:87709): pid=4886 uid=0 auid=0 ses=800 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391077501.438:87710): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391077501.438:87711): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391077501.438:87712): login pid=5346 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=801 >type=USER_START msg=audit(1391077501.438:87713): pid=5346 uid=0 auid=0 ses=801 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391077501.438:87714): pid=5346 uid=0 auid=0 ses=801 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391077501.448:87715): pid=5346 uid=0 auid=0 ses=801 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391077501.448:87716): pid=5346 uid=0 auid=0 ses=801 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391078401.459:87717): pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391078401.459:87718): pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391078401.459:87719): login pid=5802 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=802 >type=USER_START msg=audit(1391078401.459:87720): pid=5802 uid=0 auid=0 ses=802 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391078401.459:87721): pid=5802 uid=0 auid=0 ses=802 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391078401.469:87722): pid=5802 uid=0 auid=0 ses=802 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391078401.469:87723): pid=5802 uid=0 auid=0 ses=802 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391079301.479:87724): pid=6262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391079301.479:87725): pid=6262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391079301.479:87726): login pid=6262 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=803 >type=USER_START msg=audit(1391079301.479:87727): pid=6262 uid=0 auid=0 ses=803 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391079301.479:87728): pid=6262 uid=0 auid=0 ses=803 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391079301.489:87729): pid=6262 uid=0 auid=0 ses=803 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391079301.489:87730): pid=6262 uid=0 auid=0 ses=803 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391079661.499:87731): pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391079661.499:87732): pid=6453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391079661.499:87733): login pid=6453 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=804 >type=USER_START msg=audit(1391079661.499:87734): pid=6453 uid=0 auid=0 ses=804 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391079661.499:87735): pid=6453 uid=0 auid=0 ses=804 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391079661.519:87736): avc: denied { read } for pid=6469 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391079661.519:87736): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffeb35d5e0 a2=84800 a3=0 items=0 ppid=6467 pid=6469 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=804 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391079661.529:87737): pid=6453 uid=0 auid=0 ses=804 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391079661.529:87738): pid=6453 uid=0 auid=0 ses=804 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391080201.540:87739): pid=6754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391080201.540:87740): pid=6754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391080201.540:87741): login pid=6754 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=805 >type=USER_START msg=audit(1391080201.540:87742): pid=6754 uid=0 auid=0 ses=805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391080201.540:87743): pid=6754 uid=0 auid=0 ses=805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391080201.550:87744): pid=6754 uid=0 auid=0 ses=805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391080201.550:87745): pid=6754 uid=0 auid=0 ses=805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391081101.560:87746): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391081101.560:87747): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391081101.560:87748): login pid=7217 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=806 >type=USER_START msg=audit(1391081101.560:87749): pid=7217 uid=0 auid=0 ses=806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391081101.570:87750): pid=7217 uid=0 auid=0 ses=806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391081101.570:87751): pid=7217 uid=0 auid=0 ses=806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391081101.570:87752): pid=7217 uid=0 auid=0 ses=806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391082001.581:87753): pid=7673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391082001.581:87754): pid=7673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391082001.581:87755): login pid=7673 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=807 >type=USER_START msg=audit(1391082001.591:87756): pid=7673 uid=0 auid=0 ses=807 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391082001.591:87757): pid=7673 uid=0 auid=0 ses=807 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391082001.591:87758): pid=7673 uid=0 auid=0 ses=807 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391082001.591:87759): pid=7673 uid=0 auid=0 ses=807 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391082901.601:87760): pid=8136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391082901.601:87761): pid=8136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391082901.601:87762): login pid=8136 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=808 >type=USER_START msg=audit(1391082901.611:87763): pid=8136 uid=0 auid=0 ses=808 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391082901.611:87764): pid=8136 uid=0 auid=0 ses=808 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391082901.611:87765): pid=8136 uid=0 auid=0 ses=808 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391082901.621:87766): pid=8136 uid=0 auid=0 ses=808 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391083261.622:87767): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391083261.622:87768): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391083261.622:87769): login pid=8325 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=809 >type=USER_START msg=audit(1391083261.632:87770): pid=8325 uid=0 auid=0 ses=809 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391083261.632:87771): pid=8325 uid=0 auid=0 ses=809 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391083261.642:87772): avc: denied { read } for pid=8341 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391083261.642:87772): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc2d7f300 a2=84800 a3=0 items=0 ppid=8339 pid=8341 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=809 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391083261.662:87773): pid=8325 uid=0 auid=0 ses=809 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391083261.662:87774): pid=8325 uid=0 auid=0 ses=809 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391083801.672:87775): pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391083801.672:87776): pid=8722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391083801.672:87777): login pid=8722 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=810 >type=USER_START msg=audit(1391083801.672:87778): pid=8722 uid=0 auid=0 ses=810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391083801.672:87779): pid=8722 uid=0 auid=0 ses=810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391083801.682:87780): pid=8722 uid=0 auid=0 ses=810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391083801.682:87781): pid=8722 uid=0 auid=0 ses=810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391084701.692:87782): pid=9540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391084701.692:87783): pid=9540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391084701.692:87784): login pid=9540 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=811 >type=USER_START msg=audit(1391084701.692:87785): pid=9540 uid=0 auid=0 ses=811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391084701.702:87786): pid=9540 uid=0 auid=0 ses=811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391084701.702:87787): pid=9540 uid=0 auid=0 ses=811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391084701.702:87788): pid=9540 uid=0 auid=0 ses=811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391085601.713:87789): pid=10356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391085601.713:87790): pid=10356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391085601.713:87791): login pid=10356 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=812 >type=USER_START msg=audit(1391085601.723:87792): pid=10356 uid=0 auid=0 ses=812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391085601.723:87793): pid=10356 uid=0 auid=0 ses=812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391085601.723:87794): pid=10356 uid=0 auid=0 ses=812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391085601.723:87795): pid=10356 uid=0 auid=0 ses=812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391086501.733:87796): pid=11171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391086501.733:87797): pid=11171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391086501.733:87798): login pid=11171 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=813 >type=USER_START msg=audit(1391086501.743:87799): pid=11171 uid=0 auid=0 ses=813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391086501.743:87800): pid=11171 uid=0 auid=0 ses=813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391086501.743:87801): pid=11171 uid=0 auid=0 ses=813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391086501.743:87802): pid=11171 uid=0 auid=0 ses=813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391086861.754:87803): pid=11422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391086861.754:87804): pid=11422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391086861.754:87805): login pid=11422 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=814 >type=USER_START msg=audit(1391086861.754:87806): pid=11422 uid=0 auid=0 ses=814 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391086861.754:87807): pid=11422 uid=0 auid=0 ses=814 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391086861.774:87808): avc: denied { read } for pid=11438 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391086861.774:87808): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd3af63f0 a2=84800 a3=0 items=0 ppid=11436 pid=11438 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=814 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391086861.784:87809): pid=11422 uid=0 auid=0 ses=814 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391086861.794:87810): pid=11422 uid=0 auid=0 ses=814 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391087401.794:87811): pid=11723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391087401.794:87812): pid=11723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391087401.794:87813): login pid=11723 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=815 >type=USER_START msg=audit(1391087401.804:87814): pid=11723 uid=0 auid=0 ses=815 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391087401.804:87815): pid=11723 uid=0 auid=0 ses=815 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391087401.814:87816): pid=11723 uid=0 auid=0 ses=815 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391087401.814:87817): pid=11723 uid=0 auid=0 ses=815 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391088301.825:87818): pid=12498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391088301.825:87819): pid=12498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391088301.825:87820): login pid=12498 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=816 >type=USER_START msg=audit(1391088301.825:87821): pid=12498 uid=0 auid=0 ses=816 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391088301.825:87822): pid=12498 uid=0 auid=0 ses=816 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391088301.835:87823): pid=12498 uid=0 auid=0 ses=816 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391088301.835:87824): pid=12498 uid=0 auid=0 ses=816 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391089201.845:87825): pid=13317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391089201.845:87826): pid=13317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391089201.845:87827): login pid=13317 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=817 >type=USER_START msg=audit(1391089201.845:87828): pid=13317 uid=0 auid=0 ses=817 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391089201.845:87829): pid=13317 uid=0 auid=0 ses=817 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391089201.855:87830): pid=13317 uid=0 auid=0 ses=817 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391089201.855:87831): pid=13317 uid=0 auid=0 ses=817 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391090101.866:87832): pid=14137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391090101.866:87833): pid=14137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391090101.866:87834): login pid=14137 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=818 >type=USER_START msg=audit(1391090101.866:87835): pid=14137 uid=0 auid=0 ses=818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391090101.866:87836): pid=14137 uid=0 auid=0 ses=818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391090101.876:87837): pid=14137 uid=0 auid=0 ses=818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391090101.876:87838): pid=14137 uid=0 auid=0 ses=818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391090461.886:87839): pid=14465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391090461.886:87840): pid=14465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391090461.886:87841): login pid=14465 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=819 >type=USER_START msg=audit(1391090461.886:87842): pid=14465 uid=0 auid=0 ses=819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391090461.896:87843): pid=14465 uid=0 auid=0 ses=819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391090461.906:87844): avc: denied { read } for pid=14483 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391090461.906:87844): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd4f683a0 a2=84800 a3=0 items=0 ppid=14481 pid=14483 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=819 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391090461.916:87845): pid=14465 uid=0 auid=0 ses=819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391090461.916:87846): pid=14465 uid=0 auid=0 ses=819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391091001.926:87847): pid=14982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391091001.926:87848): pid=14982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391091001.926:87849): login pid=14982 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=820 >type=USER_START msg=audit(1391091001.936:87850): pid=14982 uid=0 auid=0 ses=820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391091001.936:87851): pid=14982 uid=0 auid=0 ses=820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391091001.936:87852): pid=14982 uid=0 auid=0 ses=820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391091001.946:87853): pid=14982 uid=0 auid=0 ses=820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391091901.947:87854): pid=15801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391091901.947:87855): pid=15801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391091901.957:87856): login pid=15801 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=821 >type=USER_START msg=audit(1391091901.957:87857): pid=15801 uid=0 auid=0 ses=821 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391091901.957:87858): pid=15801 uid=0 auid=0 ses=821 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391091901.967:87859): pid=15801 uid=0 auid=0 ses=821 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391091901.967:87860): pid=15801 uid=0 auid=0 ses=821 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391092801.977:87861): pid=16616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391092801.977:87862): pid=16616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391092801.977:87863): login pid=16616 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=822 >type=USER_START msg=audit(1391092801.977:87864): pid=16616 uid=0 auid=0 ses=822 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391092801.977:87865): pid=16616 uid=0 auid=0 ses=822 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391092801.987:87866): pid=16616 uid=0 auid=0 ses=822 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391092801.987:87867): pid=16616 uid=0 auid=0 ses=822 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391093701.988:87868): pid=17431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391093701.988:87869): pid=17431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391093701.988:87870): login pid=17431 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=823 >type=USER_START msg=audit(1391093701.988:87871): pid=17431 uid=0 auid=0 ses=823 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391093701.988:87872): pid=17431 uid=0 auid=0 ses=823 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391093701.998:87873): pid=17431 uid=0 auid=0 ses=823 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391093701.998:87874): pid=17431 uid=0 auid=0 ses=823 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391094061.998:87875): pid=17765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391094061.998:87876): pid=17765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391094061.998:87877): login pid=17765 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=824 >type=USER_START msg=audit(1391094062.008:87878): pid=17765 uid=0 auid=0 ses=824 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391094062.008:87879): pid=17765 uid=0 auid=0 ses=824 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391094062.018:87880): avc: denied { read } for pid=17781 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391094062.018:87880): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd6a6a510 a2=84800 a3=0 items=0 ppid=17779 pid=17781 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=824 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391094062.028:87881): pid=17765 uid=0 auid=0 ses=824 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391094062.038:87882): pid=17765 uid=0 auid=0 ses=824 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391094601.038:87883): pid=18276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391094601.038:87884): pid=18276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391094601.038:87885): login pid=18276 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=825 >type=USER_START msg=audit(1391094601.048:87886): pid=18276 uid=0 auid=0 ses=825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391094601.048:87887): pid=18276 uid=0 auid=0 ses=825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391094601.048:87888): pid=18276 uid=0 auid=0 ses=825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391094601.048:87889): pid=18276 uid=0 auid=0 ses=825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391095501.059:87890): pid=18918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391095501.059:87891): pid=18918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391095501.059:87892): login pid=18918 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=826 >type=USER_START msg=audit(1391095501.069:87893): pid=18918 uid=0 auid=0 ses=826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391095501.069:87894): pid=18918 uid=0 auid=0 ses=826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391095501.069:87895): pid=18918 uid=0 auid=0 ses=826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391095501.069:87896): pid=18918 uid=0 auid=0 ses=826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391096401.079:87897): pid=19614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391096401.079:87898): pid=19614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391096401.079:87899): login pid=19614 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=827 >type=USER_START msg=audit(1391096401.089:87900): pid=19614 uid=0 auid=0 ses=827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391096401.089:87901): pid=19614 uid=0 auid=0 ses=827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391096401.089:87902): pid=19614 uid=0 auid=0 ses=827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391096401.099:87903): pid=19614 uid=0 auid=0 ses=827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391097301.110:87904): pid=20387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391097301.110:87905): pid=20387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391097301.110:87906): login pid=20387 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=828 >type=USER_START msg=audit(1391097301.110:87907): pid=20387 uid=0 auid=0 ses=828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391097301.110:87908): pid=20387 uid=0 auid=0 ses=828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391097301.120:87909): pid=20387 uid=0 auid=0 ses=828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391097301.120:87910): pid=20387 uid=0 auid=0 ses=828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391097661.120:87911): pid=20576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391097661.120:87912): pid=20576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391097661.120:87913): login pid=20576 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=829 >type=USER_START msg=audit(1391097661.130:87914): pid=20576 uid=0 auid=0 ses=829 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391097661.130:87915): pid=20576 uid=0 auid=0 ses=829 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391097661.140:87916): avc: denied { read } for pid=20592 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391097661.140:87916): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffff769070 a2=84800 a3=0 items=0 ppid=20590 pid=20592 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=829 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391097661.150:87917): pid=20576 uid=0 auid=0 ses=829 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391097661.160:87918): pid=20576 uid=0 auid=0 ses=829 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391098201.160:87919): pid=21497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391098201.160:87920): pid=21497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391098201.160:87921): login pid=21497 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=830 >type=USER_START msg=audit(1391098201.170:87922): pid=21497 uid=0 auid=0 ses=830 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391098201.170:87923): pid=21497 uid=0 auid=0 ses=830 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391098201.180:87924): pid=21497 uid=0 auid=0 ses=830 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391098201.180:87925): pid=21497 uid=0 auid=0 ses=830 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391099101.191:87926): pid=23687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391099101.191:87927): pid=23687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391099101.191:87928): login pid=23687 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=831 >type=USER_START msg=audit(1391099101.191:87929): pid=23687 uid=0 auid=0 ses=831 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391099101.191:87930): pid=23687 uid=0 auid=0 ses=831 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391099101.201:87931): pid=23687 uid=0 auid=0 ses=831 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391099101.201:87932): pid=23687 uid=0 auid=0 ses=831 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391100001.212:87933): pid=24187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391100001.212:87934): pid=24187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391100001.212:87935): login pid=24187 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=832 >type=USER_START msg=audit(1391100001.212:87936): pid=24187 uid=0 auid=0 ses=832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391100001.212:87937): pid=24187 uid=0 auid=0 ses=832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391100001.232:87938): pid=24187 uid=0 auid=0 ses=832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391100001.232:87939): pid=24187 uid=0 auid=0 ses=832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391100901.242:87940): pid=24648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391100901.242:87941): pid=24648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391100901.242:87942): login pid=24648 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=833 >type=USER_START msg=audit(1391100901.242:87943): pid=24648 uid=0 auid=0 ses=833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391100901.242:87944): pid=24648 uid=0 auid=0 ses=833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391100901.252:87945): pid=24648 uid=0 auid=0 ses=833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391100901.252:87946): pid=24648 uid=0 auid=0 ses=833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391101261.252:87947): pid=24836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391101261.252:87948): pid=24836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391101261.262:87949): login pid=24836 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=834 >type=USER_START msg=audit(1391101261.262:87950): pid=24836 uid=0 auid=0 ses=834 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391101261.262:87951): pid=24836 uid=0 auid=0 ses=834 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391101261.272:87952): avc: denied { read } for pid=24853 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391101261.272:87952): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffd7a90c0 a2=84800 a3=0 items=0 ppid=24851 pid=24853 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=834 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391101261.292:87953): pid=24836 uid=0 auid=0 ses=834 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391101261.292:87954): pid=24836 uid=0 auid=0 ses=834 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391101801.303:87955): pid=25355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391101801.303:87956): pid=25355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391101801.303:87957): login pid=25355 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=835 >type=USER_START msg=audit(1391101801.313:87958): pid=25355 uid=0 auid=0 ses=835 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391101801.313:87959): pid=25355 uid=0 auid=0 ses=835 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391101801.313:87960): pid=25355 uid=0 auid=0 ses=835 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391101801.323:87961): pid=25355 uid=0 auid=0 ses=835 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391102701.323:87962): pid=26170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391102701.323:87963): pid=26170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391102701.333:87964): login pid=26170 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=836 >type=USER_START msg=audit(1391102701.333:87965): pid=26170 uid=0 auid=0 ses=836 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391102701.333:87966): pid=26170 uid=0 auid=0 ses=836 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391102701.333:87967): pid=26170 uid=0 auid=0 ses=836 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391102701.343:87968): pid=26170 uid=0 auid=0 ses=836 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391103601.344:87969): pid=26985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391103601.344:87970): pid=26985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391103601.354:87971): login pid=26985 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=837 >type=USER_START msg=audit(1391103601.354:87972): pid=26985 uid=0 auid=0 ses=837 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391103601.354:87973): pid=26985 uid=0 auid=0 ses=837 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391103601.364:87974): pid=26985 uid=0 auid=0 ses=837 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391103601.364:87975): pid=26985 uid=0 auid=0 ses=837 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391104501.374:87976): pid=27799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391104501.374:87977): pid=27799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391104501.374:87978): login pid=27799 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=838 >type=USER_START msg=audit(1391104501.374:87979): pid=27799 uid=0 auid=0 ses=838 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391104501.374:87980): pid=27799 uid=0 auid=0 ses=838 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391104501.384:87981): pid=27799 uid=0 auid=0 ses=838 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391104501.384:87982): pid=27799 uid=0 auid=0 ses=838 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391104861.384:87983): pid=28129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391104861.384:87984): pid=28129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391104861.384:87985): login pid=28129 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=839 >type=USER_START msg=audit(1391104861.394:87986): pid=28129 uid=0 auid=0 ses=839 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391104861.394:87987): pid=28129 uid=0 auid=0 ses=839 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391104861.404:87988): avc: denied { read } for pid=28146 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391104861.404:87988): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcd4eefd0 a2=84800 a3=0 items=0 ppid=28144 pid=28146 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=839 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391104861.414:87989): pid=28129 uid=0 auid=0 ses=839 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391104861.424:87990): pid=28129 uid=0 auid=0 ses=839 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391105401.425:87991): pid=28599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391105401.425:87992): pid=28599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391105401.425:87993): login pid=28599 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=840 >type=USER_START msg=audit(1391105401.435:87994): pid=28599 uid=0 auid=0 ses=840 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391105401.435:87995): pid=28599 uid=0 auid=0 ses=840 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391105401.435:87996): pid=28599 uid=0 auid=0 ses=840 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391105401.445:87997): pid=28599 uid=0 auid=0 ses=840 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391106301.445:87998): pid=29414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391106301.445:87999): pid=29414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391106301.445:88000): login pid=29414 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=841 >type=USER_START msg=audit(1391106301.455:88001): pid=29414 uid=0 auid=0 ses=841 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391106301.455:88002): pid=29414 uid=0 auid=0 ses=841 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391106301.455:88003): pid=29414 uid=0 auid=0 ses=841 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391106301.465:88004): pid=29414 uid=0 auid=0 ses=841 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391107201.466:88005): pid=30155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391107201.476:88006): pid=30155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391107201.476:88007): login pid=30155 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=842 >type=USER_START msg=audit(1391107201.476:88008): pid=30155 uid=0 auid=0 ses=842 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391107201.476:88009): pid=30155 uid=0 auid=0 ses=842 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391107201.476:88010): pid=30155 uid=0 auid=0 ses=842 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391107201.486:88011): pid=30155 uid=0 auid=0 ses=842 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391108101.486:88012): pid=30613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391108101.486:88013): pid=30613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391108101.496:88014): login pid=30613 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=843 >type=USER_START msg=audit(1391108101.496:88015): pid=30613 uid=0 auid=0 ses=843 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391108101.496:88016): pid=30613 uid=0 auid=0 ses=843 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391108101.496:88017): pid=30613 uid=0 auid=0 ses=843 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391108101.506:88018): pid=30613 uid=0 auid=0 ses=843 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391108461.507:88019): pid=30800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391108461.507:88020): pid=30800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391108461.507:88021): login pid=30800 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=844 >type=USER_START msg=audit(1391108461.517:88022): pid=30800 uid=0 auid=0 ses=844 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391108461.517:88023): pid=30800 uid=0 auid=0 ses=844 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391108461.527:88024): avc: denied { read } for pid=30816 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391108461.527:88024): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd6792870 a2=84800 a3=0 items=0 ppid=30814 pid=30816 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=844 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391108461.537:88025): pid=30800 uid=0 auid=0 ses=844 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391108461.547:88026): pid=30800 uid=0 auid=0 ses=844 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391109001.547:88027): pid=31104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391109001.547:88028): pid=31104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391109001.547:88029): login pid=31104 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=845 >type=USER_START msg=audit(1391109001.557:88030): pid=31104 uid=0 auid=0 ses=845 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391109001.557:88031): pid=31104 uid=0 auid=0 ses=845 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391109001.567:88032): pid=31104 uid=0 auid=0 ses=845 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391109001.567:88033): pid=31104 uid=0 auid=0 ses=845 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1391109284.337:88034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391109284.337:88035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391109901.577:88036): pid=31565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391109901.577:88037): pid=31565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391109901.577:88038): login pid=31565 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=846 >type=USER_START msg=audit(1391109901.587:88039): pid=31565 uid=0 auid=0 ses=846 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391109901.587:88040): pid=31565 uid=0 auid=0 ses=846 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391109901.597:88041): pid=31565 uid=0 auid=0 ses=846 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391109901.607:88042): pid=31565 uid=0 auid=0 ses=846 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391110801.608:88043): pid=32026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391110801.608:88044): pid=32026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391110801.608:88045): login pid=32026 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=847 >type=USER_START msg=audit(1391110801.618:88046): pid=32026 uid=0 auid=0 ses=847 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391110801.618:88047): pid=32026 uid=0 auid=0 ses=847 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391110801.628:88048): pid=32026 uid=0 auid=0 ses=847 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391110801.628:88049): pid=32026 uid=0 auid=0 ses=847 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391111701.638:88050): pid=32486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391111701.638:88051): pid=32486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391111701.638:88052): login pid=32486 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=848 >type=USER_START msg=audit(1391111701.648:88053): pid=32486 uid=0 auid=0 ses=848 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391111701.648:88054): pid=32486 uid=0 auid=0 ses=848 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391111701.648:88055): pid=32486 uid=0 auid=0 ses=848 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391111701.658:88056): pid=32486 uid=0 auid=0 ses=848 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391112061.659:88057): pid=32673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391112061.659:88058): pid=32673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391112061.659:88059): login pid=32673 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=849 >type=USER_START msg=audit(1391112061.669:88060): pid=32673 uid=0 auid=0 ses=849 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391112061.669:88061): pid=32673 uid=0 auid=0 ses=849 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391112061.679:88062): avc: denied { read } for pid=32689 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391112061.679:88062): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe29d14f0 a2=84800 a3=0 items=0 ppid=32687 pid=32689 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=849 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391112061.689:88063): pid=32673 uid=0 auid=0 ses=849 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391112061.699:88064): pid=32673 uid=0 auid=0 ses=849 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391112601.709:88065): pid=32976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391112601.709:88066): pid=32976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391112601.709:88067): login pid=32976 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=850 >type=USER_START msg=audit(1391112601.709:88068): pid=32976 uid=0 auid=0 ses=850 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391112601.709:88069): pid=32976 uid=0 auid=0 ses=850 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391112601.719:88070): pid=32976 uid=0 auid=0 ses=850 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391112601.719:88071): pid=32976 uid=0 auid=0 ses=850 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391113501.730:88072): pid=33435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391113501.730:88073): pid=33435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391113501.730:88074): login pid=33435 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=851 >type=USER_START msg=audit(1391113501.730:88075): pid=33435 uid=0 auid=0 ses=851 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391113501.730:88076): pid=33435 uid=0 auid=0 ses=851 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391113501.740:88077): pid=33435 uid=0 auid=0 ses=851 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391113501.740:88078): pid=33435 uid=0 auid=0 ses=851 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391114401.750:88079): pid=33896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391114401.750:88080): pid=33896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391114401.750:88081): login pid=33896 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=852 >type=USER_START msg=audit(1391114401.750:88082): pid=33896 uid=0 auid=0 ses=852 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391114401.750:88083): pid=33896 uid=0 auid=0 ses=852 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391114401.760:88084): pid=33896 uid=0 auid=0 ses=852 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391114401.760:88085): pid=33896 uid=0 auid=0 ses=852 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391115301.771:88086): pid=34354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391115301.771:88087): pid=34354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391115301.771:88088): login pid=34354 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=853 >type=USER_START msg=audit(1391115301.771:88089): pid=34354 uid=0 auid=0 ses=853 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391115301.771:88090): pid=34354 uid=0 auid=0 ses=853 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391115301.781:88091): pid=34354 uid=0 auid=0 ses=853 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391115301.781:88092): pid=34354 uid=0 auid=0 ses=853 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391115661.791:88093): pid=34542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391115661.791:88094): pid=34542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391115661.791:88095): login pid=34542 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=854 >type=USER_START msg=audit(1391115661.791:88096): pid=34542 uid=0 auid=0 ses=854 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391115661.791:88097): pid=34542 uid=0 auid=0 ses=854 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391115661.811:88098): avc: denied { read } for pid=34558 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391115661.811:88098): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd05e47b0 a2=84800 a3=0 items=0 ppid=34556 pid=34558 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=854 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391115661.821:88099): pid=34542 uid=0 auid=0 ses=854 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391115661.821:88100): pid=34542 uid=0 auid=0 ses=854 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391116201.831:88101): pid=34843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391116201.831:88102): pid=34843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391116201.831:88103): login pid=34843 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=855 >type=USER_START msg=audit(1391116201.831:88104): pid=34843 uid=0 auid=0 ses=855 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391116201.831:88105): pid=34843 uid=0 auid=0 ses=855 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391116201.841:88106): pid=34843 uid=0 auid=0 ses=855 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391116201.841:88107): pid=34843 uid=0 auid=0 ses=855 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391117101.852:88108): pid=35303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391117101.852:88109): pid=35303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391117101.852:88110): login pid=35303 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=856 >type=USER_START msg=audit(1391117101.852:88111): pid=35303 uid=0 auid=0 ses=856 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391117101.852:88112): pid=35303 uid=0 auid=0 ses=856 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391117101.862:88113): pid=35303 uid=0 auid=0 ses=856 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391117101.862:88114): pid=35303 uid=0 auid=0 ses=856 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391118001.872:88115): pid=35762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391118001.872:88116): pid=35762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391118001.872:88117): login pid=35762 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=857 >type=USER_START msg=audit(1391118001.872:88118): pid=35762 uid=0 auid=0 ses=857 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391118001.872:88119): pid=35762 uid=0 auid=0 ses=857 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391118001.882:88120): pid=35762 uid=0 auid=0 ses=857 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391118001.882:88121): pid=35762 uid=0 auid=0 ses=857 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391118901.893:88122): pid=36222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391118901.893:88123): pid=36222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391118901.903:88124): login pid=36222 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=858 >type=USER_START msg=audit(1391118901.903:88125): pid=36222 uid=0 auid=0 ses=858 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391118901.903:88126): pid=36222 uid=0 auid=0 ses=858 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391118901.913:88127): pid=36222 uid=0 auid=0 ses=858 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391118901.913:88128): pid=36222 uid=0 auid=0 ses=858 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391119261.923:88129): pid=36408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391119261.923:88130): pid=36408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391119261.923:88131): login pid=36408 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=859 >type=USER_START msg=audit(1391119261.933:88132): pid=36408 uid=0 auid=0 ses=859 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391119261.933:88133): pid=36408 uid=0 auid=0 ses=859 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391119261.943:88134): avc: denied { read } for pid=36424 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391119261.943:88134): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe8244e00 a2=84800 a3=0 items=0 ppid=36422 pid=36424 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=859 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391119261.953:88135): pid=36408 uid=0 auid=0 ses=859 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391119261.963:88136): pid=36408 uid=0 auid=0 ses=859 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391119801.963:88137): pid=36713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391119801.963:88138): pid=36713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391119801.963:88139): login pid=36713 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=860 >type=USER_START msg=audit(1391119801.973:88140): pid=36713 uid=0 auid=0 ses=860 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391119801.973:88141): pid=36713 uid=0 auid=0 ses=860 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391119801.973:88142): pid=36713 uid=0 auid=0 ses=860 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391119801.983:88143): pid=36713 uid=0 auid=0 ses=860 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391120701.984:88144): pid=37172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391120701.994:88145): pid=37172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391120701.994:88146): login pid=37172 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=861 >type=USER_START msg=audit(1391120701.994:88147): pid=37172 uid=0 auid=0 ses=861 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391120701.994:88148): pid=37172 uid=0 auid=0 ses=861 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391120702.004:88149): pid=37172 uid=0 auid=0 ses=861 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391120702.004:88150): pid=37172 uid=0 auid=0 ses=861 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391121601.014:88151): pid=37630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391121601.014:88152): pid=37630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391121601.014:88153): login pid=37630 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=862 >type=USER_START msg=audit(1391121601.014:88154): pid=37630 uid=0 auid=0 ses=862 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391121601.014:88155): pid=37630 uid=0 auid=0 ses=862 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391121601.024:88156): pid=37630 uid=0 auid=0 ses=862 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391121601.024:88157): pid=37630 uid=0 auid=0 ses=862 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391122501.035:88158): pid=38089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391122501.035:88159): pid=38089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391122501.035:88160): login pid=38089 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=863 >type=USER_START msg=audit(1391122501.035:88161): pid=38089 uid=0 auid=0 ses=863 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391122501.035:88162): pid=38089 uid=0 auid=0 ses=863 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391122501.045:88163): pid=38089 uid=0 auid=0 ses=863 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391122501.045:88164): pid=38089 uid=0 auid=0 ses=863 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391122861.055:88165): pid=38277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391122861.055:88166): pid=38277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391122861.055:88167): login pid=38277 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=864 >type=USER_START msg=audit(1391122861.055:88168): pid=38277 uid=0 auid=0 ses=864 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391122861.055:88169): pid=38277 uid=0 auid=0 ses=864 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391122861.065:88170): avc: denied { read } for pid=38293 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391122861.065:88170): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffefba34e0 a2=84800 a3=0 items=0 ppid=38291 pid=38293 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=864 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391122861.085:88171): pid=38277 uid=0 auid=0 ses=864 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391122861.085:88172): pid=38277 uid=0 auid=0 ses=864 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391123401.095:88173): pid=38577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391123401.095:88174): pid=38577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391123401.095:88175): login pid=38577 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=865 >type=USER_START msg=audit(1391123401.095:88176): pid=38577 uid=0 auid=0 ses=865 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391123401.095:88177): pid=38577 uid=0 auid=0 ses=865 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391123401.105:88178): pid=38577 uid=0 auid=0 ses=865 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391123401.105:88179): pid=38577 uid=0 auid=0 ses=865 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391124301.116:88180): pid=39037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391124301.116:88181): pid=39037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391124301.116:88182): login pid=39037 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=866 >type=USER_START msg=audit(1391124301.116:88183): pid=39037 uid=0 auid=0 ses=866 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391124301.116:88184): pid=39037 uid=0 auid=0 ses=866 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391124301.126:88185): pid=39037 uid=0 auid=0 ses=866 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391124301.126:88186): pid=39037 uid=0 auid=0 ses=866 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391125201.136:88187): pid=39499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391125201.136:88188): pid=39499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391125201.136:88189): login pid=39499 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=867 >type=USER_START msg=audit(1391125201.136:88190): pid=39499 uid=0 auid=0 ses=867 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391125201.136:88191): pid=39499 uid=0 auid=0 ses=867 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391125201.146:88192): pid=39499 uid=0 auid=0 ses=867 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391125201.146:88193): pid=39499 uid=0 auid=0 ses=867 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391126101.157:88194): pid=39954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391126101.157:88195): pid=39954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391126101.157:88196): login pid=39954 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=868 >type=USER_START msg=audit(1391126101.157:88197): pid=39954 uid=0 auid=0 ses=868 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391126101.157:88198): pid=39954 uid=0 auid=0 ses=868 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391126101.167:88199): pid=39954 uid=0 auid=0 ses=868 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391126101.167:88200): pid=39954 uid=0 auid=0 ses=868 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391126461.177:88201): pid=40143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391126461.177:88202): pid=40143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391126461.177:88203): login pid=40143 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=869 >type=USER_START msg=audit(1391126461.177:88204): pid=40143 uid=0 auid=0 ses=869 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391126461.177:88205): pid=40143 uid=0 auid=0 ses=869 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391126461.197:88206): avc: denied { read } for pid=40159 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391126461.197:88206): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd0a93500 a2=84800 a3=0 items=0 ppid=40157 pid=40159 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=869 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391126461.207:88207): pid=40143 uid=0 auid=0 ses=869 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391126461.207:88208): pid=40143 uid=0 auid=0 ses=869 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391127001.228:88209): pid=40445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391127001.228:88210): pid=40445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391127001.228:88211): login pid=40445 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=870 >type=USER_START msg=audit(1391127001.228:88212): pid=40445 uid=0 auid=0 ses=870 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391127001.228:88213): pid=40445 uid=0 auid=0 ses=870 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391127001.238:88214): pid=40445 uid=0 auid=0 ses=870 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391127001.248:88215): pid=40445 uid=0 auid=0 ses=870 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391127901.248:88216): pid=40904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391127901.248:88217): pid=40904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391127901.248:88218): login pid=40904 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=871 >type=USER_START msg=audit(1391127901.258:88219): pid=40904 uid=0 auid=0 ses=871 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391127901.258:88220): pid=40904 uid=0 auid=0 ses=871 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391127901.268:88221): pid=40904 uid=0 auid=0 ses=871 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391127901.268:88222): pid=40904 uid=0 auid=0 ses=871 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391128801.279:88223): pid=41364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391128801.279:88224): pid=41364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391128801.279:88225): login pid=41364 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=872 >type=USER_START msg=audit(1391128801.279:88226): pid=41364 uid=0 auid=0 ses=872 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391128801.279:88227): pid=41364 uid=0 auid=0 ses=872 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391128801.289:88228): pid=41364 uid=0 auid=0 ses=872 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391128801.289:88229): pid=41364 uid=0 auid=0 ses=872 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391129701.299:88230): pid=41822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391129701.299:88231): pid=41822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391129701.299:88232): login pid=41822 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=873 >type=USER_START msg=audit(1391129701.299:88233): pid=41822 uid=0 auid=0 ses=873 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391129701.299:88234): pid=41822 uid=0 auid=0 ses=873 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391129701.309:88235): pid=41822 uid=0 auid=0 ses=873 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391129701.309:88236): pid=41822 uid=0 auid=0 ses=873 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391130061.319:88237): pid=42010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391130061.319:88238): pid=42010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391130061.319:88239): login pid=42010 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=874 >type=USER_START msg=audit(1391130061.319:88240): pid=42010 uid=0 auid=0 ses=874 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391130061.319:88241): pid=42010 uid=0 auid=0 ses=874 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391130061.339:88242): avc: denied { read } for pid=42026 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391130061.339:88242): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe65fbc00 a2=84800 a3=0 items=0 ppid=42024 pid=42026 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=874 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391130061.349:88243): pid=42010 uid=0 auid=0 ses=874 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391130061.349:88244): pid=42010 uid=0 auid=0 ses=874 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391130601.360:88245): pid=42312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391130601.360:88246): pid=42312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391130601.360:88247): login pid=42312 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=875 >type=USER_START msg=audit(1391130601.360:88248): pid=42312 uid=0 auid=0 ses=875 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391130601.360:88249): pid=42312 uid=0 auid=0 ses=875 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391130601.370:88250): pid=42312 uid=0 auid=0 ses=875 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391130601.370:88251): pid=42312 uid=0 auid=0 ses=875 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391131501.380:88252): pid=42773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391131501.380:88253): pid=42773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391131501.380:88254): login pid=42773 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=876 >type=USER_START msg=audit(1391131501.380:88255): pid=42773 uid=0 auid=0 ses=876 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391131501.380:88256): pid=42773 uid=0 auid=0 ses=876 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391131501.390:88257): pid=42773 uid=0 auid=0 ses=876 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391131501.390:88258): pid=42773 uid=0 auid=0 ses=876 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391132401.401:88259): pid=43232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391132401.401:88260): pid=43232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391132401.401:88261): login pid=43232 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=877 >type=USER_START msg=audit(1391132401.401:88262): pid=43232 uid=0 auid=0 ses=877 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391132401.401:88263): pid=43232 uid=0 auid=0 ses=877 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391132401.411:88264): pid=43232 uid=0 auid=0 ses=877 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391132401.411:88265): pid=43232 uid=0 auid=0 ses=877 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391133301.421:88266): pid=43689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391133301.421:88267): pid=43689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391133301.421:88268): login pid=43689 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=878 >type=USER_START msg=audit(1391133301.421:88269): pid=43689 uid=0 auid=0 ses=878 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391133301.421:88270): pid=43689 uid=0 auid=0 ses=878 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391133301.431:88271): pid=43689 uid=0 auid=0 ses=878 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391133301.431:88272): pid=43689 uid=0 auid=0 ses=878 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391133661.442:88273): pid=43878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391133661.442:88274): pid=43878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391133661.442:88275): login pid=43878 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=879 >type=USER_START msg=audit(1391133661.442:88276): pid=43878 uid=0 auid=0 ses=879 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391133661.442:88277): pid=43878 uid=0 auid=0 ses=879 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391133661.462:88278): avc: denied { read } for pid=43897 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391133661.462:88278): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffeca7a1c0 a2=84800 a3=0 items=0 ppid=43895 pid=43897 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=879 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391133661.482:88279): pid=43878 uid=0 auid=0 ses=879 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391133661.482:88280): pid=43878 uid=0 auid=0 ses=879 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391134201.492:88281): pid=44184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391134201.492:88282): pid=44184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391134201.492:88283): login pid=44184 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=880 >type=USER_START msg=audit(1391134201.492:88284): pid=44184 uid=0 auid=0 ses=880 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391134201.492:88285): pid=44184 uid=0 auid=0 ses=880 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391134201.502:88286): pid=44184 uid=0 auid=0 ses=880 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391134201.502:88287): pid=44184 uid=0 auid=0 ses=880 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391135101.512:88288): pid=44643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391135101.512:88289): pid=44643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391135101.512:88290): login pid=44643 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=881 >type=USER_START msg=audit(1391135101.522:88291): pid=44643 uid=0 auid=0 ses=881 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391135101.522:88292): pid=44643 uid=0 auid=0 ses=881 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391135101.532:88293): pid=44643 uid=0 auid=0 ses=881 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391135101.532:88294): pid=44643 uid=0 auid=0 ses=881 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391136001.553:88295): pid=45104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391136001.553:88296): pid=45104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391136001.553:88297): login pid=45104 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=882 >type=USER_START msg=audit(1391136001.553:88298): pid=45104 uid=0 auid=0 ses=882 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391136001.553:88299): pid=45104 uid=0 auid=0 ses=882 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391136001.573:88300): pid=45104 uid=0 auid=0 ses=882 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391136001.573:88301): pid=45104 uid=0 auid=0 ses=882 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391136901.583:88302): pid=45563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391136901.583:88303): pid=45563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391136901.583:88304): login pid=45563 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=883 >type=USER_START msg=audit(1391136901.583:88305): pid=45563 uid=0 auid=0 ses=883 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391136901.583:88306): pid=45563 uid=0 auid=0 ses=883 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391136901.593:88307): pid=45563 uid=0 auid=0 ses=883 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391136901.593:88308): pid=45563 uid=0 auid=0 ses=883 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391137261.604:88309): pid=45750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391137261.604:88310): pid=45750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391137261.604:88311): login pid=45750 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=884 >type=USER_START msg=audit(1391137261.604:88312): pid=45750 uid=0 auid=0 ses=884 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391137261.604:88313): pid=45750 uid=0 auid=0 ses=884 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391137261.624:88314): avc: denied { read } for pid=45769 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391137261.624:88314): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff6b3f0f0 a2=84800 a3=0 items=0 ppid=45767 pid=45769 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=884 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391137261.644:88315): pid=45750 uid=0 auid=0 ses=884 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391137261.644:88316): pid=45750 uid=0 auid=0 ses=884 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391137801.654:88317): pid=46055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391137801.654:88318): pid=46055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391137801.654:88319): login pid=46055 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=885 >type=USER_START msg=audit(1391137801.654:88320): pid=46055 uid=0 auid=0 ses=885 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391137801.654:88321): pid=46055 uid=0 auid=0 ses=885 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391137801.664:88322): pid=46055 uid=0 auid=0 ses=885 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391137801.664:88323): pid=46055 uid=0 auid=0 ses=885 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391138701.675:88324): pid=46515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391138701.675:88325): pid=46515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391138701.675:88326): login pid=46515 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=886 >type=USER_START msg=audit(1391138701.675:88327): pid=46515 uid=0 auid=0 ses=886 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391138701.675:88328): pid=46515 uid=0 auid=0 ses=886 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391138701.685:88329): pid=46515 uid=0 auid=0 ses=886 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391138701.685:88330): pid=46515 uid=0 auid=0 ses=886 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391139601.695:88331): pid=46974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391139601.695:88332): pid=46974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391139601.695:88333): login pid=46974 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=887 >type=USER_START msg=audit(1391139601.695:88334): pid=46974 uid=0 auid=0 ses=887 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391139601.695:88335): pid=46974 uid=0 auid=0 ses=887 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391139601.705:88336): pid=46974 uid=0 auid=0 ses=887 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391139601.705:88337): pid=46974 uid=0 auid=0 ses=887 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391140501.716:88338): pid=47432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391140501.716:88339): pid=47432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391140501.716:88340): login pid=47432 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=888 >type=USER_START msg=audit(1391140501.716:88341): pid=47432 uid=0 auid=0 ses=888 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391140501.716:88342): pid=47432 uid=0 auid=0 ses=888 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391140501.726:88343): pid=47432 uid=0 auid=0 ses=888 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391140501.726:88344): pid=47432 uid=0 auid=0 ses=888 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391140861.736:88345): pid=47622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391140861.736:88346): pid=47622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391140861.736:88347): login pid=47622 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=889 >type=USER_START msg=audit(1391140861.736:88348): pid=47622 uid=0 auid=0 ses=889 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391140861.736:88349): pid=47622 uid=0 auid=0 ses=889 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391140861.756:88350): avc: denied { read } for pid=47641 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391140861.756:88350): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffda929920 a2=84800 a3=0 items=0 ppid=47639 pid=47641 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=889 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391140861.766:88351): pid=47622 uid=0 auid=0 ses=889 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391140861.776:88352): pid=47622 uid=0 auid=0 ses=889 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391141401.776:88353): pid=47927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391141401.776:88354): pid=47927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391141401.776:88355): login pid=47927 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=890 >type=USER_START msg=audit(1391141401.786:88356): pid=47927 uid=0 auid=0 ses=890 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391141401.786:88357): pid=47927 uid=0 auid=0 ses=890 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391141401.786:88358): pid=47927 uid=0 auid=0 ses=890 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391141401.796:88359): pid=47927 uid=0 auid=0 ses=890 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391142301.797:88360): pid=48386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391142301.807:88361): pid=48386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391142301.807:88362): login pid=48386 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=891 >type=USER_START msg=audit(1391142301.807:88363): pid=48386 uid=0 auid=0 ses=891 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391142301.807:88364): pid=48386 uid=0 auid=0 ses=891 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391142301.807:88365): pid=48386 uid=0 auid=0 ses=891 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391142301.817:88366): pid=48386 uid=0 auid=0 ses=891 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391143201.827:88367): pid=48846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391143201.827:88368): pid=48846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391143201.827:88369): login pid=48846 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=892 >type=USER_START msg=audit(1391143201.837:88370): pid=48846 uid=0 auid=0 ses=892 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391143201.837:88371): pid=48846 uid=0 auid=0 ses=892 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391143201.847:88372): pid=48846 uid=0 auid=0 ses=892 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391143201.847:88373): pid=48846 uid=0 auid=0 ses=892 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391144101.858:88374): pid=49306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391144101.858:88375): pid=49306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391144101.858:88376): login pid=49306 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=893 >type=USER_START msg=audit(1391144101.858:88377): pid=49306 uid=0 auid=0 ses=893 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391144101.858:88378): pid=49306 uid=0 auid=0 ses=893 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391144101.868:88379): pid=49306 uid=0 auid=0 ses=893 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391144101.878:88380): pid=49306 uid=0 auid=0 ses=893 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391144461.888:88381): pid=49493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391144461.888:88382): pid=49493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391144461.888:88383): login pid=49493 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=894 >type=USER_START msg=audit(1391144461.888:88384): pid=49493 uid=0 auid=0 ses=894 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391144461.888:88385): pid=49493 uid=0 auid=0 ses=894 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391144461.908:88386): avc: denied { read } for pid=49512 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391144461.908:88386): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffedb830d0 a2=84800 a3=0 items=0 ppid=49510 pid=49512 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=894 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391144461.918:88387): pid=49493 uid=0 auid=0 ses=894 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391144461.918:88388): pid=49493 uid=0 auid=0 ses=894 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391144881.918:88389): avc: denied { read } for pid=49740 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391144881.918:88389): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe2e2a0c0 a2=84800 a3=0 items=0 ppid=49738 pid=49740 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=894 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1391145001.928:88390): pid=49840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391145001.928:88391): pid=49840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391145001.928:88392): login pid=49840 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=895 >type=USER_START msg=audit(1391145001.938:88393): pid=49840 uid=0 auid=0 ses=895 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391145001.938:88394): pid=49840 uid=0 auid=0 ses=895 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391145001.948:88395): pid=49840 uid=0 auid=0 ses=895 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391145001.948:88396): pid=49840 uid=0 auid=0 ses=895 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391145901.959:88397): pid=50300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391145901.959:88398): pid=50300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391145901.959:88399): login pid=50300 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=896 >type=USER_START msg=audit(1391145901.959:88400): pid=50300 uid=0 auid=0 ses=896 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391145901.959:88401): pid=50300 uid=0 auid=0 ses=896 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391145901.969:88402): pid=50300 uid=0 auid=0 ses=896 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391145901.969:88403): pid=50300 uid=0 auid=0 ses=896 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391146801.979:88404): pid=50762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391146801.979:88405): pid=50762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391146801.979:88406): login pid=50762 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=897 >type=USER_START msg=audit(1391146801.979:88407): pid=50762 uid=0 auid=0 ses=897 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391146801.979:88408): pid=50762 uid=0 auid=0 ses=897 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391146801.989:88409): pid=50762 uid=0 auid=0 ses=897 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391146801.989:88410): pid=50762 uid=0 auid=0 ses=897 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391147702.000:88411): pid=51220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391147702.000:88412): pid=51220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391147702.000:88413): login pid=51220 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=898 >type=USER_START msg=audit(1391147702.000:88414): pid=51220 uid=0 auid=0 ses=898 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391147702.000:88415): pid=51220 uid=0 auid=0 ses=898 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391147702.010:88416): pid=51220 uid=0 auid=0 ses=898 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391147702.010:88417): pid=51220 uid=0 auid=0 ses=898 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391148061.020:88418): pid=51407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391148061.020:88419): pid=51407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391148061.020:88420): login pid=51407 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=899 >type=USER_START msg=audit(1391148061.020:88421): pid=51407 uid=0 auid=0 ses=899 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391148061.020:88422): pid=51407 uid=0 auid=0 ses=899 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391148061.040:88423): avc: denied { read } for pid=51423 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391148061.040:88423): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe97f3c10 a2=84800 a3=0 items=0 ppid=51421 pid=51423 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=899 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391148061.050:88424): pid=51407 uid=0 auid=0 ses=899 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391148061.060:88425): pid=51407 uid=0 auid=0 ses=899 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391148601.070:88426): pid=51708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391148601.070:88427): pid=51708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391148601.070:88428): login pid=51708 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=900 >type=USER_START msg=audit(1391148601.070:88429): pid=51708 uid=0 auid=0 ses=900 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391148601.070:88430): pid=51708 uid=0 auid=0 ses=900 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391148601.080:88431): pid=51708 uid=0 auid=0 ses=900 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391148601.080:88432): pid=51708 uid=0 auid=0 ses=900 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391149501.091:88433): pid=52167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391149501.091:88434): pid=52167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391149501.091:88435): login pid=52167 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=901 >type=USER_START msg=audit(1391149501.091:88436): pid=52167 uid=0 auid=0 ses=901 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391149501.091:88437): pid=52167 uid=0 auid=0 ses=901 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391149501.101:88438): pid=52167 uid=0 auid=0 ses=901 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391149501.101:88439): pid=52167 uid=0 auid=0 ses=901 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391150401.111:88440): pid=52628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391150401.111:88441): pid=52628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391150401.111:88442): login pid=52628 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=902 >type=USER_START msg=audit(1391150401.111:88443): pid=52628 uid=0 auid=0 ses=902 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391150401.111:88444): pid=52628 uid=0 auid=0 ses=902 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391150401.121:88445): pid=52628 uid=0 auid=0 ses=902 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391150401.121:88446): pid=52628 uid=0 auid=0 ses=902 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391151301.132:88447): pid=53084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391151301.132:88448): pid=53084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391151301.132:88449): login pid=53084 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=903 >type=USER_START msg=audit(1391151301.132:88450): pid=53084 uid=0 auid=0 ses=903 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391151301.132:88451): pid=53084 uid=0 auid=0 ses=903 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391151301.142:88452): pid=53084 uid=0 auid=0 ses=903 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391151301.142:88453): pid=53084 uid=0 auid=0 ses=903 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391151661.152:88454): pid=53274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391151661.152:88455): pid=53274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391151661.152:88456): login pid=53274 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=904 >type=USER_START msg=audit(1391151661.152:88457): pid=53274 uid=0 auid=0 ses=904 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391151661.152:88458): pid=53274 uid=0 auid=0 ses=904 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391151661.172:88459): avc: denied { read } for pid=53290 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391151661.172:88459): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe6256570 a2=84800 a3=0 items=0 ppid=53288 pid=53290 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=904 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391151661.182:88460): pid=53274 uid=0 auid=0 ses=904 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391151661.182:88461): pid=53274 uid=0 auid=0 ses=904 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391152201.193:88462): pid=53575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391152201.193:88463): pid=53575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391152201.193:88464): login pid=53575 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=905 >type=USER_START msg=audit(1391152201.203:88465): pid=53575 uid=0 auid=0 ses=905 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391152201.203:88466): pid=53575 uid=0 auid=0 ses=905 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391152201.213:88467): pid=53575 uid=0 auid=0 ses=905 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391152201.213:88468): pid=53575 uid=0 auid=0 ses=905 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391153101.223:88469): pid=54035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391153101.223:88470): pid=54035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391153101.223:88471): login pid=54035 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=906 >type=USER_START msg=audit(1391153101.233:88472): pid=54035 uid=0 auid=0 ses=906 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391153101.233:88473): pid=54035 uid=0 auid=0 ses=906 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391153101.233:88474): pid=54035 uid=0 auid=0 ses=906 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391153101.243:88475): pid=54035 uid=0 auid=0 ses=906 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391154001.244:88476): pid=54495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391154001.244:88477): pid=54495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391154001.244:88478): login pid=54495 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=907 >type=USER_START msg=audit(1391154001.254:88479): pid=54495 uid=0 auid=0 ses=907 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391154001.254:88480): pid=54495 uid=0 auid=0 ses=907 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391154001.264:88481): pid=54495 uid=0 auid=0 ses=907 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391154001.264:88482): pid=54495 uid=0 auid=0 ses=907 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391154901.274:88483): pid=54954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391154901.274:88484): pid=54954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391154901.274:88485): login pid=54954 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=908 >type=USER_START msg=audit(1391154901.274:88486): pid=54954 uid=0 auid=0 ses=908 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391154901.274:88487): pid=54954 uid=0 auid=0 ses=908 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391154901.284:88488): pid=54954 uid=0 auid=0 ses=908 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391154901.284:88489): pid=54954 uid=0 auid=0 ses=908 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391155261.294:88490): pid=55140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391155261.294:88491): pid=55140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391155261.294:88492): login pid=55140 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=909 >type=USER_START msg=audit(1391155261.294:88493): pid=55140 uid=0 auid=0 ses=909 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391155261.294:88494): pid=55140 uid=0 auid=0 ses=909 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391155261.314:88495): avc: denied { read } for pid=55156 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391155261.314:88495): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd5526140 a2=84800 a3=0 items=0 ppid=55154 pid=55156 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=909 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391155261.324:88496): pid=55140 uid=0 auid=0 ses=909 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391155261.324:88497): pid=55140 uid=0 auid=0 ses=909 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391155801.335:88498): pid=55442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391155801.335:88499): pid=55442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391155801.335:88500): login pid=55442 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=910 >type=USER_START msg=audit(1391155801.335:88501): pid=55442 uid=0 auid=0 ses=910 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391155801.335:88502): pid=55442 uid=0 auid=0 ses=910 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391155801.345:88503): pid=55442 uid=0 auid=0 ses=910 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391155801.345:88504): pid=55442 uid=0 auid=0 ses=910 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391156701.355:88505): pid=55902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391156701.355:88506): pid=55902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391156701.355:88507): login pid=55902 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=911 >type=USER_START msg=audit(1391156701.355:88508): pid=55902 uid=0 auid=0 ses=911 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391156701.355:88509): pid=55902 uid=0 auid=0 ses=911 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391156701.365:88510): pid=55902 uid=0 auid=0 ses=911 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391156701.365:88511): pid=55902 uid=0 auid=0 ses=911 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391157601.376:88512): pid=56362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391157601.376:88513): pid=56362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391157601.376:88514): login pid=56362 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=912 >type=USER_START msg=audit(1391157601.376:88515): pid=56362 uid=0 auid=0 ses=912 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391157601.376:88516): pid=56362 uid=0 auid=0 ses=912 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391157601.386:88517): pid=56362 uid=0 auid=0 ses=912 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391157601.386:88518): pid=56362 uid=0 auid=0 ses=912 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391158501.396:88519): pid=56824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391158501.396:88520): pid=56824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391158501.396:88521): login pid=56824 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=913 >type=USER_START msg=audit(1391158501.406:88522): pid=56824 uid=0 auid=0 ses=913 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391158501.406:88523): pid=56824 uid=0 auid=0 ses=913 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391158501.406:88524): pid=56824 uid=0 auid=0 ses=913 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391158501.406:88525): pid=56824 uid=0 auid=0 ses=913 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391158861.417:88526): pid=57008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391158861.417:88527): pid=57008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391158861.417:88528): login pid=57008 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=914 >type=USER_START msg=audit(1391158861.427:88529): pid=57008 uid=0 auid=0 ses=914 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391158861.427:88530): pid=57008 uid=0 auid=0 ses=914 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391158861.437:88531): avc: denied { read } for pid=57024 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391158861.437:88531): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffec63d580 a2=84800 a3=0 items=0 ppid=57022 pid=57024 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=914 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391158861.447:88532): pid=57008 uid=0 auid=0 ses=914 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391158861.457:88533): pid=57008 uid=0 auid=0 ses=914 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391159401.457:88534): pid=57310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391159401.457:88535): pid=57310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391159401.457:88536): login pid=57310 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=915 >type=USER_START msg=audit(1391159401.467:88537): pid=57310 uid=0 auid=0 ses=915 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391159401.467:88538): pid=57310 uid=0 auid=0 ses=915 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391159401.467:88539): pid=57310 uid=0 auid=0 ses=915 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391159401.467:88540): pid=57310 uid=0 auid=0 ses=915 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391160301.487:88541): pid=57770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391160301.487:88542): pid=57770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391160301.487:88543): login pid=57770 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=916 >type=USER_START msg=audit(1391160301.487:88544): pid=57770 uid=0 auid=0 ses=916 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391160301.487:88545): pid=57770 uid=0 auid=0 ses=916 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391160301.507:88546): pid=57770 uid=0 auid=0 ses=916 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391160301.507:88547): pid=57770 uid=0 auid=0 ses=916 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391161201.508:88548): pid=58230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391161201.508:88549): pid=58230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391161201.508:88550): login pid=58230 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=917 >type=USER_START msg=audit(1391161201.518:88551): pid=58230 uid=0 auid=0 ses=917 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391161201.518:88552): pid=58230 uid=0 auid=0 ses=917 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391161201.528:88553): pid=58230 uid=0 auid=0 ses=917 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391161201.528:88554): pid=58230 uid=0 auid=0 ses=917 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391162101.538:88555): pid=58688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391162101.538:88556): pid=58688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391162101.538:88557): login pid=58688 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=918 >type=USER_START msg=audit(1391162101.548:88558): pid=58688 uid=0 auid=0 ses=918 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391162101.548:88559): pid=58688 uid=0 auid=0 ses=918 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391162101.548:88560): pid=58688 uid=0 auid=0 ses=918 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391162101.548:88561): pid=58688 uid=0 auid=0 ses=918 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391162461.559:88562): pid=58878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391162461.559:88563): pid=58878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391162461.559:88564): login pid=58878 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=919 >type=USER_START msg=audit(1391162461.559:88565): pid=58878 uid=0 auid=0 ses=919 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391162461.559:88566): pid=58878 uid=0 auid=0 ses=919 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391162461.579:88567): avc: denied { read } for pid=58894 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391162461.579:88567): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe61f4060 a2=84800 a3=0 items=0 ppid=58892 pid=58894 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=919 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391162461.589:88568): pid=58878 uid=0 auid=0 ses=919 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391162461.589:88569): pid=58878 uid=0 auid=0 ses=919 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391163001.599:88570): pid=59177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391163001.599:88571): pid=59177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391163001.599:88572): login pid=59177 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=920 >type=USER_START msg=audit(1391163001.599:88573): pid=59177 uid=0 auid=0 ses=920 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391163001.609:88574): pid=59177 uid=0 auid=0 ses=920 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391163001.609:88575): pid=59177 uid=0 auid=0 ses=920 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391163001.609:88576): pid=59177 uid=0 auid=0 ses=920 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1391163262.429:88577): pid=59315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=59315 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391163262.429:88578): pid=59315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=59315 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1391163262.429:88579): pid=59314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 spid=59315 suid=74 rport=59037 laddr=10.10.27.64 lport= exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1391163262.429:88580): pid=59314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 spid=59315 suid=74 rport=59037 laddr=10.10.27.64 lport= exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=USER_AUTH msg=audit(1391163262.489:88581): pid=59314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1391163262.499:88582): pid=59314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=USER_ACCT msg=audit(1391163262.509:88583): pid=59314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1391163262.509:88584): pid=59314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=59315 suid=74 rport=59037 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=USER_AUTH msg=audit(1391163262.509:88585): pid=59314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1391163262.509:88586): pid=59314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=LOGIN msg=audit(1391163262.509:88587): login pid=59314 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=921 >type=USER_ROLE_CHANGE msg=audit(1391163262.549:88588): pid=59314 uid=0 auid=0 ses=921 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=USER_START msg=audit(1391163262.549:88589): pid=59314 uid=0 auid=0 ses=921 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1391163262.559:88590): pid=59314 uid=0 auid=0 ses=921 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=USER_START msg=audit(1391163262.559:88591): pid=59314 uid=0 auid=0 ses=921 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1391163262.559:88592): pid=59318 uid=0 auid=0 ses=921 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=59318 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391163262.559:88593): pid=59318 uid=0 auid=0 ses=921 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=59318 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRED_REFR msg=audit(1391163262.559:88594): pid=59318 uid=0 auid=0 ses=921 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=ANOM_PROMISCUOUS msg=audit(1391163407.799:88595): dev=vdsmtest-W1y2m prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391163407.799:88595): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3ffffec1de68 a3=0 items=0 ppid=13647 pid=14057 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391163407.809:88596): dev=vdsmtest-Kp9Gy prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391163407.809:88596): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3ffff711c508 a3=0 items=0 ppid=13647 pid=14058 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391163407.809:88597): dev=vdsmtest-J5Dbi prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391163407.809:88597): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffc892ba28 a3=0 items=0 ppid=13647 pid=14059 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391163407.849:88598): dev=src-XispT prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391163407.849:88598): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3ffff9c26990 a3=1143 items=0 ppid=13646 pid=13647 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391163407.879:88599): dev=src-XispT prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391163407.879:88599): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3ffff9c26990 a3=1043 items=0 ppid=13646 pid=13647 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391163407.989:88600): dev=vdsmtest-W1y2m prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391163408.039:88601): dev=vdsmtest-Kp9Gy prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391163408.119:88602): dev=vdsmtest-J5Dbi prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391163408.509:88603): dev=vdsmtest-W1y2m prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391163408.509:88603): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffcc912738 a3=0 items=0 ppid=13647 pid=14112 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391163408.519:88604): dev=vdsmtest-Kp9Gy prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391163408.519:88604): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3ffff0a11d98 a3=0 items=0 ppid=13647 pid=14113 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391163408.519:88605): dev=vdsmtest-J5Dbi prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391163408.519:88605): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffef0a6a28 a3=0 items=0 ppid=13647 pid=14114 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391163408.549:88606): dev=src-XispT prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391163408.549:88606): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3ffff9c26990 a3=1143 items=0 ppid=13646 pid=13647 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391163408.729:88607): dev=src-XispT prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391163408.729:88607): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3ffff9c26990 a3=1043 items=0 ppid=13646 pid=13647 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391163408.729:88608): dev=vdsmtest-W1y2m prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391163408.789:88609): dev=vdsmtest-Kp9Gy prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391163408.859:88610): dev=vdsmtest-J5Dbi prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391163410.049:88611): dev=vdsmtest-3hg1n prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391163410.049:88611): arch=80000015 syscall=54 success=yes exit=0 a0=4a a1=8914 a2=3ffff9c26b70 a3=1143 items=0 ppid=13646 pid=13647 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391163410.059:88612): dev=vdsmtest-3hg1n prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391163410.059:88612): arch=80000015 syscall=54 success=yes exit=0 a0=4a a1=8914 a2=3ffff9c26b70 a3=1043 items=0 ppid=13646 pid=13647 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1391163901.629:88613): pid=14486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391163901.629:88614): pid=14486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391163901.629:88615): login pid=14486 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=922 >type=USER_START msg=audit(1391163901.629:88616): pid=14486 uid=0 auid=0 ses=922 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391163901.629:88617): pid=14486 uid=0 auid=0 ses=922 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391163901.639:88618): pid=14486 uid=0 auid=0 ses=922 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391163901.639:88619): pid=14486 uid=0 auid=0 ses=922 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391164801.650:88620): pid=14948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391164801.650:88621): pid=14948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391164801.660:88622): login pid=14948 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=923 >type=USER_START msg=audit(1391164801.660:88623): pid=14948 uid=0 auid=0 ses=923 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391164801.660:88624): pid=14948 uid=0 auid=0 ses=923 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391164801.670:88625): pid=14948 uid=0 auid=0 ses=923 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391164801.670:88626): pid=14948 uid=0 auid=0 ses=923 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391165701.681:88627): pid=15407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391165701.681:88628): pid=15407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391165701.681:88629): login pid=15407 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=924 >type=USER_START msg=audit(1391165701.681:88630): pid=15407 uid=0 auid=0 ses=924 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391165701.681:88631): pid=15407 uid=0 auid=0 ses=924 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391165701.691:88632): pid=15407 uid=0 auid=0 ses=924 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391165701.691:88633): pid=15407 uid=0 auid=0 ses=924 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391166061.701:88634): pid=15597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391166061.701:88635): pid=15597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391166061.701:88636): login pid=15597 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=925 >type=USER_START msg=audit(1391166061.701:88637): pid=15597 uid=0 auid=0 ses=925 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391166061.701:88638): pid=15597 uid=0 auid=0 ses=925 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391166061.721:88639): avc: denied { read } for pid=15613 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391166061.721:88639): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc8399890 a2=84800 a3=0 items=0 ppid=15611 pid=15613 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=925 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391166061.731:88640): pid=15597 uid=0 auid=0 ses=925 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391166061.731:88641): pid=15597 uid=0 auid=0 ses=925 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391166601.741:88642): pid=15895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391166601.741:88643): pid=15895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391166601.741:88644): login pid=15895 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=926 >type=USER_START msg=audit(1391166601.751:88645): pid=15895 uid=0 auid=0 ses=926 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391166601.751:88646): pid=15895 uid=0 auid=0 ses=926 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391166601.751:88647): pid=15895 uid=0 auid=0 ses=926 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391166601.751:88648): pid=15895 uid=0 auid=0 ses=926 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391167501.762:88649): pid=16356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391167501.762:88650): pid=16356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391167501.762:88651): login pid=16356 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=927 >type=USER_START msg=audit(1391167501.772:88652): pid=16356 uid=0 auid=0 ses=927 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391167501.772:88653): pid=16356 uid=0 auid=0 ses=927 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391167501.772:88654): pid=16356 uid=0 auid=0 ses=927 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391167501.782:88655): pid=16356 uid=0 auid=0 ses=927 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=ANOM_PROMISCUOUS msg=audit(1391167632.222:88656): dev=vdsmtest-BvMtl prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167632.222:88656): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffdee8deb8 a3=0 items=0 ppid=33344 pid=33740 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167632.232:88657): dev=vdsmtest-3keW4 prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167632.232:88657): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffc37bd928 a3=0 items=0 ppid=33344 pid=33741 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167632.232:88658): dev=vdsmtest-5wAdR prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167632.232:88658): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffcfe4c808 a3=0 items=0 ppid=33344 pid=33742 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167632.262:88659): dev=src-yOkv8 prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167632.262:88659): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3fffdba31b10 a3=1143 items=0 ppid=33343 pid=33344 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167632.292:88660): dev=src-yOkv8 prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167632.292:88660): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3fffdba31b10 a3=1043 items=0 ppid=33343 pid=33344 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167632.402:88661): dev=vdsmtest-BvMtl prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391167632.472:88662): dev=vdsmtest-3keW4 prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391167632.532:88663): dev=vdsmtest-5wAdR prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391167632.932:88664): dev=vdsmtest-BvMtl prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167632.932:88664): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3ffff6f9e298 a3=0 items=0 ppid=33344 pid=33790 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167632.942:88665): dev=vdsmtest-3keW4 prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167632.942:88665): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffd560c028 a3=0 items=0 ppid=33344 pid=33791 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167632.942:88666): dev=vdsmtest-5wAdR prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167632.942:88666): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffdfae1178 a3=0 items=0 ppid=33344 pid=33792 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167632.972:88667): dev=src-yOkv8 prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167632.972:88667): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3fffdba31b10 a3=1143 items=0 ppid=33343 pid=33344 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167633.152:88668): dev=src-yOkv8 prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167633.152:88668): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3fffdba31b10 a3=1043 items=0 ppid=33343 pid=33344 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167633.152:88669): dev=vdsmtest-BvMtl prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391167633.222:88670): dev=vdsmtest-3keW4 prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391167633.282:88671): dev=vdsmtest-5wAdR prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391167634.402:88672): dev=vdsmtest-8mBZJ prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167634.402:88672): arch=80000015 syscall=54 success=yes exit=0 a0=4a a1=8914 a2=3fffdba31cf0 a3=1143 items=0 ppid=33343 pid=33344 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167634.412:88673): dev=vdsmtest-8mBZJ prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167634.412:88673): arch=80000015 syscall=54 success=yes exit=0 a0=4a a1=8914 a2=3fffdba31cf0 a3=1043 items=0 ppid=33343 pid=33344 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167827.542:88674): dev=vdsmtest-9sHJF prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167827.542:88674): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffe5c0aa98 a3=0 items=0 ppid=45913 pid=46311 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167827.552:88675): dev=vdsmtest-Cs0Vy prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167827.552:88675): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffc1701308 a3=0 items=0 ppid=45913 pid=46312 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167827.552:88676): dev=vdsmtest-BnXqw prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167827.552:88676): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3ffff26baa18 a3=0 items=0 ppid=45913 pid=46313 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167827.582:88677): dev=src-XMA0F prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167827.582:88677): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3ffff3866f50 a3=1143 items=0 ppid=45912 pid=45913 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167827.612:88678): dev=src-XMA0F prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167827.612:88678): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3ffff3866f50 a3=1043 items=0 ppid=45912 pid=45913 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167827.722:88679): dev=vdsmtest-9sHJF prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391167827.772:88680): dev=vdsmtest-Cs0Vy prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391167827.822:88681): dev=vdsmtest-BnXqw prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391167828.192:88682): dev=vdsmtest-9sHJF prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167828.192:88682): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffca3d7558 a3=0 items=0 ppid=45913 pid=46360 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167828.202:88683): dev=vdsmtest-Cs0Vy prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167828.202:88683): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffffb59638 a3=0 items=0 ppid=45913 pid=46361 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167828.202:88684): dev=vdsmtest-BnXqw prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167828.202:88684): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffff254168 a3=0 items=0 ppid=45913 pid=46362 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167828.232:88685): dev=src-XMA0F prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167828.232:88685): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3ffff3866f50 a3=1143 items=0 ppid=45912 pid=45913 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167828.412:88686): dev=src-XMA0F prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167828.412:88686): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3ffff3866f50 a3=1043 items=0 ppid=45912 pid=45913 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167828.422:88687): dev=vdsmtest-9sHJF prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391167828.532:88688): dev=vdsmtest-Cs0Vy prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391167828.602:88689): dev=vdsmtest-BnXqw prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391167829.722:88690): dev=vdsmtest-YQUI1 prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167829.722:88690): arch=80000015 syscall=54 success=yes exit=0 a0=4a a1=8914 a2=3ffff3867130 a3=1143 items=0 ppid=45912 pid=45913 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167829.722:88691): dev=vdsmtest-YQUI1 prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167829.722:88691): arch=80000015 syscall=54 success=yes exit=0 a0=4a a1=8914 a2=3ffff3867130 a3=1043 items=0 ppid=45912 pid=45913 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167946.852:88692): dev=vdsmtest-qpWsA prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167946.852:88692): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3ffff5a82f08 a3=0 items=0 ppid=63998 pid=64394 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167946.862:88693): dev=vdsmtest-ciwEQ prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167946.862:88693): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffe329b478 a3=0 items=0 ppid=63998 pid=64396 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167946.862:88694): dev=vdsmtest-3zdXT prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167946.862:88694): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffc78e9858 a3=0 items=0 ppid=63998 pid=64397 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167946.892:88695): dev=src-IEFsR prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167946.892:88695): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3fffc5bc95b0 a3=1143 items=0 ppid=63997 pid=63998 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167946.922:88696): dev=src-IEFsR prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167946.922:88696): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3fffc5bc95b0 a3=1043 items=0 ppid=63997 pid=63998 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167947.032:88697): dev=vdsmtest-qpWsA prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391167947.092:88698): dev=vdsmtest-ciwEQ prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391167947.172:88699): dev=vdsmtest-3zdXT prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391167947.542:88700): dev=vdsmtest-qpWsA prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167947.542:88700): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3ffff452bb28 a3=0 items=0 ppid=63998 pid=64444 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167947.552:88701): dev=vdsmtest-ciwEQ prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167947.552:88701): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffc4018c48 a3=0 items=0 ppid=63998 pid=64445 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167947.552:88702): dev=vdsmtest-3zdXT prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167947.552:88702): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffcd6f1b78 a3=0 items=0 ppid=63998 pid=64446 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167947.582:88703): dev=src-IEFsR prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167947.582:88703): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3fffc5bc95b0 a3=1143 items=0 ppid=63997 pid=63998 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167947.762:88704): dev=src-IEFsR prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167947.762:88704): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3fffc5bc95b0 a3=1043 items=0 ppid=63997 pid=63998 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167947.762:88705): dev=vdsmtest-qpWsA prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391167947.852:88706): dev=vdsmtest-ciwEQ prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391167947.922:88707): dev=vdsmtest-3zdXT prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=ANOM_PROMISCUOUS msg=audit(1391167949.112:88708): dev=vdsmtest-FEZNq prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167949.112:88708): arch=80000015 syscall=54 success=yes exit=0 a0=4a a1=8914 a2=3fffc5bc9790 a3=1143 items=0 ppid=63997 pid=63998 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391167949.112:88709): dev=vdsmtest-FEZNq prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=685 >type=SYSCALL msg=audit(1391167949.112:88709): arch=80000015 syscall=54 success=yes exit=0 a0=4a a1=8914 a2=3fffc5bc9790 a3=1043 items=0 ppid=63997 pid=63998 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_STOP msg=audit(1391168191.382:88710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391168191.412:88711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=MAC_POLICY_LOAD msg=audit(1391168207.042:88712): policy loaded auid=0 ses=685 >type=SYSCALL msg=audit(1391168207.042:88712): arch=80000015 syscall=4 success=yes exit=6355981 a0=4 a1=1ffffef70010 a2=60fc0d a3=10 items=0 ppid=5199 pid=5200 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=685 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1391168208.352:88713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=2) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=SERVICE_STOP msg=audit(1391168208.352:88714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-modules-load" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391168208.362:88715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-modules-load" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391168296.422:88716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391168296.422:88717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391168320.092:88718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1391168322.882:88719): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1391168322.882:88719): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1391168322.882:88719): arch=80000015 syscall=120 success=yes exit=5495 a0=6c020011 a1=1fffe81aa0a0 a2=5ef1 a3=3 items=0 ppid=1 pid=5371 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_START msg=audit(1391168323.952:88720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391168325.592:88721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391168325.862:88722): pid=5582 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D704230546E7346 terminal=? res=success' >type=CRED_ACQ msg=audit(1391168325.862:88723): pid=5582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391168325.862:88724): pid=5582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391168325.862:88725): pid=5582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391168325.862:88726): pid=5582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391168327.222:88727): pid=5604 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1391168327.222:88728): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391168327.222:88729): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391168327.222:88730): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391168327.222:88731): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391168327.302:88732): pid=5609 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391168327.302:88733): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391168327.302:88734): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391168327.302:88735): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391168327.302:88736): pid=5609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391168327.342:88737): pid=5619 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391168327.342:88738): pid=5619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391168327.342:88739): pid=5619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391168327.922:88740): pid=5619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391168327.922:88741): pid=5619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391168327.942:88742): pid=5645 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391168327.942:88743): pid=5645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391168327.942:88744): pid=5645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391168327.952:88745): pid=5645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391168327.952:88746): pid=5645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391168327.972:88747): pid=5648 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391168327.972:88748): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391168327.972:88749): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391168327.972:88750): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391168327.972:88751): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391168327.992:88752): pid=5651 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_ACQ msg=audit(1391168327.992:88753): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391168327.992:88754): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391168328.002:88755): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391168328.002:88756): pid=5651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391168328.012:88757): pid=5654 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391168328.012:88758): pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391168328.012:88759): pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391168328.022:88760): pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391168328.022:88761): pid=5654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391168387.832:88762): pid=59314 uid=0 auid=0 ses=921 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1391168387.832:88763): pid=59314 uid=0 auid=0 ses=921 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=USER_END msg=audit(1391168387.842:88764): pid=59314 uid=0 auid=0 ses=921 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=CRED_DISP msg=audit(1391168387.842:88765): pid=59314 uid=0 auid=0 ses=921 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1391168387.842:88766): pid=59314 uid=0 auid=0 ses=921 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=59314 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391168387.842:88767): pid=59314 uid=0 auid=0 ses=921 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=59314 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391168387.842:88768): pid=59314 uid=0 auid=0 ses=921 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=59314 suid=0 rport=59037 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=USER_ACCT msg=audit(1391168401.852:88769): pid=5680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391168401.852:88770): pid=5680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391168401.852:88771): login pid=5680 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=928 >type=USER_START msg=audit(1391168401.862:88772): pid=5680 uid=0 auid=0 ses=928 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391168401.862:88773): pid=5680 uid=0 auid=0 ses=928 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391168402.282:88774): pid=5680 uid=0 auid=0 ses=928 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391168402.282:88775): pid=5680 uid=0 auid=0 ses=928 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391169301.293:88776): pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391169301.293:88777): pid=6036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391169301.293:88778): login pid=6036 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=929 >type=USER_START msg=audit(1391169301.303:88779): pid=6036 uid=0 auid=0 ses=929 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391169301.303:88780): pid=6036 uid=0 auid=0 ses=929 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391169301.423:88781): pid=6036 uid=0 auid=0 ses=929 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391169301.423:88782): pid=6036 uid=0 auid=0 ses=929 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391169604.543:88783): pid=6200 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391169604.543:88784): pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391169604.543:88785): pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391169604.543:88786): pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391169604.543:88787): pid=6200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391169604.553:88788): pid=6202 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391169604.563:88789): pid=6202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391169604.563:88790): pid=6202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391169604.593:88791): pid=6202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391169604.593:88792): pid=6202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391169604.993:88793): pid=6227 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391169604.993:88794): pid=6227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391169604.993:88795): pid=6227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391169605.003:88796): pid=6227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391169605.003:88797): pid=6227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391169661.433:88798): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391169661.433:88799): pid=6286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391169661.433:88800): login pid=6286 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=930 >type=USER_START msg=audit(1391169661.443:88801): pid=6286 uid=0 auid=0 ses=930 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391169661.443:88802): pid=6286 uid=0 auid=0 ses=930 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391169661.463:88803): avc: denied { read } for pid=6302 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391169661.463:88803): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcc7ddb60 a2=84800 a3=0 items=0 ppid=6300 pid=6302 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=930 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391169661.473:88804): pid=6286 uid=0 auid=0 ses=930 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391169661.473:88805): pid=6286 uid=0 auid=0 ses=930 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391170201.483:88806): pid=6803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391170201.483:88807): pid=6803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391170201.483:88808): login pid=6803 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=931 >type=USER_START msg=audit(1391170201.493:88809): pid=6803 uid=0 auid=0 ses=931 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391170201.493:88810): pid=6803 uid=0 auid=0 ses=931 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391170201.853:88811): pid=6803 uid=0 auid=0 ses=931 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391170201.853:88812): pid=6803 uid=0 auid=0 ses=931 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391171101.874:88813): pid=7625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391171101.874:88814): pid=7625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391171101.874:88815): login pid=7625 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=932 >type=USER_START msg=audit(1391171101.874:88816): pid=7625 uid=0 auid=0 ses=932 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391171101.874:88817): pid=7625 uid=0 auid=0 ses=932 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391171102.004:88818): pid=7625 uid=0 auid=0 ses=932 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391171102.004:88819): pid=7625 uid=0 auid=0 ses=932 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391172001.014:88820): pid=8446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391172001.014:88821): pid=8446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391172001.014:88822): login pid=8446 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=933 >type=USER_START msg=audit(1391172001.024:88823): pid=8446 uid=0 auid=0 ses=933 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391172001.024:88824): pid=8446 uid=0 auid=0 ses=933 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391172001.364:88825): pid=8446 uid=0 auid=0 ses=933 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391172001.364:88826): pid=8446 uid=0 auid=0 ses=933 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391172901.375:88827): pid=9266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391172901.375:88828): pid=9266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391172901.375:88829): login pid=9266 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=934 >type=USER_START msg=audit(1391172901.375:88830): pid=9266 uid=0 auid=0 ses=934 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391172901.385:88831): pid=9266 uid=0 auid=0 ses=934 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391172901.505:88832): pid=9266 uid=0 auid=0 ses=934 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391172901.505:88833): pid=9266 uid=0 auid=0 ses=934 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391173261.515:88834): pid=9602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391173261.515:88835): pid=9602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391173261.515:88836): login pid=9602 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=935 >type=USER_START msg=audit(1391173261.515:88837): pid=9602 uid=0 auid=0 ses=935 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391173261.515:88838): pid=9602 uid=0 auid=0 ses=935 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391173261.535:88839): avc: denied { read } for pid=9618 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391173261.535:88839): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff7531f40 a2=84800 a3=0 items=0 ppid=9616 pid=9618 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=935 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391173261.545:88840): pid=9602 uid=0 auid=0 ses=935 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391173261.555:88841): pid=9602 uid=0 auid=0 ses=935 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391173801.555:88842): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391173801.555:88843): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391173801.565:88844): login pid=10118 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=936 >type=USER_START msg=audit(1391173801.565:88845): pid=10118 uid=0 auid=0 ses=936 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391173801.565:88846): pid=10118 uid=0 auid=0 ses=936 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391173801.885:88847): pid=10118 uid=0 auid=0 ses=936 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391173801.885:88848): pid=10118 uid=0 auid=0 ses=936 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391174701.896:88849): pid=10951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391174701.896:88850): pid=10951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391174701.896:88851): login pid=10951 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=937 >type=USER_START msg=audit(1391174701.896:88852): pid=10951 uid=0 auid=0 ses=937 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391174701.896:88853): pid=10951 uid=0 auid=0 ses=937 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391174702.086:88854): pid=10951 uid=0 auid=0 ses=937 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391174702.086:88855): pid=10951 uid=0 auid=0 ses=937 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391175601.096:88856): pid=11771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391175601.096:88857): pid=11771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391175601.106:88858): login pid=11771 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=938 >type=USER_START msg=audit(1391175601.106:88859): pid=11771 uid=0 auid=0 ses=938 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391175601.106:88860): pid=11771 uid=0 auid=0 ses=938 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391175601.506:88861): pid=11771 uid=0 auid=0 ses=938 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391175601.506:88862): pid=11771 uid=0 auid=0 ses=938 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391176501.517:88863): pid=12590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391176501.517:88864): pid=12590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391176501.517:88865): login pid=12590 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=939 >type=USER_START msg=audit(1391176501.527:88866): pid=12590 uid=0 auid=0 ses=939 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391176501.527:88867): pid=12590 uid=0 auid=0 ses=939 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391176501.657:88868): pid=12590 uid=0 auid=0 ses=939 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391176501.657:88869): pid=12590 uid=0 auid=0 ses=939 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391176861.667:88870): pid=12931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391176861.667:88871): pid=12931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391176861.667:88872): login pid=12931 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=940 >type=USER_START msg=audit(1391176861.667:88873): pid=12931 uid=0 auid=0 ses=940 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391176861.667:88874): pid=12931 uid=0 auid=0 ses=940 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391176861.687:88875): avc: denied { read } for pid=12947 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391176861.687:88875): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc3810270 a2=84800 a3=0 items=0 ppid=12945 pid=12947 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=940 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391176861.697:88876): pid=12931 uid=0 auid=0 ses=940 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391176861.697:88877): pid=12931 uid=0 auid=0 ses=940 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391177401.718:88878): pid=13446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391177401.718:88879): pid=13446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391177401.718:88880): login pid=13446 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=941 >type=USER_START msg=audit(1391177401.718:88881): pid=13446 uid=0 auid=0 ses=941 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391177401.728:88882): pid=13446 uid=0 auid=0 ses=941 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391177402.238:88883): pid=13446 uid=0 auid=0 ses=941 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391177402.248:88884): pid=13446 uid=0 auid=0 ses=941 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391178301.248:88885): pid=14269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391178301.248:88886): pid=14269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391178301.248:88887): login pid=14269 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=942 >type=USER_START msg=audit(1391178301.258:88888): pid=14269 uid=0 auid=0 ses=942 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391178301.258:88889): pid=14269 uid=0 auid=0 ses=942 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391178301.418:88890): pid=14269 uid=0 auid=0 ses=942 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391178301.418:88891): pid=14269 uid=0 auid=0 ses=942 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391179201.429:88892): pid=15089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391179201.429:88893): pid=15089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391179201.429:88894): login pid=15089 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=943 >type=USER_START msg=audit(1391179201.429:88895): pid=15089 uid=0 auid=0 ses=943 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391179201.429:88896): pid=15089 uid=0 auid=0 ses=943 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391179201.759:88897): pid=15089 uid=0 auid=0 ses=943 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391179201.759:88898): pid=15089 uid=0 auid=0 ses=943 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391180101.769:88899): pid=15962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391180101.769:88900): pid=15962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391180101.769:88901): login pid=15962 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=944 >type=USER_START msg=audit(1391180101.769:88902): pid=15962 uid=0 auid=0 ses=944 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391180101.769:88903): pid=15962 uid=0 auid=0 ses=944 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391180101.899:88904): pid=15962 uid=0 auid=0 ses=944 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391180101.899:88905): pid=15962 uid=0 auid=0 ses=944 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391180461.909:88906): pid=16335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391180461.909:88907): pid=16335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391180461.909:88908): login pid=16335 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=945 >type=USER_START msg=audit(1391180461.909:88909): pid=16335 uid=0 auid=0 ses=945 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391180461.909:88910): pid=16335 uid=0 auid=0 ses=945 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391180461.929:88911): avc: denied { read } for pid=16351 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391180461.929:88911): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe26d5260 a2=84800 a3=0 items=0 ppid=16349 pid=16351 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=945 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391180462.109:88912): pid=16335 uid=0 auid=0 ses=945 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391180462.119:88913): pid=16335 uid=0 auid=0 ses=945 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391181001.120:88914): pid=16899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391181001.120:88915): pid=16899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391181001.130:88916): login pid=16899 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=946 >type=USER_START msg=audit(1391181001.130:88917): pid=16899 uid=0 auid=0 ses=946 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391181001.130:88918): pid=16899 uid=0 auid=0 ses=946 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391181001.450:88919): pid=16899 uid=0 auid=0 ses=946 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391181001.450:88920): pid=16899 uid=0 auid=0 ses=946 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391181901.460:88921): pid=17812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391181901.460:88922): pid=17812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391181901.460:88923): login pid=17812 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=947 >type=USER_START msg=audit(1391181901.470:88924): pid=17812 uid=0 auid=0 ses=947 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391181901.470:88925): pid=17812 uid=0 auid=0 ses=947 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391181901.600:88926): pid=17812 uid=0 auid=0 ses=947 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391181901.600:88927): pid=17812 uid=0 auid=0 ses=947 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391182801.611:88928): pid=18681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391182801.611:88929): pid=18681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391182801.611:88930): login pid=18681 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=948 >type=USER_START msg=audit(1391182801.611:88931): pid=18681 uid=0 auid=0 ses=948 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391182801.611:88932): pid=18681 uid=0 auid=0 ses=948 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391182801.921:88933): pid=18681 uid=0 auid=0 ses=948 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391182801.921:88934): pid=18681 uid=0 auid=0 ses=948 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1391182930.211:88935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="fedora-readonly" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.211:88936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="fedora-readonly" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391182930.251:88937): pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=1100 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391182930.251:88938): pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=1100 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.271:88939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="irqbalance" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.271:88940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="irqbalance" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.271:88941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="smartd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.271:88942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="smartd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.271:88943): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-oops" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.271:88944): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-oops" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.271:88945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-xorg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.271:88946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-xorg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.271:88947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="chronyd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.271:88948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="chronyd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.271:88949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rngd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.271:88950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rngd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.271:88951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.271:88952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.271:88953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="accounts-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.271:88954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="accounts-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.271:88955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="avahi-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.271:88956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="avahi-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.281:88957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.281:88958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.281:88959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.281:88960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.281:88961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="gdm" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.281:88962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="gdm" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.281:88963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="polkit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.281:88964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="polkit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.281:88965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="serial-getty@hvc0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.281:88966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="serial-getty@hvc0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.281:88967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.281:88968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.281:88969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sm-client" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.281:88970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sm-client" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.281:88971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.281:88972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.291:88973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="alsa-state" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.291:88974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="alsa-state" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.291:88975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterfsd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.291:88976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterfsd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.291:88977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.291:88978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.291:88979): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-ccpp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.291:88980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-ccpp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.311:88981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="tuned" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1391182930.311:88982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sendmail" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.311:88983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sendmail" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.311:88984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.311:88985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.311:88986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-reboot" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.331:88987): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.331:88988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.351:88989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rtkit-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.351:88990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rtkit-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391182930.371:88991): pid=23924 uid=0 auid=0 ses=686 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=failed' >type=USER_END msg=audit(1391182930.371:88992): pid=23919 uid=0 auid=0 ses=685 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=failed' >type=CRED_DISP msg=audit(1391182930.371:88993): pid=23924 uid=0 auid=0 ses=686 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRED_DISP msg=audit(1391182930.371:88994): pid=23919 uid=0 auid=0 ses=685 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_END msg=audit(1391182930.371:88995): pid=23924 uid=0 auid=0 ses=686 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_END msg=audit(1391182930.371:88996): pid=23919 uid=0 auid=0 ses=685 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1391182930.371:88997): pid=23924 uid=0 auid=0 ses=686 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1391182930.371:88998): pid=23919 uid=0 auid=0 ses=685 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1391182930.371:88999): pid=23924 uid=0 auid=0 ses=686 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=23924 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391182930.371:89000): pid=23919 uid=0 auid=0 ses=685 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=23919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391182930.371:89001): pid=23924 uid=0 auid=0 ses=686 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=23924 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391182930.371:89002): pid=23919 uid=0 auid=0 ses=685 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=23919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391182930.371:89003): pid=23924 uid=0 auid=0 ses=686 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23924 suid=0 rport=58357 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391182930.371:89004): pid=23919 uid=0 auid=0 ses=685 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23919 suid=0 rport=58356 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.381:89005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsid" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.381:89006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsid" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.381:89007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="multipathd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.381:89008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="multipathd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.391:89009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1391182930.411:89010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.411:89011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.511:89012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.511:89013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.691:89014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-remount-fs" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.691:89015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-remount-fs" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.701:89016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-random-seed-save" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182930.701:89017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-random-seed-save" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182930.841:89018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dracut-shutdown" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1391182930.991:89019): dev=eth0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1391182930.991:89019): arch=80000015 syscall=54 success=yes exit=0 a0=3 a1=89a3 a2=3fffe1799d78 a3=0 items=0 ppid=18933 pid=18974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:brctl_t:s0 key=(null) >type=SERVICE_START msg=audit(1391182931.101:89020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-monitor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182931.101:89021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-monitor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182931.101:89022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-lvmetad" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182931.101:89023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-lvmetad" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182931.291:89024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="wdmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182931.291:89025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="wdmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182931.371:89026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182931.371:89027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182932.281:89028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sanlock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182932.281:89029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sanlock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182936.411:89030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182936.421:89031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="fedora-loadmodules" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391182936.421:89032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="fedora-loadmodules" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=DAEMON_END msg=audit(1391182936.429:1973): auditd normal halt, sending auid=0 pid=1 subj=system_u:system_r:init_t:s0 res=success >type=DAEMON_START msg=audit(1391182995.984:9316): auditd start, ver=2.3.2 format=raw kernel=3.11.4-201.fc19.ppc64p7 auid=4294967295 pid=655 subj=system_u:system_r:auditd_t:s0 res=success >type=SERVICE_STOP msg=audit(1391182996.010:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-read-write" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182996.100:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-setup" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182996.110:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="alsa-state" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182996.130:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="irqbalance" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182996.140:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="smartd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182996.140:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182996.160:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182996.210:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-oops" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182996.220:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-xorg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182996.240:15): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rngd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182996.270:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1391182996.270:17): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1391182996.270:17): arch=80000015 syscall=282 success=yes exit=0 a0=40000000 a1=ffffffffffffffff a2=0 a3=0 items=0 ppid=1 pid=748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="(t-daemon)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null) >type=SERVICE_START msg=audit(1391182996.280:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182996.280:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-ccpp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182996.280:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182996.290:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182996.290:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182996.360:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="wdmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182996.360:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sanlock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182996.360:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182996.370:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="NetworkManager-dispatcher" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182996.370:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="gdm" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391182996.380:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rtkit-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183001.940:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="tuned" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183001.993:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="chronyd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183001.993:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="avahi-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183002.023:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-start" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391183002.023:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-start" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183002.033:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit-wait" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391183002.033:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit-wait" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183002.043:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="serial-getty@hvc0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183002.043:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="polkit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183002.053:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="accounts-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1391183002.083:39): dev=eth0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1391183002.083:39): arch=80000015 syscall=54 success=yes exit=0 a0=3 a1=89a2 a2=3fffcd5b55c8 a3=0 items=0 ppid=942 pid=977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:brctl_t:s0 key=(null) >type=SERVICE_START msg=audit(1391183004.733:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183004.773:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183004.773:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183004.793:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsid" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183004.793:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183004.833:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sendmail" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183004.903:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183004.913:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sm-client" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183004.913:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterfsd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1391183005.353:49): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1391183005.353:49): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1391183005.353:49): arch=80000015 syscall=353 success=yes exit=0 a0=0 a1=80c91c8330 a2=0 a3=0 items=0 ppid=1216 pid=1217 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=SERVICE_STOP msg=audit(1391183006.253:50): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="NetworkManager-dispatcher" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1391183007.793:51): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1391183007.793:51): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1391183007.793:51): arch=80000015 syscall=120 success=yes exit=1328 a0=6c020011 a1=1fffe81a7700 a2=8891 a3=f items=0 ppid=1 pid=1189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_START msg=audit(1391183008.743:52): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SYSTEM_BOOT msg=audit(1391183008.753:53): pid=1347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='init exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SYSTEM_RUNLEVEL msg=audit(1391183008.753:54): pid=1347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=5 exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183008.753:55): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391183008.753:56): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391183009.073:57): pid=1353 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D70663778356E68 terminal=? res=success' >type=CRED_ACQ msg=audit(1391183009.083:58): pid=1353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391183009.083:59): pid=1353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391183009.093:60): pid=1353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391183009.093:61): pid=1353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391183009.593:62): pid=1373 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1391183009.593:63): pid=1373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391183009.593:64): pid=1373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391183009.603:65): pid=1373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391183009.603:66): pid=1373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391183009.693:67): pid=1377 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391183009.693:68): pid=1377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391183009.693:69): pid=1377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391183009.703:70): pid=1377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391183009.703:71): pid=1377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391183009.723:72): pid=1379 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391183009.723:73): pid=1379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391183009.723:74): pid=1379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391183009.763:75): pid=1379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391183009.763:76): pid=1379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391183009.963:77): pid=1406 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391183009.963:78): pid=1406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391183009.963:79): pid=1406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391183009.973:80): pid=1406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391183009.973:81): pid=1406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391183010.043:82): pid=1413 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391183010.043:83): pid=1413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391183010.043:84): pid=1413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391183010.053:85): pid=1413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391183010.053:86): pid=1413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391183010.093:87): pid=1416 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_ACQ msg=audit(1391183010.093:88): pid=1416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391183010.093:89): pid=1416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391183010.103:90): pid=1416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391183010.103:91): pid=1416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391183010.123:92): pid=1419 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391183010.123:93): pid=1419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391183010.123:94): pid=1419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391183010.133:95): pid=1419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391183010.133:96): pid=1419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183038.763:97): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391183038.763:98): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183125.203:99): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsi" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=CRYPTO_KEY_USER msg=audit(1391183449.794:100): pid=1562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=1562 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391183449.794:101): pid=1562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=1562 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1391183449.794:102): pid=1561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5 spid=1562 suid=74 rport=59074 laddr=10.10.27.64 lport=2 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1391183449.794:103): pid=1561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5 spid=1562 suid=74 rport=59074 laddr=10.10.27.64 lport=2 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=USER_AUTH msg=audit(1391183449.884:104): pid=1561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1391183449.914:105): pid=1561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=USER_ACCT msg=audit(1391183449.914:106): pid=1561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1391183449.914:107): pid=1561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1562 suid=74 rport=59074 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=USER_AUTH msg=audit(1391183449.914:108): pid=1561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1391183449.914:109): pid=1561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=LOGIN msg=audit(1391183449.914:110): login pid=1561 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1 >type=USER_ROLE_CHANGE msg=audit(1391183449.974:111): pid=1561 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=USER_START msg=audit(1391183450.004:112): pid=1561 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1391183450.004:113): pid=1561 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=USER_START msg=audit(1391183450.014:114): pid=1561 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1391183450.014:115): pid=1565 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=1565 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391183450.014:116): pid=1565 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=1565 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRED_REFR msg=audit(1391183450.014:117): pid=1565 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1391183524.414:118): pid=1597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=1597 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391183524.414:119): pid=1597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=1597 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1391183524.414:120): pid=1596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1597 suid=74 rport=50595 laddr=10. exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1391183524.424:121): pid=1596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1597 suid=74 rport=50595 laddr=10. exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_AUTH msg=audit(1391183524.474:122): pid=1596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_ACCT msg=audit(1391183524.484:123): pid=1596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1391183524.484:124): pid=1596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1597 suid=74 rport=50595 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_AUTH msg=audit(1391183524.484:125): pid=1596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1391183524.484:126): pid=1596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=LOGIN msg=audit(1391183524.484:127): login pid=1596 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 >type=CRYPTO_KEY_USER msg=audit(1391183524.504:128): pid=1601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=1601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391183524.504:129): pid=1601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=1601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1391183524.504:130): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=blowfish-cbc ksize=128 mac=hmac-sha1 spid=1601 suid=74 rport=50596 laddr=10.10.27.64 lpor exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1391183524.504:131): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=blowfish-cbc ksize=128 mac=hmac-sha1 spid=1601 suid=74 rport=50596 laddr=10.10.27.64 lpor exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1391183524.524:132): pid=1596 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_START msg=audit(1391183524.524:133): pid=1596 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_AUTH msg=audit(1391183524.544:134): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_ACCT msg=audit(1391183524.544:135): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1391183524.544:136): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1601 suid=74 rport=50596 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_AUTH msg=audit(1391183524.544:137): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1391183524.544:138): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=LOGIN msg=audit(1391183524.554:139): login pid=1600 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 >type=USER_ROLE_CHANGE msg=audit(1391183524.584:140): pid=1600 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_START msg=audit(1391183524.594:141): pid=1600 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1391183524.594:142): pid=1600 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_START msg=audit(1391183524.594:143): pid=1600 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1391183524.594:144): pid=1604 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=1604 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391183524.594:145): pid=1604 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=1604 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRED_REFR msg=audit(1391183524.594:146): pid=1604 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1391183524.914:147): pid=1614 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391183524.914:148): pid=1614 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1391183524.914:149): pid=1614 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=1614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1391183524.914:150): pid=1614 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=1614 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1391183524.914:151): pid=1614 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=ADD_GROUP msg=audit(1391183640.254:152): pid=1739 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding group acct="vnc" exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success' >type=ADD_USER msg=audit(1391183640.284:153): pid=1739 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=1001 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success' >type=ADD_USER msg=audit(1391183640.294:154): pid=1739 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 msg='op=adding home directory id=1001 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/0 res=success' >type=USER_CHAUTHTOK msg=audit(1391183649.274:155): pid=1745 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 msg='op=PAM:chauthtok acct="vnc" exe="/usr/bin/passwd" hostname=? addr=? terminal=pts/0 res=success' >type=USER_CHAUTHTOK msg=audit(1391183649.274:156): pid=1745 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 msg='op=change password id=1001 exe="/usr/bin/passwd" hostname=? addr=? terminal=pts/0 res=success' >type=USER_AUTH msg=audit(1391183658.794:157): pid=1754 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="vnc" exe="/usr/bin/su" hostname=? addr=? terminal=pts/0 res=success' >type=USER_ACCT msg=audit(1391183658.794:158): pid=1754 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="vnc" exe="/usr/bin/su" hostname=? addr=? terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391183658.794:159): pid=1754 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="vnc" exe="/usr/bin/su" hostname=? addr=? terminal=pts/0 res=success' >type=USER_START msg=audit(1391183658.804:160): pid=1754 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="vnc" exe="/usr/bin/su" hostname=? addr=? terminal=pts/0 res=success' >type=USER_ACCT msg=audit(1391183701.224:161): pid=1840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391183701.224:162): pid=1840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391183701.234:163): login pid=1840 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 >type=USER_START msg=audit(1391183701.234:164): pid=1840 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391183701.234:165): pid=1840 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391183701.384:166): pid=1840 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391183701.394:167): pid=1840 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391183703.924:168): pid=1754 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="vnc" exe="/usr/bin/su" hostname=? addr=? terminal=pts/0 res=success' >type=CRED_DISP msg=audit(1391183703.924:169): pid=1754 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="vnc" exe="/usr/bin/su" hostname=? addr=? terminal=pts/0 res=success' >type=SERVICE_START msg=audit(1391183759.354:170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="bluetooth" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183759.434:171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="upower" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183760.254:172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="udisks2" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183760.734:173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cups" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183760.874:174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="colord" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391183761.194:175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-localed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ANOM_ABEND msg=audit(1391183822.594:176): auid=0 uid=0 gid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=2644 comm="yelp" reason="memory violation" sig=11 >type=SERVICE_START msg=audit(1391183890.404:177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391183890.404:178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391184061.404:179): pid=19882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391184061.414:180): pid=19882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391184061.414:181): login pid=19882 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5 >type=USER_START msg=audit(1391184061.414:182): pid=19882 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391184061.414:183): pid=19882 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391184061.444:184): avc: denied { read } for pid=19898 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391184061.444:184): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffed554cc0 a2=84800 a3=0 items=0 ppid=19896 pid=19898 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=5 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391184061.484:185): pid=19882 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391184061.484:186): pid=19882 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_STOP msg=audit(1391184071.344:187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-localed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1391184098.544:188): dev=vdsmtest-7PNKI prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=2 >type=SYSCALL msg=audit(1391184098.544:188): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffd2de92c8 a3=0 items=0 ppid=19781 pid=20209 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=2 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391184098.554:189): dev=vdsmtest-Xbld4 prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=2 >type=SYSCALL msg=audit(1391184098.554:189): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffe3b342a8 a3=0 items=0 ppid=19781 pid=20210 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=2 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391184098.554:190): dev=vdsmtest-xH2Jg prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=2 >type=SYSCALL msg=audit(1391184098.554:190): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffd060baa8 a3=0 items=0 ppid=19781 pid=20211 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=2 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391184098.624:191): dev=src-FAkc7 prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=2 >type=SYSCALL msg=audit(1391184098.624:191): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3fffcfed0470 a3=1143 items=0 ppid=19780 pid=19781 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=2 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391184098.654:192): dev=src-FAkc7 prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=2 >type=SYSCALL msg=audit(1391184098.654:192): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3fffcfed0470 a3=1043 items=0 ppid=19780 pid=19781 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=2 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391184098.764:193): dev=vdsmtest-7PNKI prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=2 >type=ANOM_PROMISCUOUS msg=audit(1391184098.824:194): dev=vdsmtest-Xbld4 prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=2 >type=ANOM_PROMISCUOUS msg=audit(1391184098.914:195): dev=vdsmtest-xH2Jg prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=2 >type=ANOM_PROMISCUOUS msg=audit(1391184099.274:196): dev=vdsmtest-7PNKI prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=2 >type=SYSCALL msg=audit(1391184099.274:196): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffcd176e48 a3=0 items=0 ppid=19781 pid=20264 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=2 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391184099.284:197): dev=vdsmtest-Xbld4 prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=2 >type=SYSCALL msg=audit(1391184099.284:197): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffcf433e18 a3=0 items=0 ppid=19781 pid=20265 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=2 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391184099.284:198): dev=vdsmtest-xH2Jg prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=2 >type=SYSCALL msg=audit(1391184099.284:198): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffecd6d3d8 a3=0 items=0 ppid=19781 pid=20266 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=2 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391184099.314:199): dev=src-FAkc7 prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=2 >type=SYSCALL msg=audit(1391184099.314:199): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3fffcfed0470 a3=1143 items=0 ppid=19780 pid=19781 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=2 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391184099.494:200): dev=src-FAkc7 prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=2 >type=SYSCALL msg=audit(1391184099.494:200): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3fffcfed0470 a3=1043 items=0 ppid=19780 pid=19781 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=2 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391184099.494:201): dev=vdsmtest-7PNKI prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=2 >type=ANOM_PROMISCUOUS msg=audit(1391184099.554:202): dev=vdsmtest-Xbld4 prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=2 >type=ANOM_PROMISCUOUS msg=audit(1391184099.624:203): dev=vdsmtest-xH2Jg prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=2 >type=ANOM_PROMISCUOUS msg=audit(1391184100.714:204): dev=vdsmtest-F19KS prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=2 >type=SYSCALL msg=audit(1391184100.714:204): arch=80000015 syscall=54 success=yes exit=0 a0=4a a1=8914 a2=3fffcfed0650 a3=1143 items=0 ppid=19780 pid=19781 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=2 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1391184100.724:205): dev=vdsmtest-F19KS prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=2 >type=SYSCALL msg=audit(1391184100.724:205): arch=80000015 syscall=54 success=yes exit=0 a0=4a a1=8914 a2=3fffcfed0650 a3=1043 items=0 ppid=19780 pid=19781 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=2 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1391184347.534:206): pid=1561 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=CRED_DISP msg=audit(1391184347.534:207): pid=1561 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=USER_END msg=audit(1391184347.534:208): pid=1561 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1391184347.534:209): pid=1561 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1391184347.534:210): pid=1561 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=1561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391184347.534:211): pid=1561 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=1561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391184347.534:212): pid=1561 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1561 suid=0 rport=59074 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=USER_ACCT msg=audit(1391184601.504:213): pid=26081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391184601.504:214): pid=26081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391184601.504:215): login pid=26081 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6 >type=USER_START msg=audit(1391184601.504:216): pid=26081 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391184601.504:217): pid=26081 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391184601.834:218): pid=26081 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391184601.834:219): pid=26081 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391185501.845:220): pid=26362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391185501.845:221): pid=26362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391185501.845:222): login pid=26362 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 >type=USER_START msg=audit(1391185501.855:223): pid=26362 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391185501.855:224): pid=26362 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391185501.985:225): pid=26362 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391185501.985:226): pid=26362 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391186401.995:227): pid=26644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391186401.995:228): pid=26644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391186401.995:229): login pid=26644 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8 >type=USER_START msg=audit(1391186401.995:230): pid=26644 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391186401.995:231): pid=26644 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391186402.365:232): pid=26644 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391186402.375:233): pid=26644 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391187301.386:234): pid=26927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391187301.386:235): pid=26927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391187301.386:236): login pid=26927 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9 >type=USER_START msg=audit(1391187301.386:237): pid=26927 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391187301.386:238): pid=26927 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391187301.506:239): pid=26927 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391187301.516:240): pid=26927 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391187661.516:241): pid=27045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391187661.516:242): pid=27045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391187661.526:243): login pid=27045 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10 >type=USER_START msg=audit(1391187661.526:244): pid=27045 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391187661.526:245): pid=27045 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391187661.546:246): avc: denied { read } for pid=27061 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391187661.546:246): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd923c520 a2=84800 a3=0 items=0 ppid=27059 pid=27061 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=10 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391187661.556:247): pid=27045 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391187661.556:248): pid=27045 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391188201.566:249): pid=27240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391188201.566:250): pid=27240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391188201.566:251): login pid=27240 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11 >type=USER_START msg=audit(1391188201.576:252): pid=27240 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391188201.576:253): pid=27240 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391188201.906:254): pid=27240 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391188201.906:255): pid=27240 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391189101.917:256): pid=27520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391189101.917:257): pid=27520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391189101.917:258): login pid=27520 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12 >type=USER_START msg=audit(1391189101.917:259): pid=27520 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391189101.917:260): pid=27520 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391189102.057:261): pid=27520 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391189102.057:262): pid=27520 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391190001.067:263): pid=27802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391190001.067:264): pid=27802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391190001.067:265): login pid=27802 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13 >type=USER_START msg=audit(1391190001.067:266): pid=27802 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391190001.067:267): pid=27802 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391190001.547:268): pid=27802 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391190001.547:269): pid=27802 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391190901.558:270): pid=28086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391190901.558:271): pid=28086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391190901.558:272): login pid=28086 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14 >type=USER_START msg=audit(1391190901.568:273): pid=28086 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391190901.568:274): pid=28086 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391190901.698:275): pid=28086 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391190901.698:276): pid=28086 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391191261.708:277): pid=28203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391191261.708:278): pid=28203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391191261.708:279): login pid=28203 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15 >type=USER_START msg=audit(1391191261.708:280): pid=28203 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391191261.708:281): pid=28203 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391191261.728:282): avc: denied { read } for pid=28219 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391191261.728:282): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcf4d9be0 a2=84800 a3=0 items=0 ppid=28217 pid=28219 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=15 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391191261.738:283): pid=28203 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391191261.748:284): pid=28203 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391191801.749:285): pid=28397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391191801.759:286): pid=28397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391191801.759:287): login pid=28397 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16 >type=USER_START msg=audit(1391191801.759:288): pid=28397 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391191801.759:289): pid=28397 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391191802.189:290): pid=28397 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391191802.199:291): pid=28397 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391192701.209:292): pid=28678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391192701.209:293): pid=28678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391192701.209:294): login pid=28678 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17 >type=USER_START msg=audit(1391192701.209:295): pid=28678 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391192701.209:296): pid=28678 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391192701.339:297): pid=28678 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391192701.339:298): pid=28678 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391193601.350:299): pid=28961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391193601.350:300): pid=28961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391193601.350:301): login pid=28961 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=18 >type=USER_START msg=audit(1391193601.350:302): pid=28961 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391193601.350:303): pid=28961 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391193601.690:304): pid=28961 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391193601.690:305): pid=28961 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391194501.710:306): pid=29244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391194501.710:307): pid=29244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391194501.710:308): login pid=29244 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=19 >type=USER_START msg=audit(1391194501.710:309): pid=29244 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391194501.710:310): pid=29244 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391194501.890:311): pid=29244 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391194501.890:312): pid=29244 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391194861.900:313): pid=29362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391194861.900:314): pid=29362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391194861.900:315): login pid=29362 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=20 >type=USER_START msg=audit(1391194861.910:316): pid=29362 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391194861.910:317): pid=29362 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391194861.920:318): avc: denied { read } for pid=29378 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391194861.920:318): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdd514c80 a2=84800 a3=0 items=0 ppid=29376 pid=29378 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=20 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391194861.950:319): pid=29362 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391194861.950:320): pid=29362 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391195401.961:321): pid=29556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391195401.961:322): pid=29556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391195401.971:323): login pid=29556 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=21 >type=USER_START msg=audit(1391195401.971:324): pid=29556 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391195401.971:325): pid=29556 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391195402.371:326): pid=29556 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391195402.371:327): pid=29556 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391196301.381:328): pid=29837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391196301.381:329): pid=29837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391196301.381:330): login pid=29837 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=22 >type=USER_START msg=audit(1391196301.391:331): pid=29837 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391196301.391:332): pid=29837 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391196301.521:333): pid=29837 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391196301.521:334): pid=29837 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391197201.532:335): pid=30119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391197201.532:336): pid=30119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391197201.532:337): login pid=30119 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=23 >type=USER_START msg=audit(1391197201.542:338): pid=30119 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391197201.542:339): pid=30119 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391197201.832:340): pid=30119 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391197201.832:341): pid=30119 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391198101.852:342): pid=30402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391198101.852:343): pid=30402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391198101.852:344): login pid=30402 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=24 >type=USER_START msg=audit(1391198101.852:345): pid=30402 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391198101.852:346): pid=30402 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391198102.032:347): pid=30402 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391198102.032:348): pid=30402 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391198461.042:349): pid=30520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391198461.042:350): pid=30520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391198461.042:351): login pid=30520 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=25 >type=USER_START msg=audit(1391198461.042:352): pid=30520 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391198461.042:353): pid=30520 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391198461.062:354): avc: denied { read } for pid=30536 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391198461.062:354): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd38fd2e0 a2=84800 a3=0 items=0 ppid=30534 pid=30536 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=25 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391198461.082:355): pid=30520 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391198461.092:356): pid=30520 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391199001.103:357): pid=30714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391199001.103:358): pid=30714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391199001.103:359): login pid=30714 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=26 >type=USER_START msg=audit(1391199001.103:360): pid=30714 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391199001.103:361): pid=30714 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391199001.603:362): pid=30714 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391199001.603:363): pid=30714 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391199901.613:364): pid=30996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391199901.613:365): pid=30996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391199901.613:366): login pid=30996 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=27 >type=USER_START msg=audit(1391199901.613:367): pid=30996 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391199901.613:368): pid=30996 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391199901.753:369): pid=30996 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391199901.753:370): pid=30996 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391200801.774:371): pid=31277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391200801.774:372): pid=31277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391200801.774:373): login pid=31277 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=28 >type=USER_START msg=audit(1391200801.774:374): pid=31277 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391200801.774:375): pid=31277 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391200802.084:376): pid=31277 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391200802.084:377): pid=31277 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391201701.094:378): pid=31560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391201701.094:379): pid=31560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391201701.094:380): login pid=31560 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=29 >type=USER_START msg=audit(1391201701.094:381): pid=31560 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391201701.094:382): pid=31560 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391201701.234:383): pid=31560 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391201701.234:384): pid=31560 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391202061.245:385): pid=31678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391202061.245:386): pid=31678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391202061.245:387): login pid=31678 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=30 >type=USER_START msg=audit(1391202061.245:388): pid=31678 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391202061.245:389): pid=31678 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391202061.265:390): avc: denied { read } for pid=31694 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391202061.265:390): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffab6ec90 a2=84800 a3=0 items=0 ppid=31692 pid=31694 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=30 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391202061.285:391): pid=31678 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391202061.285:392): pid=31678 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391202601.295:393): pid=31873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391202601.295:394): pid=31873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391202601.295:395): login pid=31873 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=31 >type=USER_START msg=audit(1391202601.305:396): pid=31873 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391202601.305:397): pid=31873 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391202601.705:398): pid=31873 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391202601.705:399): pid=31873 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391203501.715:400): pid=32153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391203501.715:401): pid=32153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391203501.715:402): login pid=32153 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=32 >type=USER_START msg=audit(1391203501.715:403): pid=32153 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391203501.715:404): pid=32153 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391203501.865:405): pid=32153 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391203501.865:406): pid=32153 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391204401.876:407): pid=32436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391204401.876:408): pid=32436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391204401.886:409): login pid=32436 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=33 >type=USER_START msg=audit(1391204401.886:410): pid=32436 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391204401.886:411): pid=32436 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391204402.186:412): pid=32436 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391204402.186:413): pid=32436 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391205301.197:414): pid=32719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391205301.197:415): pid=32719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391205301.197:416): login pid=32719 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=34 >type=USER_START msg=audit(1391205301.207:417): pid=32719 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391205301.207:418): pid=32719 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391205301.337:419): pid=32719 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391205301.347:420): pid=32719 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391205661.347:421): pid=32837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391205661.357:422): pid=32837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391205661.357:423): login pid=32837 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=35 >type=USER_START msg=audit(1391205661.357:424): pid=32837 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391205661.357:425): pid=32837 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391205661.377:426): avc: denied { read } for pid=32853 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391205661.377:426): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff0c24610 a2=84800 a3=0 items=0 ppid=32851 pid=32853 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=35 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391205661.387:427): pid=32837 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391205661.387:428): pid=32837 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391206201.397:429): pid=33030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391206201.397:430): pid=33030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391206201.407:431): login pid=33030 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=36 >type=USER_START msg=audit(1391206201.407:432): pid=33030 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391206201.407:433): pid=33030 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391206201.727:434): pid=33030 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391206201.737:435): pid=33030 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391207101.748:436): pid=33312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391207101.748:437): pid=33312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391207101.748:438): login pid=33312 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=37 >type=USER_START msg=audit(1391207101.748:439): pid=33312 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391207101.748:440): pid=33312 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391207101.878:441): pid=33312 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391207101.878:442): pid=33312 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391208001.888:443): pid=33594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391208001.888:444): pid=33594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391208001.888:445): login pid=33594 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=38 >type=USER_START msg=audit(1391208001.888:446): pid=33594 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391208001.888:447): pid=33594 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391208002.438:448): pid=33594 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391208002.438:449): pid=33594 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391208901.449:450): pid=33876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391208901.449:451): pid=33876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391208901.449:452): login pid=33876 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=39 >type=USER_START msg=audit(1391208901.459:453): pid=33876 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391208901.459:454): pid=33876 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391208901.589:455): pid=33876 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391208901.589:456): pid=33876 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391209261.599:457): pid=33993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391209261.599:458): pid=33993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391209261.599:459): login pid=33993 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=40 >type=USER_START msg=audit(1391209261.599:460): pid=33993 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391209261.599:461): pid=33993 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391209261.619:462): avc: denied { read } for pid=34009 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391209261.619:462): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffaa646d0 a2=84800 a3=0 items=0 ppid=34007 pid=34009 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=40 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391209261.639:463): pid=33993 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391209261.639:464): pid=33993 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391209801.649:465): pid=34188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391209801.649:466): pid=34188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391209801.649:467): login pid=34188 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=41 >type=USER_START msg=audit(1391209801.649:468): pid=34188 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391209801.649:469): pid=34188 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391209801.959:470): pid=34188 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391209801.959:471): pid=34188 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391210701.970:472): pid=34468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391210701.970:473): pid=34468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391210701.980:474): login pid=34468 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=42 >type=USER_START msg=audit(1391210701.980:475): pid=34468 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391210701.980:476): pid=34468 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391210702.380:477): pid=34468 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391210702.380:478): pid=34468 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391211601.400:479): pid=34751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391211601.400:480): pid=34751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391211601.400:481): login pid=34751 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=43 >type=USER_START msg=audit(1391211601.400:482): pid=34751 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391211601.410:483): pid=34751 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391211601.720:484): pid=34751 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391211601.730:485): pid=34751 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391212501.741:486): pid=35034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391212501.741:487): pid=35034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391212501.741:488): login pid=35034 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=44 >type=USER_START msg=audit(1391212501.741:489): pid=35034 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391212501.741:490): pid=35034 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391212501.921:491): pid=35034 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391212501.921:492): pid=35034 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391212861.931:493): pid=35152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391212861.931:494): pid=35152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391212861.931:495): login pid=35152 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=45 >type=USER_START msg=audit(1391212861.941:496): pid=35152 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391212861.941:497): pid=35152 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391212861.951:498): avc: denied { read } for pid=35168 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391212861.951:498): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff8fc7e20 a2=84800 a3=0 items=0 ppid=35166 pid=35168 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=45 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391212861.971:499): pid=35152 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391212861.971:500): pid=35152 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391213401.981:501): pid=35347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391213401.981:502): pid=35347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391213401.981:503): login pid=35347 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=46 >type=USER_START msg=audit(1391213401.981:504): pid=35347 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391213401.981:505): pid=35347 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391213402.411:506): pid=35347 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391213402.411:507): pid=35347 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391214301.422:508): pid=35626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391214301.422:509): pid=35626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391214301.422:510): login pid=35626 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=47 >type=USER_START msg=audit(1391214301.422:511): pid=35626 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391214301.422:512): pid=35626 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391214301.562:513): pid=35626 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391214301.572:514): pid=35626 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391215201.582:515): pid=35908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391215201.582:516): pid=35908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391215201.582:517): login pid=35908 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=48 >type=USER_START msg=audit(1391215201.582:518): pid=35908 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391215201.582:519): pid=35908 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391215201.962:520): pid=35908 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391215201.962:521): pid=35908 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391216101.973:522): pid=36192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391216101.973:523): pid=36192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391216101.973:524): login pid=36192 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=49 >type=USER_START msg=audit(1391216101.983:525): pid=36192 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391216101.983:526): pid=36192 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391216102.133:527): pid=36192 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391216102.133:528): pid=36192 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391216461.143:529): pid=36309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391216461.143:530): pid=36309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391216461.143:531): login pid=36309 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=50 >type=USER_START msg=audit(1391216461.143:532): pid=36309 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391216461.143:533): pid=36309 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391216461.163:534): avc: denied { read } for pid=36325 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391216461.163:534): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe6b85c70 a2=84800 a3=0 items=0 ppid=36323 pid=36325 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=50 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391216461.173:535): pid=36309 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391216461.183:536): pid=36309 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391217001.193:537): pid=36503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391217001.193:538): pid=36503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391217001.193:539): login pid=36503 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=51 >type=USER_START msg=audit(1391217001.193:540): pid=36503 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391217001.193:541): pid=36503 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391217001.493:542): pid=36503 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391217001.493:543): pid=36503 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391217901.504:544): pid=36785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391217901.514:545): pid=36785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391217901.514:546): login pid=36785 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=52 >type=USER_START msg=audit(1391217901.514:547): pid=36785 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391217901.514:548): pid=36785 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391217901.634:549): pid=36785 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391217901.634:550): pid=36785 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391218801.655:551): pid=37067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391218801.655:552): pid=37067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391218801.655:553): login pid=37067 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=53 >type=USER_START msg=audit(1391218801.665:554): pid=37067 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391218801.665:555): pid=37067 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391218801.995:556): pid=37067 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391218802.005:557): pid=37067 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391219701.025:558): pid=37349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391219701.025:559): pid=37349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391219701.025:560): login pid=37349 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=54 >type=USER_START msg=audit(1391219701.025:561): pid=37349 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391219701.025:562): pid=37349 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391219701.225:563): pid=37349 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391219701.225:564): pid=37349 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391220061.225:565): pid=37467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391220061.225:566): pid=37467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391220061.225:567): login pid=37467 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=55 >type=USER_START msg=audit(1391220061.235:568): pid=37467 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391220061.235:569): pid=37467 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391220061.275:570): avc: denied { read } for pid=37486 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391220061.275:570): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc683a570 a2=84800 a3=0 items=0 ppid=37484 pid=37486 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=55 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391220061.295:571): pid=37467 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391220061.295:572): pid=37467 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391220601.306:573): pid=37665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391220601.306:574): pid=37665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391220601.316:575): login pid=37665 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=56 >type=USER_START msg=audit(1391220601.316:576): pid=37665 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391220601.316:577): pid=37665 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391220601.676:578): pid=37665 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391220601.676:579): pid=37665 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391221501.696:580): pid=37946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391221501.696:581): pid=37946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391221501.696:582): login pid=37946 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=57 >type=USER_START msg=audit(1391221501.696:583): pid=37946 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391221501.696:584): pid=37946 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391221501.826:585): pid=37946 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391221501.826:586): pid=37946 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391222401.837:587): pid=38228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391222401.837:588): pid=38228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391222401.837:589): login pid=38228 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=58 >type=USER_START msg=audit(1391222401.837:590): pid=38228 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391222401.837:591): pid=38228 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391222402.147:592): pid=38228 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391222402.147:593): pid=38228 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391223301.157:594): pid=38511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391223301.157:595): pid=38511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391223301.157:596): login pid=38511 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=59 >type=USER_START msg=audit(1391223301.167:597): pid=38511 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391223301.167:598): pid=38511 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391223301.307:599): pid=38511 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391223301.307:600): pid=38511 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391223661.317:601): pid=38629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391223661.317:602): pid=38629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391223661.317:603): login pid=38629 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=60 >type=USER_START msg=audit(1391223661.327:604): pid=38629 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391223661.327:605): pid=38629 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391223661.347:606): avc: denied { read } for pid=38648 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391223661.347:606): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffd149010 a2=84800 a3=0 items=0 ppid=38646 pid=38648 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=60 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391223661.357:607): pid=38629 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391223661.357:608): pid=38629 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391224201.368:609): pid=38826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391224201.368:610): pid=38826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391224201.368:611): login pid=38826 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=61 >type=USER_START msg=audit(1391224201.378:612): pid=38826 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391224201.378:613): pid=38826 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391224201.738:614): pid=38826 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391224201.748:615): pid=38826 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391225101.758:616): pid=39107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391225101.758:617): pid=39107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391225101.758:618): login pid=39107 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=62 >type=USER_START msg=audit(1391225101.758:619): pid=39107 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391225101.758:620): pid=39107 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391225101.878:621): pid=39107 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391225101.888:622): pid=39107 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391226001.899:623): pid=39389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391226001.899:624): pid=39389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391226001.899:625): login pid=39389 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=63 >type=USER_START msg=audit(1391226001.899:626): pid=39389 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391226001.899:627): pid=39389 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391226002.489:628): pid=39389 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391226002.489:629): pid=39389 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391226901.499:630): pid=39672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391226901.499:631): pid=39672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391226901.499:632): login pid=39672 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=64 >type=USER_START msg=audit(1391226901.509:633): pid=39672 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391226901.509:634): pid=39672 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391226901.639:635): pid=39672 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391226901.639:636): pid=39672 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391227261.650:637): pid=39790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391227261.650:638): pid=39790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391227261.650:639): login pid=39790 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=65 >type=USER_START msg=audit(1391227261.660:640): pid=39790 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391227261.660:641): pid=39790 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391227261.680:642): avc: denied { read } for pid=39809 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391227261.680:642): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff3799280 a2=84800 a3=0 items=0 ppid=39807 pid=39809 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=65 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391227261.690:643): pid=39790 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391227261.690:644): pid=39790 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391227801.710:645): pid=39987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391227801.710:646): pid=39987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391227801.710:647): login pid=39987 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=66 >type=USER_START msg=audit(1391227801.710:648): pid=39987 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391227801.710:649): pid=39987 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391227802.040:650): pid=39987 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391227802.040:651): pid=39987 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391228701.060:652): pid=40268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391228701.060:653): pid=40268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391228701.060:654): login pid=40268 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=67 >type=USER_START msg=audit(1391228701.070:655): pid=40268 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391228701.070:656): pid=40268 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391228701.270:657): pid=40268 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391228701.280:658): pid=40268 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391229601.291:659): pid=40551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391229601.291:660): pid=40551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391229601.291:661): login pid=40551 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=68 >type=USER_START msg=audit(1391229601.291:662): pid=40551 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391229601.291:663): pid=40551 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391229601.601:664): pid=40551 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391229601.601:665): pid=40551 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391230501.612:666): pid=40833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391230501.612:667): pid=40833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391230501.612:668): login pid=40833 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=69 >type=USER_START msg=audit(1391230501.612:669): pid=40833 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391230501.612:670): pid=40833 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391230501.742:671): pid=40833 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391230501.742:672): pid=40833 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391230861.752:673): pid=40951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391230861.752:674): pid=40951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391230861.752:675): login pid=40951 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=70 >type=USER_START msg=audit(1391230861.752:676): pid=40951 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391230861.752:677): pid=40951 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391230861.772:678): avc: denied { read } for pid=40970 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391230861.772:678): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc5c950d0 a2=84800 a3=0 items=0 ppid=40968 pid=40970 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=70 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391230861.792:679): pid=40951 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391230861.792:680): pid=40951 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391231401.802:681): pid=41148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="unbound" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391231401.802:682): pid=41148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="unbound" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391231401.802:683): login pid=41148 uid=0 old auid=4294967295 new auid=997 old ses=4294967295 new ses=71 >type=USER_ACCT msg=audit(1391231401.812:684): pid=41149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391231401.812:685): pid=41149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391231401.812:686): login pid=41149 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=72 >type=USER_START msg=audit(1391231401.812:687): pid=41148 uid=0 auid=997 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="unbound" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391231401.812:688): pid=41148 uid=0 auid=997 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="unbound" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1391231401.812:689): pid=41149 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391231401.812:690): pid=41149 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391231402.202:691): pid=41149 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391231402.202:692): pid=41149 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391231418.452:693): pid=41148 uid=0 auid=997 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="unbound" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391231418.452:694): pid=41148 uid=0 auid=997 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="unbound" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391231641.882:695): avc: denied { read } for pid=41239 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391231641.882:695): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffed42b800 a2=84800 a3=0 items=0 ppid=41237 pid=41239 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=70 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1391232301.463:696): pid=41874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391232301.463:697): pid=41874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391232301.473:698): login pid=41874 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=73 >type=USER_START msg=audit(1391232301.473:699): pid=41874 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391232301.473:700): pid=41874 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391232301.483:701): pid=41874 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391232301.483:702): pid=41874 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391233201.493:703): pid=42151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391233201.493:704): pid=42151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391233201.493:705): login pid=42151 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=74 >type=USER_START msg=audit(1391233201.503:706): pid=42151 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391233201.503:707): pid=42151 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391233201.503:708): pid=42151 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391233201.513:709): pid=42151 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391234101.524:710): pid=42431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391234101.524:711): pid=42431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391234101.524:712): login pid=42431 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=75 >type=USER_START msg=audit(1391234101.524:713): pid=42431 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391234101.524:714): pid=42431 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391234101.534:715): pid=42431 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391234101.534:716): pid=42431 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391234461.544:717): pid=42544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391234461.544:718): pid=42544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391234461.544:719): login pid=42544 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=76 >type=USER_START msg=audit(1391234461.544:720): pid=42544 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391234461.544:721): pid=42544 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391234461.564:722): avc: denied { read } for pid=42560 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391234461.564:722): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd9223190 a2=84800 a3=0 items=0 ppid=42558 pid=42560 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=76 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391234461.574:723): pid=42544 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391234461.574:724): pid=42544 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391235001.584:725): pid=42739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391235001.584:726): pid=42739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391235001.584:727): login pid=42739 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=77 >type=USER_START msg=audit(1391235001.594:728): pid=42739 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391235001.594:729): pid=42739 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391235001.594:730): pid=42739 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391235001.604:731): pid=42739 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391235901.615:732): pid=43015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391235901.615:733): pid=43015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391235901.615:734): login pid=43015 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=78 >type=USER_START msg=audit(1391235901.625:735): pid=43015 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391235901.625:736): pid=43015 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391235901.635:737): pid=43015 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391235901.635:738): pid=43015 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391236801.645:739): pid=43294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391236801.645:740): pid=43294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391236801.645:741): login pid=43294 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=79 >type=USER_START msg=audit(1391236801.645:742): pid=43294 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391236801.645:743): pid=43294 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391236801.665:744): pid=43294 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391236801.665:745): pid=43294 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391237701.676:746): pid=43573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391237701.676:747): pid=43573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391237701.676:748): login pid=43573 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=80 >type=USER_START msg=audit(1391237701.676:749): pid=43573 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391237701.676:750): pid=43573 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391237701.686:751): pid=43573 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391237701.686:752): pid=43573 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391238061.696:753): pid=43687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391238061.696:754): pid=43687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391238061.696:755): login pid=43687 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=81 >type=USER_START msg=audit(1391238061.696:756): pid=43687 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391238061.696:757): pid=43687 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391238061.716:758): avc: denied { read } for pid=43703 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391238061.716:758): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd95b45a0 a2=84800 a3=0 items=0 ppid=43701 pid=43703 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=81 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391238061.726:759): pid=43687 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391238061.726:760): pid=43687 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391238601.736:761): pid=43881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391238601.736:762): pid=43881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391238601.736:763): login pid=43881 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=82 >type=USER_START msg=audit(1391238601.736:764): pid=43881 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391238601.736:765): pid=43881 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391238601.746:766): pid=43881 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391238601.746:767): pid=43881 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391239501.757:768): pid=44158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391239501.757:769): pid=44158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391239501.757:770): login pid=44158 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=83 >type=USER_START msg=audit(1391239501.757:771): pid=44158 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391239501.757:772): pid=44158 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391239501.767:773): pid=44158 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391239501.767:774): pid=44158 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391240401.777:775): pid=44436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391240401.777:776): pid=44436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391240401.777:777): login pid=44436 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=84 >type=USER_START msg=audit(1391240401.777:778): pid=44436 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391240401.777:779): pid=44436 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391240401.787:780): pid=44436 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391240401.787:781): pid=44436 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391241301.798:782): pid=44715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391241301.798:783): pid=44715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391241301.798:784): login pid=44715 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=85 >type=USER_START msg=audit(1391241301.798:785): pid=44715 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391241301.808:786): pid=44715 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391241301.808:787): pid=44715 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391241301.808:788): pid=44715 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391241661.818:789): pid=44830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391241661.818:790): pid=44830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391241661.818:791): login pid=44830 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=86 >type=USER_START msg=audit(1391241661.818:792): pid=44830 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391241661.818:793): pid=44830 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391241661.838:794): avc: denied { read } for pid=44846 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391241661.838:794): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffedfdf300 a2=84800 a3=0 items=0 ppid=44844 pid=44846 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=86 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391241661.848:795): pid=44830 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391241661.848:796): pid=44830 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391242201.858:797): pid=45023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391242201.858:798): pid=45023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391242201.858:799): login pid=45023 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=87 >type=USER_START msg=audit(1391242201.858:800): pid=45023 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391242201.858:801): pid=45023 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391242201.868:802): pid=45023 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391242201.868:803): pid=45023 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391243101.879:804): pid=45301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391243101.879:805): pid=45301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391243101.879:806): login pid=45301 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=88 >type=USER_START msg=audit(1391243101.879:807): pid=45301 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391243101.879:808): pid=45301 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391243101.899:809): pid=45301 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391243101.899:810): pid=45301 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391244001.920:811): pid=45579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391244001.920:812): pid=45579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391244001.920:813): login pid=45579 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=89 >type=USER_START msg=audit(1391244001.920:814): pid=45579 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391244001.920:815): pid=45579 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391244001.940:816): pid=45579 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391244001.940:817): pid=45579 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391244901.950:818): pid=45857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391244901.950:819): pid=45857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391244901.960:820): login pid=45857 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=90 >type=USER_START msg=audit(1391244901.960:821): pid=45857 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391244901.960:822): pid=45857 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391244901.970:823): pid=45857 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391244901.980:824): pid=45857 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391245261.980:825): pid=45971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391245261.980:826): pid=45971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391245261.980:827): login pid=45971 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=91 >type=USER_START msg=audit(1391245261.990:828): pid=45971 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391245261.990:829): pid=45971 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391245262.000:830): avc: denied { read } for pid=45987 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391245262.000:830): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdef6fb20 a2=84800 a3=0 items=0 ppid=45985 pid=45987 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=91 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391245262.020:831): pid=45971 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391245262.020:832): pid=45971 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391245801.031:833): pid=46166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391245801.031:834): pid=46166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391245801.031:835): login pid=46166 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=92 >type=USER_START msg=audit(1391245801.031:836): pid=46166 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391245801.031:837): pid=46166 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391245801.041:838): pid=46166 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391245801.041:839): pid=46166 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391246701.051:840): pid=46443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391246701.051:841): pid=46443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391246701.051:842): login pid=46443 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=93 >type=USER_START msg=audit(1391246701.051:843): pid=46443 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391246701.051:844): pid=46443 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391246701.061:845): pid=46443 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391246701.061:846): pid=46443 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391247601.072:847): pid=46720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391247601.072:848): pid=46720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391247601.072:849): login pid=46720 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=94 >type=USER_START msg=audit(1391247601.072:850): pid=46720 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391247601.072:851): pid=46720 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391247601.082:852): pid=46720 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391247601.082:853): pid=46720 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391248501.092:854): pid=47000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391248501.092:855): pid=47000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391248501.092:856): login pid=47000 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=95 >type=USER_START msg=audit(1391248501.092:857): pid=47000 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391248501.092:858): pid=47000 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391248501.102:859): pid=47000 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391248501.102:860): pid=47000 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391248861.112:861): pid=47114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391248861.112:862): pid=47114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391248861.112:863): login pid=47114 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=96 >type=USER_START msg=audit(1391248861.112:864): pid=47114 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391248861.112:865): pid=47114 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391248861.132:866): avc: denied { read } for pid=47130 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391248861.132:866): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcde071f0 a2=84800 a3=0 items=0 ppid=47128 pid=47130 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=96 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391248861.152:867): pid=47114 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391248861.162:868): pid=47114 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391249401.163:869): pid=47307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391249401.163:870): pid=47307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391249401.163:871): login pid=47307 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=97 >type=USER_START msg=audit(1391249401.173:872): pid=47307 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391249401.173:873): pid=47307 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391249401.173:874): pid=47307 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391249401.183:875): pid=47307 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391250301.183:876): pid=47584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391250301.193:877): pid=47584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391250301.193:878): login pid=47584 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=98 >type=USER_START msg=audit(1391250301.193:879): pid=47584 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391250301.193:880): pid=47584 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391250301.203:881): pid=47584 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391250301.203:882): pid=47584 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391251201.214:883): pid=47862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391251201.214:884): pid=47862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391251201.214:885): login pid=47862 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=99 >type=USER_START msg=audit(1391251201.214:886): pid=47862 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391251201.214:887): pid=47862 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391251201.224:888): pid=47862 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391251201.224:889): pid=47862 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391252101.234:890): pid=48141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391252101.234:891): pid=48141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391252101.234:892): login pid=48141 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=100 >type=USER_START msg=audit(1391252101.244:893): pid=48141 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391252101.244:894): pid=48141 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391252101.254:895): pid=48141 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391252101.254:896): pid=48141 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391252461.265:897): pid=48255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391252461.265:898): pid=48255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391252461.265:899): login pid=48255 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=101 >type=USER_START msg=audit(1391252461.265:900): pid=48255 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391252461.265:901): pid=48255 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391252461.285:902): avc: denied { read } for pid=48271 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391252461.285:902): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe5e7f260 a2=84800 a3=0 items=0 ppid=48269 pid=48271 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=101 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391252461.305:903): pid=48255 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391252461.305:904): pid=48255 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391253001.315:905): pid=48449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391253001.315:906): pid=48449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391253001.315:907): login pid=48449 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=102 >type=USER_START msg=audit(1391253001.325:908): pid=48449 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391253001.325:909): pid=48449 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391253001.335:910): pid=48449 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391253001.335:911): pid=48449 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391253901.335:912): pid=48726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391253901.335:913): pid=48726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391253901.335:914): login pid=48726 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=103 >type=USER_START msg=audit(1391253901.335:915): pid=48726 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391253901.345:916): pid=48726 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391253901.345:917): pid=48726 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391253901.345:918): pid=48726 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391254801.356:919): pid=49005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391254801.356:920): pid=49005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391254801.356:921): login pid=49005 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=104 >type=USER_START msg=audit(1391254801.366:922): pid=49005 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391254801.366:923): pid=49005 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391254801.366:924): pid=49005 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391254801.366:925): pid=49005 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391255701.376:926): pid=49283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391255701.376:927): pid=49283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391255701.376:928): login pid=49283 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=105 >type=USER_START msg=audit(1391255701.386:929): pid=49283 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391255701.386:930): pid=49283 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391255701.386:931): pid=49283 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391255701.396:932): pid=49283 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391256061.397:933): pid=49397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391256061.397:934): pid=49397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391256061.397:935): login pid=49397 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=106 >type=USER_START msg=audit(1391256061.407:936): pid=49397 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391256061.407:937): pid=49397 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391256061.417:938): avc: denied { read } for pid=49413 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391256061.417:938): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdd30e570 a2=84800 a3=0 items=0 ppid=49411 pid=49413 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=106 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391256061.427:939): pid=49397 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391256061.437:940): pid=49397 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391256601.437:941): pid=49591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391256601.437:942): pid=49591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391256601.437:943): login pid=49591 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=107 >type=USER_START msg=audit(1391256601.447:944): pid=49591 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391256601.447:945): pid=49591 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391256601.447:946): pid=49591 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391256601.457:947): pid=49591 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391257501.468:948): pid=49869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391257501.468:949): pid=49869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391257501.468:950): login pid=49869 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=108 >type=USER_START msg=audit(1391257501.468:951): pid=49869 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391257501.468:952): pid=49869 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391257501.478:953): pid=49869 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391257501.478:954): pid=49869 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391258401.488:955): pid=50146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391258401.488:956): pid=50146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391258401.488:957): login pid=50146 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=109 >type=USER_START msg=audit(1391258401.488:958): pid=50146 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391258401.488:959): pid=50146 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391258401.498:960): pid=50146 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391258401.498:961): pid=50146 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391259301.509:962): pid=50425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391259301.509:963): pid=50425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391259301.509:964): login pid=50425 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=110 >type=USER_START msg=audit(1391259301.509:965): pid=50425 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391259301.509:966): pid=50425 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391259301.519:967): pid=50425 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391259301.519:968): pid=50425 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391259661.529:969): pid=50538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391259661.529:970): pid=50538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391259661.529:971): login pid=50538 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=111 >type=USER_START msg=audit(1391259661.529:972): pid=50538 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391259661.529:973): pid=50538 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391259661.549:974): avc: denied { read } for pid=50554 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391259661.549:974): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc6e4f6e0 a2=84800 a3=0 items=0 ppid=50552 pid=50554 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=111 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391259661.559:975): pid=50538 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391259661.559:976): pid=50538 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391260201.569:977): pid=50733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391260201.569:978): pid=50733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391260201.569:979): login pid=50733 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=112 >type=USER_START msg=audit(1391260201.569:980): pid=50733 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391260201.569:981): pid=50733 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391260201.579:982): pid=50733 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391260201.579:983): pid=50733 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391261101.590:984): pid=51009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391261101.590:985): pid=51009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391261101.590:986): login pid=51009 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=113 >type=USER_START msg=audit(1391261101.600:987): pid=51009 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391261101.600:988): pid=51009 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391261101.610:989): pid=51009 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391261101.610:990): pid=51009 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391262001.630:991): pid=51288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391262001.630:992): pid=51288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391262001.630:993): login pid=51288 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=114 >type=USER_START msg=audit(1391262001.630:994): pid=51288 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391262001.630:995): pid=51288 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391262001.650:996): pid=51288 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391262001.660:997): pid=51288 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391262901.671:998): pid=51567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391262901.671:999): pid=51567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391262901.671:1000): login pid=51567 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=115 >type=USER_START msg=audit(1391262901.671:1001): pid=51567 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391262901.671:1002): pid=51567 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391262901.681:1003): pid=51567 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391262901.681:1004): pid=51567 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391263261.691:1005): pid=51681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391263261.691:1006): pid=51681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391263261.691:1007): login pid=51681 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=116 >type=USER_START msg=audit(1391263261.691:1008): pid=51681 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391263261.691:1009): pid=51681 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391263261.701:1010): avc: denied { read } for pid=51697 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391263261.701:1010): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc5d68e40 a2=84800 a3=0 items=0 ppid=51695 pid=51697 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=116 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391263261.721:1011): pid=51681 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391263261.721:1012): pid=51681 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391263801.731:1013): pid=51875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391263801.731:1014): pid=51875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391263801.731:1015): login pid=51875 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=117 >type=USER_START msg=audit(1391263801.731:1016): pid=51875 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391263801.731:1017): pid=51875 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391263801.741:1018): pid=51875 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391263801.741:1019): pid=51875 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391264701.752:1020): pid=52152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391264701.752:1021): pid=52152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391264701.752:1022): login pid=52152 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=118 >type=USER_START msg=audit(1391264701.752:1023): pid=52152 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391264701.752:1024): pid=52152 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391264701.762:1025): pid=52152 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391264701.762:1026): pid=52152 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391265601.772:1027): pid=52430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391265601.772:1028): pid=52430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391265601.772:1029): login pid=52430 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=119 >type=USER_START msg=audit(1391265601.772:1030): pid=52430 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391265601.772:1031): pid=52430 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391265601.782:1032): pid=52430 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391265601.782:1033): pid=52430 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391266501.793:1034): pid=52709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391266501.793:1035): pid=52709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391266501.793:1036): login pid=52709 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=120 >type=USER_START msg=audit(1391266501.793:1037): pid=52709 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391266501.793:1038): pid=52709 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391266501.803:1039): pid=52709 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391266501.803:1040): pid=52709 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391266861.813:1041): pid=52823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391266861.813:1042): pid=52823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391266861.813:1043): login pid=52823 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=121 >type=USER_START msg=audit(1391266861.813:1044): pid=52823 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391266861.813:1045): pid=52823 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391266861.833:1046): avc: denied { read } for pid=52839 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391266861.833:1046): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe6cae400 a2=84800 a3=0 items=0 ppid=52837 pid=52839 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=121 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391266861.853:1047): pid=52823 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391266861.853:1048): pid=52823 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391267401.863:1049): pid=53017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391267401.863:1050): pid=53017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391267401.863:1051): login pid=53017 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=122 >type=USER_START msg=audit(1391267401.863:1052): pid=53017 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391267401.863:1053): pid=53017 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391267401.873:1054): pid=53017 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391267401.873:1055): pid=53017 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391268301.884:1056): pid=53295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391268301.884:1057): pid=53295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391268301.884:1058): login pid=53295 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=123 >type=USER_START msg=audit(1391268301.884:1059): pid=53295 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391268301.884:1060): pid=53295 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391268301.894:1061): pid=53295 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391268301.894:1062): pid=53295 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391269201.905:1063): pid=53572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391269201.905:1064): pid=53572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391269201.905:1065): login pid=53572 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=124 >type=USER_START msg=audit(1391269201.915:1066): pid=53572 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391269201.915:1067): pid=53572 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391269201.925:1068): pid=53572 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391269201.935:1069): pid=53572 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391270101.945:1070): pid=53851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391270101.945:1071): pid=53851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391270101.945:1072): login pid=53851 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=125 >type=USER_START msg=audit(1391270101.955:1073): pid=53851 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391270101.955:1074): pid=53851 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391270101.965:1075): pid=53851 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391270101.965:1076): pid=53851 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1391270290.275:1077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391270290.275:1078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391270461.975:1079): pid=53967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391270461.975:1080): pid=53967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391270461.975:1081): login pid=53967 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=126 >type=USER_START msg=audit(1391270461.975:1082): pid=53967 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391270461.975:1083): pid=53967 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391270462.015:1084): avc: denied { read } for pid=53983 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391270462.015:1084): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe89b16f0 a2=84800 a3=0 items=0 ppid=53981 pid=53983 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=126 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391270462.035:1085): pid=53967 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391270462.035:1086): pid=53967 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391271001.046:1087): pid=54162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391271001.046:1088): pid=54162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391271001.046:1089): login pid=54162 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=127 >type=USER_START msg=audit(1391271001.046:1090): pid=54162 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391271001.046:1091): pid=54162 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391271001.056:1092): pid=54162 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391271001.056:1093): pid=54162 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391271901.066:1094): pid=54438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391271901.066:1095): pid=54438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391271901.066:1096): login pid=54438 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=128 >type=USER_START msg=audit(1391271901.076:1097): pid=54438 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391271901.076:1098): pid=54438 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391271901.086:1099): pid=54438 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391271901.086:1100): pid=54438 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391272801.097:1101): pid=54716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391272801.097:1102): pid=54716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391272801.097:1103): login pid=54716 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=129 >type=USER_START msg=audit(1391272801.097:1104): pid=54716 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391272801.097:1105): pid=54716 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391272801.107:1106): pid=54716 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391272801.107:1107): pid=54716 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391273701.117:1108): pid=54996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391273701.117:1109): pid=54996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391273701.117:1110): login pid=54996 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=130 >type=USER_START msg=audit(1391273701.117:1111): pid=54996 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391273701.117:1112): pid=54996 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391273701.127:1113): pid=54996 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391273701.127:1114): pid=54996 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391274061.137:1115): pid=55110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391274061.137:1116): pid=55110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391274061.137:1117): login pid=55110 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=131 >type=USER_START msg=audit(1391274061.137:1118): pid=55110 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391274061.137:1119): pid=55110 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391274061.157:1120): avc: denied { read } for pid=55126 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391274061.157:1120): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffb7cab80 a2=84800 a3=0 items=0 ppid=55124 pid=55126 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=131 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391274061.177:1121): pid=55110 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391274061.177:1122): pid=55110 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391274601.188:1123): pid=55303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391274601.188:1124): pid=55303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391274601.188:1125): login pid=55303 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=132 >type=USER_START msg=audit(1391274601.188:1126): pid=55303 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391274601.188:1127): pid=55303 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391274601.198:1128): pid=55303 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391274601.198:1129): pid=55303 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391275501.208:1130): pid=55581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391275501.208:1131): pid=55581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391275501.208:1132): login pid=55581 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=133 >type=USER_START msg=audit(1391275501.208:1133): pid=55581 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391275501.208:1134): pid=55581 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391275501.218:1135): pid=55581 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391275501.218:1136): pid=55581 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391276401.229:1137): pid=55859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391276401.229:1138): pid=55859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391276401.229:1139): login pid=55859 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=134 >type=USER_START msg=audit(1391276401.229:1140): pid=55859 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391276401.229:1141): pid=55859 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391276401.239:1142): pid=55859 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391276401.239:1143): pid=55859 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391277301.259:1144): pid=56137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391277301.259:1145): pid=56137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391277301.259:1146): login pid=56137 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=135 >type=USER_START msg=audit(1391277301.259:1147): pid=56137 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391277301.259:1148): pid=56137 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391277301.279:1149): pid=56137 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391277301.279:1150): pid=56137 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391277661.290:1151): pid=56251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391277661.290:1152): pid=56251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391277661.290:1153): login pid=56251 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=136 >type=USER_START msg=audit(1391277661.290:1154): pid=56251 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391277661.290:1155): pid=56251 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391277661.310:1156): avc: denied { read } for pid=56267 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391277661.310:1156): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe1eefff0 a2=84800 a3=0 items=0 ppid=56265 pid=56267 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=136 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391277661.330:1157): pid=56251 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391277661.330:1158): pid=56251 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391278201.340:1159): pid=56446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391278201.350:1160): pid=56446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391278201.350:1161): login pid=56446 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=137 >type=USER_START msg=audit(1391278201.350:1162): pid=56446 uid=0 auid=0 ses=137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391278201.350:1163): pid=56446 uid=0 auid=0 ses=137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391278201.360:1164): pid=56446 uid=0 auid=0 ses=137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391278201.370:1165): pid=56446 uid=0 auid=0 ses=137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391279101.380:1166): pid=56723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391279101.380:1167): pid=56723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391279101.380:1168): login pid=56723 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=138 >type=USER_START msg=audit(1391279101.380:1169): pid=56723 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391279101.380:1170): pid=56723 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391279101.390:1171): pid=56723 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391279101.390:1172): pid=56723 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391280001.401:1173): pid=57001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391280001.401:1174): pid=57001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391280001.401:1175): login pid=57001 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=139 >type=USER_START msg=audit(1391280001.401:1176): pid=57001 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391280001.401:1177): pid=57001 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391280001.411:1178): pid=57001 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391280001.411:1179): pid=57001 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391280901.421:1180): pid=57280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391280901.421:1181): pid=57280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391280901.421:1182): login pid=57280 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=140 >type=USER_START msg=audit(1391280901.421:1183): pid=57280 uid=0 auid=0 ses=140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391280901.421:1184): pid=57280 uid=0 auid=0 ses=140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391280901.431:1185): pid=57280 uid=0 auid=0 ses=140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391280901.431:1186): pid=57280 uid=0 auid=0 ses=140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391281261.442:1187): pid=57394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391281261.442:1188): pid=57394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391281261.442:1189): login pid=57394 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=141 >type=USER_START msg=audit(1391281261.442:1190): pid=57394 uid=0 auid=0 ses=141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391281261.442:1191): pid=57394 uid=0 auid=0 ses=141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391281261.462:1192): avc: denied { read } for pid=57410 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391281261.462:1192): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcee60e20 a2=84800 a3=0 items=0 ppid=57408 pid=57410 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=141 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391281261.472:1193): pid=57394 uid=0 auid=0 ses=141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391281261.482:1194): pid=57394 uid=0 auid=0 ses=141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391281801.482:1195): pid=57588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391281801.482:1196): pid=57588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391281801.482:1197): login pid=57588 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=142 >type=USER_START msg=audit(1391281801.492:1198): pid=57588 uid=0 auid=0 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391281801.492:1199): pid=57588 uid=0 auid=0 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391281801.492:1200): pid=57588 uid=0 auid=0 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391281801.502:1201): pid=57588 uid=0 auid=0 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391282701.513:1202): pid=57865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391282701.513:1203): pid=57865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391282701.513:1204): login pid=57865 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=143 >type=USER_START msg=audit(1391282701.513:1205): pid=57865 uid=0 auid=0 ses=143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391282701.513:1206): pid=57865 uid=0 auid=0 ses=143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391282701.523:1207): pid=57865 uid=0 auid=0 ses=143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391282701.523:1208): pid=57865 uid=0 auid=0 ses=143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391283601.533:1209): pid=58143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391283601.533:1210): pid=58143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391283601.533:1211): login pid=58143 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=144 >type=USER_START msg=audit(1391283601.533:1212): pid=58143 uid=0 auid=0 ses=144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391283601.533:1213): pid=58143 uid=0 auid=0 ses=144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391283601.543:1214): pid=58143 uid=0 auid=0 ses=144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391283601.543:1215): pid=58143 uid=0 auid=0 ses=144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391284501.554:1216): pid=58423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391284501.554:1217): pid=58423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391284501.554:1218): login pid=58423 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=145 >type=USER_START msg=audit(1391284501.554:1219): pid=58423 uid=0 auid=0 ses=145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391284501.554:1220): pid=58423 uid=0 auid=0 ses=145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391284501.564:1221): pid=58423 uid=0 auid=0 ses=145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391284501.564:1222): pid=58423 uid=0 auid=0 ses=145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391284861.574:1223): pid=58536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391284861.574:1224): pid=58536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391284861.574:1225): login pid=58536 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=146 >type=USER_START msg=audit(1391284861.574:1226): pid=58536 uid=0 auid=0 ses=146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391284861.574:1227): pid=58536 uid=0 auid=0 ses=146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391284861.594:1228): avc: denied { read } for pid=58552 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391284861.594:1228): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe38c69e0 a2=84800 a3=0 items=0 ppid=58550 pid=58552 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=146 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391284861.604:1229): pid=58536 uid=0 auid=0 ses=146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391284861.604:1230): pid=58536 uid=0 auid=0 ses=146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391285401.624:1231): pid=58729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391285401.624:1232): pid=58729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391285401.624:1233): login pid=58729 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=147 >type=USER_START msg=audit(1391285401.624:1234): pid=58729 uid=0 auid=0 ses=147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391285401.624:1235): pid=58729 uid=0 auid=0 ses=147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391285401.634:1236): pid=58729 uid=0 auid=0 ses=147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391285401.644:1237): pid=58729 uid=0 auid=0 ses=147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391286301.655:1238): pid=59006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391286301.655:1239): pid=59006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391286301.655:1240): login pid=59006 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=148 >type=USER_START msg=audit(1391286301.665:1241): pid=59006 uid=0 auid=0 ses=148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391286301.665:1242): pid=59006 uid=0 auid=0 ses=148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391286301.675:1243): pid=59006 uid=0 auid=0 ses=148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391286301.675:1244): pid=59006 uid=0 auid=0 ses=148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391287201.675:1245): pid=59285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391287201.675:1246): pid=59285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391287201.675:1247): login pid=59285 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=149 >type=USER_START msg=audit(1391287201.675:1248): pid=59285 uid=0 auid=0 ses=149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391287201.685:1249): pid=59285 uid=0 auid=0 ses=149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391287201.685:1250): pid=59285 uid=0 auid=0 ses=149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391287201.685:1251): pid=59285 uid=0 auid=0 ses=149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391288101.696:1252): pid=59563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391288101.696:1253): pid=59563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391288101.696:1254): login pid=59563 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=150 >type=USER_START msg=audit(1391288101.706:1255): pid=59563 uid=0 auid=0 ses=150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391288101.706:1256): pid=59563 uid=0 auid=0 ses=150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391288101.706:1257): pid=59563 uid=0 auid=0 ses=150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391288101.716:1258): pid=59563 uid=0 auid=0 ses=150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391288461.716:1259): pid=59678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391288461.716:1260): pid=59678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391288461.716:1261): login pid=59678 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=151 >type=USER_START msg=audit(1391288461.726:1262): pid=59678 uid=0 auid=0 ses=151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391288461.726:1263): pid=59678 uid=0 auid=0 ses=151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391288461.736:1264): avc: denied { read } for pid=59694 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391288461.736:1264): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffca960e90 a2=84800 a3=0 items=0 ppid=59692 pid=59694 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=151 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391288461.756:1265): pid=59678 uid=0 auid=0 ses=151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391288461.756:1266): pid=59678 uid=0 auid=0 ses=151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391289001.766:1267): pid=59872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391289001.766:1268): pid=59872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391289001.766:1269): login pid=59872 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=152 >type=USER_START msg=audit(1391289001.766:1270): pid=59872 uid=0 auid=0 ses=152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391289001.766:1271): pid=59872 uid=0 auid=0 ses=152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391289001.776:1272): pid=59872 uid=0 auid=0 ses=152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391289001.776:1273): pid=59872 uid=0 auid=0 ses=152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391289901.787:1274): pid=60149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391289901.787:1275): pid=60149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391289901.787:1276): login pid=60149 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=153 >type=USER_START msg=audit(1391289901.787:1277): pid=60149 uid=0 auid=0 ses=153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391289901.787:1278): pid=60149 uid=0 auid=0 ses=153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391289901.797:1279): pid=60149 uid=0 auid=0 ses=153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391289901.797:1280): pid=60149 uid=0 auid=0 ses=153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391290801.807:1281): pid=60427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391290801.807:1282): pid=60427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391290801.807:1283): login pid=60427 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=154 >type=USER_START msg=audit(1391290801.817:1284): pid=60427 uid=0 auid=0 ses=154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391290801.817:1285): pid=60427 uid=0 auid=0 ses=154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391290801.817:1286): pid=60427 uid=0 auid=0 ses=154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391290801.817:1287): pid=60427 uid=0 auid=0 ses=154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391291701.828:1288): pid=60706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391291701.828:1289): pid=60706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391291701.828:1290): login pid=60706 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=155 >type=USER_START msg=audit(1391291701.838:1291): pid=60706 uid=0 auid=0 ses=155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391291701.838:1292): pid=60706 uid=0 auid=0 ses=155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391291701.838:1293): pid=60706 uid=0 auid=0 ses=155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391291701.848:1294): pid=60706 uid=0 auid=0 ses=155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391292061.848:1295): pid=60820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391292061.848:1296): pid=60820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391292061.848:1297): login pid=60820 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=156 >type=USER_START msg=audit(1391292061.858:1298): pid=60820 uid=0 auid=0 ses=156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391292061.858:1299): pid=60820 uid=0 auid=0 ses=156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391292061.868:1300): avc: denied { read } for pid=60836 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391292061.868:1300): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd0da22f0 a2=84800 a3=0 items=0 ppid=60834 pid=60836 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=156 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391292061.888:1301): pid=60820 uid=0 auid=0 ses=156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391292061.888:1302): pid=60820 uid=0 auid=0 ses=156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391292601.898:1303): pid=61014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391292601.898:1304): pid=61014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391292601.898:1305): login pid=61014 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=157 >type=USER_START msg=audit(1391292601.908:1306): pid=61014 uid=0 auid=0 ses=157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391292601.908:1307): pid=61014 uid=0 auid=0 ses=157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391292601.908:1308): pid=61014 uid=0 auid=0 ses=157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391292601.908:1309): pid=61014 uid=0 auid=0 ses=157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391293501.919:1310): pid=61292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391293501.919:1311): pid=61292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391293501.919:1312): login pid=61292 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=158 >type=USER_START msg=audit(1391293501.929:1313): pid=61292 uid=0 auid=0 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391293501.929:1314): pid=61292 uid=0 auid=0 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391293501.929:1315): pid=61292 uid=0 auid=0 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391293501.939:1316): pid=61292 uid=0 auid=0 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391294401.949:1317): pid=61569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391294401.949:1318): pid=61569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391294401.949:1319): login pid=61569 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=159 >type=USER_START msg=audit(1391294401.959:1320): pid=61569 uid=0 auid=0 ses=159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391294401.959:1321): pid=61569 uid=0 auid=0 ses=159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391294401.969:1322): pid=61569 uid=0 auid=0 ses=159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391294401.979:1323): pid=61569 uid=0 auid=0 ses=159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391295301.990:1324): pid=61848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391295301.990:1325): pid=61848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391295301.990:1326): login pid=61848 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=160 >type=USER_START msg=audit(1391295301.990:1327): pid=61848 uid=0 auid=0 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391295302.000:1328): pid=61848 uid=0 auid=0 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391295302.010:1329): pid=61848 uid=0 auid=0 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391295302.020:1330): pid=61848 uid=0 auid=0 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391295661.020:1331): pid=61962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391295661.020:1332): pid=61962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391295661.030:1333): login pid=61962 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=161 >type=USER_START msg=audit(1391295661.030:1334): pid=61962 uid=0 auid=0 ses=161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391295661.030:1335): pid=61962 uid=0 auid=0 ses=161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391295661.040:1336): avc: denied { read } for pid=61978 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391295661.040:1336): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc11dfd20 a2=84800 a3=0 items=0 ppid=61976 pid=61978 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=161 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391295661.060:1337): pid=61962 uid=0 auid=0 ses=161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391295661.060:1338): pid=61962 uid=0 auid=0 ses=161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391296201.071:1339): pid=62159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391296201.071:1340): pid=62159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391296201.071:1341): login pid=62159 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=162 >type=USER_START msg=audit(1391296201.081:1342): pid=62159 uid=0 auid=0 ses=162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391296201.081:1343): pid=62159 uid=0 auid=0 ses=162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391296201.081:1344): pid=62159 uid=0 auid=0 ses=162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391296201.081:1345): pid=62159 uid=0 auid=0 ses=162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391297101.091:1346): pid=62435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391297101.091:1347): pid=62435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391297101.091:1348): login pid=62435 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=163 >type=USER_START msg=audit(1391297101.101:1349): pid=62435 uid=0 auid=0 ses=163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391297101.101:1350): pid=62435 uid=0 auid=0 ses=163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391297101.101:1351): pid=62435 uid=0 auid=0 ses=163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391297101.111:1352): pid=62435 uid=0 auid=0 ses=163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391298001.112:1353): pid=62713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391298001.112:1354): pid=62713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391298001.112:1355): login pid=62713 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=164 >type=USER_START msg=audit(1391298001.122:1356): pid=62713 uid=0 auid=0 ses=164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391298001.122:1357): pid=62713 uid=0 auid=0 ses=164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391298001.122:1358): pid=62713 uid=0 auid=0 ses=164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391298001.132:1359): pid=62713 uid=0 auid=0 ses=164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391298901.142:1360): pid=62993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391298901.142:1361): pid=62993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391298901.142:1362): login pid=62993 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=165 >type=USER_START msg=audit(1391298901.142:1363): pid=62993 uid=0 auid=0 ses=165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391298901.142:1364): pid=62993 uid=0 auid=0 ses=165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391298901.152:1365): pid=62993 uid=0 auid=0 ses=165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391298901.152:1366): pid=62993 uid=0 auid=0 ses=165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391299261.152:1367): pid=63107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391299261.152:1368): pid=63107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391299261.152:1369): login pid=63107 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=166 >type=USER_START msg=audit(1391299261.162:1370): pid=63107 uid=0 auid=0 ses=166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391299261.162:1371): pid=63107 uid=0 auid=0 ses=166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391299261.172:1372): avc: denied { read } for pid=63123 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391299261.172:1372): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe057bd00 a2=84800 a3=0 items=0 ppid=63121 pid=63123 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=166 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391299261.202:1373): pid=63107 uid=0 auid=0 ses=166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391299261.202:1374): pid=63107 uid=0 auid=0 ses=166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391299801.213:1375): pid=63300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391299801.213:1376): pid=63300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391299801.213:1377): login pid=63300 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=167 >type=USER_START msg=audit(1391299801.213:1378): pid=63300 uid=0 auid=0 ses=167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391299801.213:1379): pid=63300 uid=0 auid=0 ses=167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391299801.223:1380): pid=63300 uid=0 auid=0 ses=167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391299801.223:1381): pid=63300 uid=0 auid=0 ses=167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391300701.233:1382): pid=63578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391300701.233:1383): pid=63578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391300701.233:1384): login pid=63578 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=168 >type=USER_START msg=audit(1391300701.233:1385): pid=63578 uid=0 auid=0 ses=168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391300701.233:1386): pid=63578 uid=0 auid=0 ses=168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391300701.243:1387): pid=63578 uid=0 auid=0 ses=168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391300701.243:1388): pid=63578 uid=0 auid=0 ses=168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391301601.254:1389): pid=63855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391301601.254:1390): pid=63855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391301601.254:1391): login pid=63855 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=169 >type=USER_START msg=audit(1391301601.254:1392): pid=63855 uid=0 auid=0 ses=169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391301601.254:1393): pid=63855 uid=0 auid=0 ses=169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391301601.264:1394): pid=63855 uid=0 auid=0 ses=169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391301601.264:1395): pid=63855 uid=0 auid=0 ses=169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391302501.274:1396): pid=64133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391302501.284:1397): pid=64133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391302501.284:1398): login pid=64133 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=170 >type=USER_START msg=audit(1391302501.284:1399): pid=64133 uid=0 auid=0 ses=170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391302501.284:1400): pid=64133 uid=0 auid=0 ses=170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391302501.294:1401): pid=64133 uid=0 auid=0 ses=170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391302501.304:1402): pid=64133 uid=0 auid=0 ses=170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391302861.305:1403): pid=64247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391302861.305:1404): pid=64247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391302861.305:1405): login pid=64247 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=171 >type=USER_START msg=audit(1391302861.315:1406): pid=64247 uid=0 auid=0 ses=171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391302861.315:1407): pid=64247 uid=0 auid=0 ses=171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391302861.325:1408): avc: denied { read } for pid=64263 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391302861.325:1408): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe11c64f0 a2=84800 a3=0 items=0 ppid=64261 pid=64263 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=171 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391302861.335:1409): pid=64247 uid=0 auid=0 ses=171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391302861.345:1410): pid=64247 uid=0 auid=0 ses=171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391303401.355:1411): pid=64442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391303401.355:1412): pid=64442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391303401.355:1413): login pid=64442 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=172 >type=USER_START msg=audit(1391303401.355:1414): pid=64442 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391303401.355:1415): pid=64442 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391303401.375:1416): pid=64442 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391303401.375:1417): pid=64442 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391304301.375:1418): pid=64719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391304301.375:1419): pid=64719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391304301.375:1420): login pid=64719 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=173 >type=USER_START msg=audit(1391304301.375:1421): pid=64719 uid=0 auid=0 ses=173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391304301.375:1422): pid=64719 uid=0 auid=0 ses=173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391304301.385:1423): pid=64719 uid=0 auid=0 ses=173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391304301.385:1424): pid=64719 uid=0 auid=0 ses=173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391305201.396:1425): pid=64997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391305201.396:1426): pid=64997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391305201.396:1427): login pid=64997 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=174 >type=USER_START msg=audit(1391305201.396:1428): pid=64997 uid=0 auid=0 ses=174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391305201.396:1429): pid=64997 uid=0 auid=0 ses=174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391305201.406:1430): pid=64997 uid=0 auid=0 ses=174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391305201.406:1431): pid=64997 uid=0 auid=0 ses=174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391306101.416:1432): pid=65276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391306101.416:1433): pid=65276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391306101.416:1434): login pid=65276 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=175 >type=USER_START msg=audit(1391306101.416:1435): pid=65276 uid=0 auid=0 ses=175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391306101.416:1436): pid=65276 uid=0 auid=0 ses=175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391306101.426:1437): pid=65276 uid=0 auid=0 ses=175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391306101.426:1438): pid=65276 uid=0 auid=0 ses=175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391306461.437:1439): pid=65390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391306461.437:1440): pid=65390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391306461.437:1441): login pid=65390 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=176 >type=USER_START msg=audit(1391306461.437:1442): pid=65390 uid=0 auid=0 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391306461.437:1443): pid=65390 uid=0 auid=0 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391306461.467:1444): avc: denied { read } for pid=65409 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391306461.467:1444): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd2ddab40 a2=84800 a3=0 items=0 ppid=65407 pid=65409 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=176 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391306461.487:1445): pid=65390 uid=0 auid=0 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391306461.487:1446): pid=65390 uid=0 auid=0 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391307001.497:1447): pid=365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391307001.497:1448): pid=365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391307001.497:1449): login pid=365 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=177 >type=USER_START msg=audit(1391307001.507:1450): pid=365 uid=0 auid=0 ses=177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391307001.507:1451): pid=365 uid=0 auid=0 ses=177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391307001.507:1452): pid=365 uid=0 auid=0 ses=177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391307001.517:1453): pid=365 uid=0 auid=0 ses=177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391307901.518:1454): pid=687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391307901.528:1455): pid=687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391307901.528:1456): login pid=687 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=178 >type=USER_START msg=audit(1391307901.528:1457): pid=687 uid=0 auid=0 ses=178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391307901.528:1458): pid=687 uid=0 auid=0 ses=178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391307901.528:1459): pid=687 uid=0 auid=0 ses=178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391307901.538:1460): pid=687 uid=0 auid=0 ses=178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391308801.548:1461): pid=1010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391308801.548:1462): pid=1010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391308801.548:1463): login pid=1010 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=179 >type=USER_START msg=audit(1391308801.548:1464): pid=1010 uid=0 auid=0 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391308801.548:1465): pid=1010 uid=0 auid=0 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391308801.558:1466): pid=1010 uid=0 auid=0 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391308801.558:1467): pid=1010 uid=0 auid=0 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391309701.569:1468): pid=1314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391309701.569:1469): pid=1314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391309701.569:1470): login pid=1314 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=180 >type=USER_START msg=audit(1391309701.569:1471): pid=1314 uid=0 auid=0 ses=180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391309701.569:1472): pid=1314 uid=0 auid=0 ses=180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391309701.579:1473): pid=1314 uid=0 auid=0 ses=180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391309701.579:1474): pid=1314 uid=0 auid=0 ses=180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391310001.589:1475): pid=1435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391310001.589:1476): pid=1435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391310001.589:1477): login pid=1435 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=181 >type=USER_START msg=audit(1391310001.589:1478): pid=1435 uid=0 auid=0 ses=181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391310001.589:1479): pid=1435 uid=0 auid=0 ses=181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391310001.849:1480): pid=1435 uid=0 auid=0 ses=181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391310001.849:1481): pid=1435 uid=0 auid=0 ses=181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391310061.859:1482): pid=1460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391310061.859:1483): pid=1460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391310061.859:1484): login pid=1460 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=182 >type=USER_START msg=audit(1391310061.859:1485): pid=1460 uid=0 auid=0 ses=182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391310061.859:1486): pid=1460 uid=0 auid=0 ses=182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391310061.879:1487): avc: denied { read } for pid=1479 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391310061.879:1487): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd56aad00 a2=84800 a3=0 items=0 ppid=1477 pid=1479 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=182 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391310061.899:1488): pid=1460 uid=0 auid=0 ses=182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391310061.899:1489): pid=1460 uid=0 auid=0 ses=182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391310601.909:1490): pid=1661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391310601.909:1491): pid=1661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391310601.919:1492): login pid=1661 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=183 >type=USER_START msg=audit(1391310601.919:1493): pid=1661 uid=0 auid=0 ses=183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391310601.919:1494): pid=1661 uid=0 auid=0 ses=183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391310601.939:1495): pid=1661 uid=0 auid=0 ses=183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391310601.939:1496): pid=1661 uid=0 auid=0 ses=183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391311501.950:1497): pid=1938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391311501.950:1498): pid=1938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391311501.950:1499): login pid=1938 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=184 >type=USER_START msg=audit(1391311501.960:1500): pid=1938 uid=0 auid=0 ses=184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391311501.960:1501): pid=1938 uid=0 auid=0 ses=184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391311501.970:1502): pid=1938 uid=0 auid=0 ses=184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391311501.980:1503): pid=1938 uid=0 auid=0 ses=184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391312401.990:1504): pid=2224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391312401.990:1505): pid=2224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391312401.990:1506): login pid=2224 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=185 >type=USER_START msg=audit(1391312401.990:1507): pid=2224 uid=0 auid=0 ses=185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391312401.990:1508): pid=2224 uid=0 auid=0 ses=185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391312402.000:1509): pid=2224 uid=0 auid=0 ses=185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391312402.000:1510): pid=2224 uid=0 auid=0 ses=185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391313301.011:1511): pid=2510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391313301.011:1512): pid=2510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391313301.011:1513): login pid=2510 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=186 >type=USER_START msg=audit(1391313301.011:1514): pid=2510 uid=0 auid=0 ses=186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391313301.011:1515): pid=2510 uid=0 auid=0 ses=186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391313301.021:1516): pid=2510 uid=0 auid=0 ses=186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391313301.021:1517): pid=2510 uid=0 auid=0 ses=186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391313661.031:1518): pid=2625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391313661.031:1519): pid=2625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391313661.031:1520): login pid=2625 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=187 >type=USER_START msg=audit(1391313661.031:1521): pid=2625 uid=0 auid=0 ses=187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391313661.031:1522): pid=2625 uid=0 auid=0 ses=187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391313661.051:1523): avc: denied { read } for pid=2644 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391313661.051:1523): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd83d7c30 a2=84800 a3=0 items=0 ppid=2642 pid=2644 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=187 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391313661.071:1524): pid=2625 uid=0 auid=0 ses=187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391313661.071:1525): pid=2625 uid=0 auid=0 ses=187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391314201.081:1526): pid=2822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391314201.081:1527): pid=2822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391314201.081:1528): login pid=2822 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=188 >type=USER_START msg=audit(1391314201.081:1529): pid=2822 uid=0 auid=0 ses=188 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391314201.081:1530): pid=2822 uid=0 auid=0 ses=188 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391314201.091:1531): pid=2822 uid=0 auid=0 ses=188 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391314201.091:1532): pid=2822 uid=0 auid=0 ses=188 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391315101.102:1533): pid=3099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391315101.102:1534): pid=3099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391315101.102:1535): login pid=3099 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=189 >type=USER_START msg=audit(1391315101.112:1536): pid=3099 uid=0 auid=0 ses=189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391315101.112:1537): pid=3099 uid=0 auid=0 ses=189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391315101.112:1538): pid=3099 uid=0 auid=0 ses=189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391315101.112:1539): pid=3099 uid=0 auid=0 ses=189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391316001.122:1540): pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391316001.122:1541): pid=3376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391316001.122:1542): login pid=3376 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=190 >type=USER_START msg=audit(1391316001.132:1543): pid=3376 uid=0 auid=0 ses=190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391316001.132:1544): pid=3376 uid=0 auid=0 ses=190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391316001.132:1545): pid=3376 uid=0 auid=0 ses=190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391316001.132:1546): pid=3376 uid=0 auid=0 ses=190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391316901.143:1547): pid=3656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391316901.143:1548): pid=3656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391316901.143:1549): login pid=3656 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=191 >type=USER_START msg=audit(1391316901.153:1550): pid=3656 uid=0 auid=0 ses=191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391316901.153:1551): pid=3656 uid=0 auid=0 ses=191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391316901.153:1552): pid=3656 uid=0 auid=0 ses=191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391316901.163:1553): pid=3656 uid=0 auid=0 ses=191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391317261.163:1554): pid=3769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391317261.163:1555): pid=3769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391317261.163:1556): login pid=3769 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=192 >type=USER_START msg=audit(1391317261.173:1557): pid=3769 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391317261.173:1558): pid=3769 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391317261.193:1559): avc: denied { read } for pid=3788 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391317261.193:1559): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff9738c60 a2=84800 a3=0 items=0 ppid=3786 pid=3788 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=192 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391317261.203:1560): pid=3769 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391317261.203:1561): pid=3769 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391317561.193:1562): avc: denied { read } for pid=3899 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391317561.193:1562): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdfc495e0 a2=84800 a3=0 items=0 ppid=3897 pid=3899 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=192 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1391317801.223:1563): pid=4028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391317801.223:1564): pid=4028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391317801.223:1565): login pid=4028 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=193 >type=USER_START msg=audit(1391317801.223:1566): pid=4028 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391317801.223:1567): pid=4028 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391317801.233:1568): pid=4028 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391317801.233:1569): pid=4028 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391318701.254:1570): pid=4305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391318701.254:1571): pid=4305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391318701.254:1572): login pid=4305 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=194 >type=USER_START msg=audit(1391318701.254:1573): pid=4305 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391318701.254:1574): pid=4305 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391318701.274:1575): pid=4305 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391318701.274:1576): pid=4305 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391319601.284:1577): pid=4583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391319601.284:1578): pid=4583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391319601.294:1579): login pid=4583 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=195 >type=USER_START msg=audit(1391319601.294:1580): pid=4583 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391319601.294:1581): pid=4583 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391319601.304:1582): pid=4583 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391319601.314:1583): pid=4583 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391320501.325:1584): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391320501.325:1585): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391320501.325:1586): login pid=4862 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=196 >type=USER_START msg=audit(1391320501.325:1587): pid=4862 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391320501.325:1588): pid=4862 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391320501.335:1589): pid=4862 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391320501.335:1590): pid=4862 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391320861.335:1591): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391320861.335:1592): pid=4976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391320861.335:1593): login pid=4976 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=197 >type=USER_START msg=audit(1391320861.335:1594): pid=4976 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391320861.335:1595): pid=4976 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391320861.355:1596): avc: denied { read } for pid=4992 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391320861.355:1596): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc1e9edf0 a2=84800 a3=0 items=0 ppid=4990 pid=4992 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=197 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391320861.365:1597): pid=4976 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391320861.365:1598): pid=4976 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391321401.376:1599): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391321401.376:1600): pid=5170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391321401.376:1601): login pid=5170 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=198 >type=USER_START msg=audit(1391321401.376:1602): pid=5170 uid=0 auid=0 ses=198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391321401.376:1603): pid=5170 uid=0 auid=0 ses=198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391321401.386:1604): pid=5170 uid=0 auid=0 ses=198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391321401.386:1605): pid=5170 uid=0 auid=0 ses=198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391322301.396:1606): pid=5447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391322301.396:1607): pid=5447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391322301.396:1608): login pid=5447 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=199 >type=USER_START msg=audit(1391322301.406:1609): pid=5447 uid=0 auid=0 ses=199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391322301.406:1610): pid=5447 uid=0 auid=0 ses=199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391322301.406:1611): pid=5447 uid=0 auid=0 ses=199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391322301.406:1612): pid=5447 uid=0 auid=0 ses=199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391323201.417:1613): pid=5726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391323201.417:1614): pid=5726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391323201.427:1615): login pid=5726 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=200 >type=USER_START msg=audit(1391323201.427:1616): pid=5726 uid=0 auid=0 ses=200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391323201.427:1617): pid=5726 uid=0 auid=0 ses=200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391323201.427:1618): pid=5726 uid=0 auid=0 ses=200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391323201.437:1619): pid=5726 uid=0 auid=0 ses=200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391324101.447:1620): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391324101.447:1621): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391324101.447:1622): login pid=6004 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=201 >type=USER_START msg=audit(1391324101.447:1623): pid=6004 uid=0 auid=0 ses=201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391324101.447:1624): pid=6004 uid=0 auid=0 ses=201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391324101.457:1625): pid=6004 uid=0 auid=0 ses=201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391324101.457:1626): pid=6004 uid=0 auid=0 ses=201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391324461.467:1627): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391324461.467:1628): pid=6119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391324461.467:1629): login pid=6119 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=202 >type=USER_START msg=audit(1391324461.467:1630): pid=6119 uid=0 auid=0 ses=202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391324461.467:1631): pid=6119 uid=0 auid=0 ses=202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391324461.487:1632): avc: denied { read } for pid=6135 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391324461.487:1632): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff0275d00 a2=84800 a3=0 items=0 ppid=6133 pid=6135 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=202 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391324461.497:1633): pid=6119 uid=0 auid=0 ses=202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391324461.497:1634): pid=6119 uid=0 auid=0 ses=202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391325001.508:1635): pid=6312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391325001.508:1636): pid=6312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391325001.508:1637): login pid=6312 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=203 >type=USER_START msg=audit(1391325001.508:1638): pid=6312 uid=0 auid=0 ses=203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391325001.518:1639): pid=6312 uid=0 auid=0 ses=203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391325001.518:1640): pid=6312 uid=0 auid=0 ses=203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391325001.518:1641): pid=6312 uid=0 auid=0 ses=203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391325901.528:1642): pid=6590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391325901.528:1643): pid=6590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391325901.528:1644): login pid=6590 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=204 >type=USER_START msg=audit(1391325901.538:1645): pid=6590 uid=0 auid=0 ses=204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391325901.538:1646): pid=6590 uid=0 auid=0 ses=204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391325901.538:1647): pid=6590 uid=0 auid=0 ses=204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391325901.548:1648): pid=6590 uid=0 auid=0 ses=204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391326801.559:1649): pid=6868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391326801.559:1650): pid=6868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391326801.559:1651): login pid=6868 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=205 >type=USER_START msg=audit(1391326801.559:1652): pid=6868 uid=0 auid=0 ses=205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391326801.559:1653): pid=6868 uid=0 auid=0 ses=205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391326801.569:1654): pid=6868 uid=0 auid=0 ses=205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391326801.569:1655): pid=6868 uid=0 auid=0 ses=205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391327701.579:1656): pid=7147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391327701.579:1657): pid=7147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391327701.579:1658): login pid=7147 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=206 >type=USER_START msg=audit(1391327701.589:1659): pid=7147 uid=0 auid=0 ses=206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391327701.589:1660): pid=7147 uid=0 auid=0 ses=206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391327701.599:1661): pid=7147 uid=0 auid=0 ses=206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391327701.599:1662): pid=7147 uid=0 auid=0 ses=206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391328061.609:1663): pid=7260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391328061.609:1664): pid=7260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391328061.609:1665): login pid=7260 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=207 >type=USER_START msg=audit(1391328061.609:1666): pid=7260 uid=0 auid=0 ses=207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391328061.609:1667): pid=7260 uid=0 auid=0 ses=207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391328061.629:1668): avc: denied { read } for pid=7276 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391328061.629:1668): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff745f3e0 a2=84800 a3=0 items=0 ppid=7274 pid=7276 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=207 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391328061.649:1669): pid=7260 uid=0 auid=0 ses=207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391328061.649:1670): pid=7260 uid=0 auid=0 ses=207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391328601.660:1671): pid=7455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391328601.660:1672): pid=7455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391328601.660:1673): login pid=7455 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=208 >type=USER_START msg=audit(1391328601.670:1674): pid=7455 uid=0 auid=0 ses=208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391328601.670:1675): pid=7455 uid=0 auid=0 ses=208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391328601.680:1676): pid=7455 uid=0 auid=0 ses=208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391328601.690:1677): pid=7455 uid=0 auid=0 ses=208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391329501.700:1678): pid=7732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391329501.700:1679): pid=7732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391329501.700:1680): login pid=7732 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=209 >type=USER_START msg=audit(1391329501.700:1681): pid=7732 uid=0 auid=0 ses=209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391329501.700:1682): pid=7732 uid=0 auid=0 ses=209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391329501.710:1683): pid=7732 uid=0 auid=0 ses=209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391329501.710:1684): pid=7732 uid=0 auid=0 ses=209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391330401.721:1685): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391330401.721:1686): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391330401.721:1687): login pid=8010 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=210 >type=USER_START msg=audit(1391330401.721:1688): pid=8010 uid=0 auid=0 ses=210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391330401.721:1689): pid=8010 uid=0 auid=0 ses=210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391330401.731:1690): pid=8010 uid=0 auid=0 ses=210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391330401.731:1691): pid=8010 uid=0 auid=0 ses=210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391331301.741:1692): pid=8289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391331301.741:1693): pid=8289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391331301.741:1694): login pid=8289 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=211 >type=USER_START msg=audit(1391331301.741:1695): pid=8289 uid=0 auid=0 ses=211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391331301.741:1696): pid=8289 uid=0 auid=0 ses=211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391331301.751:1697): pid=8289 uid=0 auid=0 ses=211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391331301.751:1698): pid=8289 uid=0 auid=0 ses=211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391331661.762:1699): pid=8403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391331661.762:1700): pid=8403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391331661.762:1701): login pid=8403 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=212 >type=USER_START msg=audit(1391331661.762:1702): pid=8403 uid=0 auid=0 ses=212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391331661.762:1703): pid=8403 uid=0 auid=0 ses=212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391331661.782:1704): avc: denied { read } for pid=8419 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391331661.782:1704): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc9cdabf0 a2=84800 a3=0 items=0 ppid=8417 pid=8419 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=212 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391331661.792:1705): pid=8403 uid=0 auid=0 ses=212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391331661.792:1706): pid=8403 uid=0 auid=0 ses=212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391332201.802:1707): pid=8598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391332201.802:1708): pid=8598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391332201.802:1709): login pid=8598 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=213 >type=USER_START msg=audit(1391332201.802:1710): pid=8598 uid=0 auid=0 ses=213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391332201.802:1711): pid=8598 uid=0 auid=0 ses=213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391332201.812:1712): pid=8598 uid=0 auid=0 ses=213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391332201.812:1713): pid=8598 uid=0 auid=0 ses=213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391333101.822:1714): pid=8874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391333101.822:1715): pid=8874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391333101.822:1716): login pid=8874 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=214 >type=USER_START msg=audit(1391333101.822:1717): pid=8874 uid=0 auid=0 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391333101.822:1718): pid=8874 uid=0 auid=0 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391333101.832:1719): pid=8874 uid=0 auid=0 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391333101.832:1720): pid=8874 uid=0 auid=0 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391334001.843:1721): pid=9152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391334001.843:1722): pid=9152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391334001.843:1723): login pid=9152 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=215 >type=USER_START msg=audit(1391334001.853:1724): pid=9152 uid=0 auid=0 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391334001.853:1725): pid=9152 uid=0 auid=0 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391334001.853:1726): pid=9152 uid=0 auid=0 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391334001.853:1727): pid=9152 uid=0 auid=0 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391334901.864:1728): pid=9432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391334901.864:1729): pid=9432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391334901.864:1730): login pid=9432 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=216 >type=USER_START msg=audit(1391334901.874:1731): pid=9432 uid=0 auid=0 ses=216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391334901.874:1732): pid=9432 uid=0 auid=0 ses=216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391334901.874:1733): pid=9432 uid=0 auid=0 ses=216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391334901.874:1734): pid=9432 uid=0 auid=0 ses=216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391335261.894:1735): pid=9546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391335261.894:1736): pid=9546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391335261.894:1737): login pid=9546 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=217 >type=USER_START msg=audit(1391335261.894:1738): pid=9546 uid=0 auid=0 ses=217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391335261.894:1739): pid=9546 uid=0 auid=0 ses=217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391335261.914:1740): avc: denied { read } for pid=9562 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391335261.914:1740): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffbe72d40 a2=84800 a3=0 items=0 ppid=9560 pid=9562 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=217 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391335261.934:1741): pid=9546 uid=0 auid=0 ses=217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391335261.934:1742): pid=9546 uid=0 auid=0 ses=217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391335801.954:1743): pid=9739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391335801.954:1744): pid=9739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391335801.954:1745): login pid=9739 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=218 >type=USER_START msg=audit(1391335801.954:1746): pid=9739 uid=0 auid=0 ses=218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391335801.954:1747): pid=9739 uid=0 auid=0 ses=218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391335801.974:1748): pid=9739 uid=0 auid=0 ses=218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391335801.974:1749): pid=9739 uid=0 auid=0 ses=218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391336701.985:1750): pid=10017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391336701.985:1751): pid=10017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391336701.985:1752): login pid=10017 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=219 >type=USER_START msg=audit(1391336701.995:1753): pid=10017 uid=0 auid=0 ses=219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391336701.995:1754): pid=10017 uid=0 auid=0 ses=219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391336702.005:1755): pid=10017 uid=0 auid=0 ses=219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391336702.015:1756): pid=10017 uid=0 auid=0 ses=219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391337601.025:1757): pid=10294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391337601.025:1758): pid=10294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391337601.025:1759): login pid=10294 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=220 >type=USER_START msg=audit(1391337601.025:1760): pid=10294 uid=0 auid=0 ses=220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391337601.025:1761): pid=10294 uid=0 auid=0 ses=220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391337601.035:1762): pid=10294 uid=0 auid=0 ses=220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391337601.035:1763): pid=10294 uid=0 auid=0 ses=220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391338501.036:1764): pid=10572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391338501.036:1765): pid=10572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391338501.036:1766): login pid=10572 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=221 >type=USER_START msg=audit(1391338501.036:1767): pid=10572 uid=0 auid=0 ses=221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391338501.036:1768): pid=10572 uid=0 auid=0 ses=221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391338501.046:1769): pid=10572 uid=0 auid=0 ses=221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391338501.046:1770): pid=10572 uid=0 auid=0 ses=221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391338861.056:1771): pid=10686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391338861.056:1772): pid=10686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391338861.056:1773): login pid=10686 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=222 >type=USER_START msg=audit(1391338861.056:1774): pid=10686 uid=0 auid=0 ses=222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391338861.056:1775): pid=10686 uid=0 auid=0 ses=222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391338861.066:1776): avc: denied { read } for pid=10702 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391338861.066:1776): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe1dd6190 a2=84800 a3=0 items=0 ppid=10700 pid=10702 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=222 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391338861.086:1777): pid=10686 uid=0 auid=0 ses=222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391338861.086:1778): pid=10686 uid=0 auid=0 ses=222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391339401.096:1779): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391339401.096:1780): pid=10882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391339401.096:1781): login pid=10882 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=223 >type=USER_START msg=audit(1391339401.096:1782): pid=10882 uid=0 auid=0 ses=223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391339401.096:1783): pid=10882 uid=0 auid=0 ses=223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391339401.106:1784): pid=10882 uid=0 auid=0 ses=223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391339401.106:1785): pid=10882 uid=0 auid=0 ses=223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391340301.117:1786): pid=11159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391340301.117:1787): pid=11159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391340301.117:1788): login pid=11159 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=224 >type=USER_START msg=audit(1391340301.117:1789): pid=11159 uid=0 auid=0 ses=224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391340301.117:1790): pid=11159 uid=0 auid=0 ses=224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391340301.127:1791): pid=11159 uid=0 auid=0 ses=224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391340301.127:1792): pid=11159 uid=0 auid=0 ses=224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391341201.137:1793): pid=11436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391341201.137:1794): pid=11436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391341201.137:1795): login pid=11436 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=225 >type=USER_START msg=audit(1391341201.137:1796): pid=11436 uid=0 auid=0 ses=225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391341201.147:1797): pid=11436 uid=0 auid=0 ses=225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391341201.147:1798): pid=11436 uid=0 auid=0 ses=225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391341201.147:1799): pid=11436 uid=0 auid=0 ses=225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391342101.158:1800): pid=11716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391342101.158:1801): pid=11716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391342101.158:1802): login pid=11716 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=226 >type=USER_START msg=audit(1391342101.168:1803): pid=11716 uid=0 auid=0 ses=226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391342101.168:1804): pid=11716 uid=0 auid=0 ses=226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391342101.168:1805): pid=11716 uid=0 auid=0 ses=226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391342101.168:1806): pid=11716 uid=0 auid=0 ses=226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391342461.178:1807): pid=11830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391342461.178:1808): pid=11830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391342461.178:1809): login pid=11830 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=227 >type=USER_START msg=audit(1391342461.178:1810): pid=11830 uid=0 auid=0 ses=227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391342461.178:1811): pid=11830 uid=0 auid=0 ses=227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391342461.198:1812): avc: denied { read } for pid=11846 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391342461.198:1812): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd0639df0 a2=84800 a3=0 items=0 ppid=11844 pid=11846 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=227 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391342461.208:1813): pid=11830 uid=0 auid=0 ses=227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391342461.208:1814): pid=11830 uid=0 auid=0 ses=227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391343001.218:1815): pid=12024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391343001.218:1816): pid=12024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391343001.218:1817): login pid=12024 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=228 >type=USER_START msg=audit(1391343001.228:1818): pid=12024 uid=0 auid=0 ses=228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391343001.228:1819): pid=12024 uid=0 auid=0 ses=228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391343001.228:1820): pid=12024 uid=0 auid=0 ses=228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391343001.228:1821): pid=12024 uid=0 auid=0 ses=228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391343901.249:1822): pid=12301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391343901.249:1823): pid=12301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391343901.249:1824): login pid=12301 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=229 >type=USER_START msg=audit(1391343901.249:1825): pid=12301 uid=0 auid=0 ses=229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391343901.249:1826): pid=12301 uid=0 auid=0 ses=229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391343901.269:1827): pid=12301 uid=0 auid=0 ses=229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391343901.279:1828): pid=12301 uid=0 auid=0 ses=229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391344801.289:1829): pid=12579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391344801.289:1830): pid=12579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391344801.289:1831): login pid=12579 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=230 >type=USER_START msg=audit(1391344801.289:1832): pid=12579 uid=0 auid=0 ses=230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391344801.289:1833): pid=12579 uid=0 auid=0 ses=230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391344801.309:1834): pid=12579 uid=0 auid=0 ses=230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391344801.309:1835): pid=12579 uid=0 auid=0 ses=230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391345701.320:1836): pid=12858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391345701.320:1837): pid=12858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391345701.320:1838): login pid=12858 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=231 >type=USER_START msg=audit(1391345701.320:1839): pid=12858 uid=0 auid=0 ses=231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391345701.320:1840): pid=12858 uid=0 auid=0 ses=231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391345701.330:1841): pid=12858 uid=0 auid=0 ses=231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391345701.340:1842): pid=12858 uid=0 auid=0 ses=231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391346061.340:1843): pid=12972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391346061.340:1844): pid=12972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391346061.340:1845): login pid=12972 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=232 >type=USER_START msg=audit(1391346061.350:1846): pid=12972 uid=0 auid=0 ses=232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391346061.350:1847): pid=12972 uid=0 auid=0 ses=232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391346061.360:1848): avc: denied { read } for pid=12988 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391346061.360:1848): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdfe7aeb0 a2=84800 a3=0 items=0 ppid=12986 pid=12988 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=232 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391346061.380:1849): pid=12972 uid=0 auid=0 ses=232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391346061.390:1850): pid=12972 uid=0 auid=0 ses=232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391346601.391:1851): pid=13166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391346601.391:1852): pid=13166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391346601.391:1853): login pid=13166 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=233 >type=USER_START msg=audit(1391346601.401:1854): pid=13166 uid=0 auid=0 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391346601.401:1855): pid=13166 uid=0 auid=0 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391346601.401:1856): pid=13166 uid=0 auid=0 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391346601.401:1857): pid=13166 uid=0 auid=0 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391347501.411:1858): pid=13443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391347501.411:1859): pid=13443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391347501.411:1860): login pid=13443 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=234 >type=USER_START msg=audit(1391347501.421:1861): pid=13443 uid=0 auid=0 ses=234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391347501.421:1862): pid=13443 uid=0 auid=0 ses=234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391347501.421:1863): pid=13443 uid=0 auid=0 ses=234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391347501.431:1864): pid=13443 uid=0 auid=0 ses=234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391348401.432:1865): pid=13722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391348401.442:1866): pid=13722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391348401.442:1867): login pid=13722 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=235 >type=USER_START msg=audit(1391348401.442:1868): pid=13722 uid=0 auid=0 ses=235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391348401.442:1869): pid=13722 uid=0 auid=0 ses=235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391348401.442:1870): pid=13722 uid=0 auid=0 ses=235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391348401.452:1871): pid=13722 uid=0 auid=0 ses=235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391349301.462:1872): pid=14000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391349301.462:1873): pid=14000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391349301.462:1874): login pid=14000 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=236 >type=USER_START msg=audit(1391349301.462:1875): pid=14000 uid=0 auid=0 ses=236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391349301.462:1876): pid=14000 uid=0 auid=0 ses=236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391349301.472:1877): pid=14000 uid=0 auid=0 ses=236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391349301.472:1878): pid=14000 uid=0 auid=0 ses=236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391349661.472:1879): pid=14114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391349661.472:1880): pid=14114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391349661.472:1881): login pid=14114 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=237 >type=USER_START msg=audit(1391349661.482:1882): pid=14114 uid=0 auid=0 ses=237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391349661.482:1883): pid=14114 uid=0 auid=0 ses=237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391349661.492:1884): avc: denied { read } for pid=14130 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391349661.492:1884): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc3d35a80 a2=84800 a3=0 items=0 ppid=14128 pid=14130 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=237 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391349661.512:1885): pid=14114 uid=0 auid=0 ses=237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391349661.512:1886): pid=14114 uid=0 auid=0 ses=237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391350201.523:1887): pid=14307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391350201.523:1888): pid=14307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391350201.523:1889): login pid=14307 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=238 >type=USER_START msg=audit(1391350201.533:1890): pid=14307 uid=0 auid=0 ses=238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391350201.533:1891): pid=14307 uid=0 auid=0 ses=238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391350201.533:1892): pid=14307 uid=0 auid=0 ses=238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391350201.533:1893): pid=14307 uid=0 auid=0 ses=238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391351101.543:1894): pid=14585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391351101.543:1895): pid=14585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391351101.543:1896): login pid=14585 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=239 >type=USER_START msg=audit(1391351101.553:1897): pid=14585 uid=0 auid=0 ses=239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391351101.553:1898): pid=14585 uid=0 auid=0 ses=239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391351101.553:1899): pid=14585 uid=0 auid=0 ses=239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391351101.563:1900): pid=14585 uid=0 auid=0 ses=239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391352001.574:1901): pid=14862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391352001.574:1902): pid=14862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391352001.574:1903): login pid=14862 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=240 >type=USER_START msg=audit(1391352001.574:1904): pid=14862 uid=0 auid=0 ses=240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391352001.584:1905): pid=14862 uid=0 auid=0 ses=240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391352001.594:1906): pid=14862 uid=0 auid=0 ses=240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391352001.594:1907): pid=14862 uid=0 auid=0 ses=240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391352901.614:1908): pid=15142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391352901.614:1909): pid=15142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391352901.614:1910): login pid=15142 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=241 >type=USER_START msg=audit(1391352901.614:1911): pid=15142 uid=0 auid=0 ses=241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391352901.614:1912): pid=15142 uid=0 auid=0 ses=241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391352901.634:1913): pid=15142 uid=0 auid=0 ses=241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391352901.644:1914): pid=15142 uid=0 auid=0 ses=241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391353261.644:1915): pid=15255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391353261.644:1916): pid=15255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391353261.644:1917): login pid=15255 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=242 >type=USER_START msg=audit(1391353261.654:1918): pid=15255 uid=0 auid=0 ses=242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391353261.654:1919): pid=15255 uid=0 auid=0 ses=242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391353261.664:1920): avc: denied { read } for pid=15271 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391353261.664:1920): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc0582820 a2=84800 a3=0 items=0 ppid=15269 pid=15271 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=242 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391353261.684:1921): pid=15255 uid=0 auid=0 ses=242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391353261.684:1922): pid=15255 uid=0 auid=0 ses=242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391353801.695:1923): pid=15450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391353801.695:1924): pid=15450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391353801.695:1925): login pid=15450 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=243 >type=USER_START msg=audit(1391353801.695:1926): pid=15450 uid=0 auid=0 ses=243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391353801.695:1927): pid=15450 uid=0 auid=0 ses=243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391353801.705:1928): pid=15450 uid=0 auid=0 ses=243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391353801.705:1929): pid=15450 uid=0 auid=0 ses=243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391354701.705:1930): pid=15726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391354701.705:1931): pid=15726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391354701.705:1932): login pid=15726 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=244 >type=USER_START msg=audit(1391354701.705:1933): pid=15726 uid=0 auid=0 ses=244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391354701.705:1934): pid=15726 uid=0 auid=0 ses=244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391354701.715:1935): pid=15726 uid=0 auid=0 ses=244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391354701.715:1936): pid=15726 uid=0 auid=0 ses=244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391355601.726:1937): pid=16005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391355601.726:1938): pid=16005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391355601.726:1939): login pid=16005 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=245 >type=USER_START msg=audit(1391355601.726:1940): pid=16005 uid=0 auid=0 ses=245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391355601.726:1941): pid=16005 uid=0 auid=0 ses=245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391355601.736:1942): pid=16005 uid=0 auid=0 ses=245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391355601.736:1943): pid=16005 uid=0 auid=0 ses=245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391356501.746:1944): pid=16284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391356501.746:1945): pid=16284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391356501.746:1946): login pid=16284 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=246 >type=USER_START msg=audit(1391356501.746:1947): pid=16284 uid=0 auid=0 ses=246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391356501.746:1948): pid=16284 uid=0 auid=0 ses=246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391356501.756:1949): pid=16284 uid=0 auid=0 ses=246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391356501.756:1950): pid=16284 uid=0 auid=0 ses=246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1391356690.277:1951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391356690.277:1952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391356861.767:1953): pid=16400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391356861.767:1954): pid=16400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391356861.767:1955): login pid=16400 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=247 >type=USER_START msg=audit(1391356861.777:1956): pid=16400 uid=0 auid=0 ses=247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391356861.777:1957): pid=16400 uid=0 auid=0 ses=247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391356861.787:1958): avc: denied { read } for pid=16416 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391356861.787:1958): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdc5a7650 a2=84800 a3=0 items=0 ppid=16414 pid=16416 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=247 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391356861.807:1959): pid=16400 uid=0 auid=0 ses=247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391356861.807:1960): pid=16400 uid=0 auid=0 ses=247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391357401.817:1961): pid=16594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391357401.817:1962): pid=16594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391357401.817:1963): login pid=16594 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=248 >type=USER_START msg=audit(1391357401.817:1964): pid=16594 uid=0 auid=0 ses=248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391357401.817:1965): pid=16594 uid=0 auid=0 ses=248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391357401.827:1966): pid=16594 uid=0 auid=0 ses=248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391357401.827:1967): pid=16594 uid=0 auid=0 ses=248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391358301.837:1968): pid=16871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391358301.837:1969): pid=16871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391358301.837:1970): login pid=16871 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=249 >type=USER_START msg=audit(1391358301.837:1971): pid=16871 uid=0 auid=0 ses=249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391358301.837:1972): pid=16871 uid=0 auid=0 ses=249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391358301.847:1973): pid=16871 uid=0 auid=0 ses=249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391358301.847:1974): pid=16871 uid=0 auid=0 ses=249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391359201.858:1975): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391359201.858:1976): pid=17149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391359201.858:1977): login pid=17149 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=250 >type=USER_START msg=audit(1391359201.858:1978): pid=17149 uid=0 auid=0 ses=250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391359201.858:1979): pid=17149 uid=0 auid=0 ses=250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391359201.868:1980): pid=17149 uid=0 auid=0 ses=250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391359201.868:1981): pid=17149 uid=0 auid=0 ses=250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391360101.879:1982): pid=17428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391360101.879:1983): pid=17428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391360101.879:1984): login pid=17428 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=251 >type=USER_START msg=audit(1391360101.879:1985): pid=17428 uid=0 auid=0 ses=251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391360101.879:1986): pid=17428 uid=0 auid=0 ses=251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391360101.889:1987): pid=17428 uid=0 auid=0 ses=251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391360101.889:1988): pid=17428 uid=0 auid=0 ses=251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391360461.899:1989): pid=17542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391360461.899:1990): pid=17542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391360461.899:1991): login pid=17542 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=252 >type=USER_START msg=audit(1391360461.899:1992): pid=17542 uid=0 auid=0 ses=252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391360461.899:1993): pid=17542 uid=0 auid=0 ses=252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391360461.919:1994): avc: denied { read } for pid=17558 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391360461.919:1994): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff6a39b10 a2=84800 a3=0 items=0 ppid=17556 pid=17558 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=252 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391360461.939:1995): pid=17542 uid=0 auid=0 ses=252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391360461.939:1996): pid=17542 uid=0 auid=0 ses=252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391361001.949:1997): pid=17736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391361001.949:1998): pid=17736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391361001.949:1999): login pid=17736 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=253 >type=USER_START msg=audit(1391361001.959:2000): pid=17736 uid=0 auid=0 ses=253 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391361001.959:2001): pid=17736 uid=0 auid=0 ses=253 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391361001.969:2002): pid=17736 uid=0 auid=0 ses=253 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391361001.969:2003): pid=17736 uid=0 auid=0 ses=253 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391361901.990:2004): pid=18014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391361901.990:2005): pid=18014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391361901.990:2006): login pid=18014 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=254 >type=USER_START msg=audit(1391361901.990:2007): pid=18014 uid=0 auid=0 ses=254 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391361901.990:2008): pid=18014 uid=0 auid=0 ses=254 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391361902.010:2009): pid=18014 uid=0 auid=0 ses=254 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391361902.010:2010): pid=18014 uid=0 auid=0 ses=254 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391362801.020:2011): pid=18291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391362801.020:2012): pid=18291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391362801.020:2013): login pid=18291 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=255 >type=USER_START msg=audit(1391362801.020:2014): pid=18291 uid=0 auid=0 ses=255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391362801.020:2015): pid=18291 uid=0 auid=0 ses=255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391362801.030:2016): pid=18291 uid=0 auid=0 ses=255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391362801.030:2017): pid=18291 uid=0 auid=0 ses=255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391363701.041:2018): pid=18570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391363701.041:2019): pid=18570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391363701.041:2020): login pid=18570 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=256 >type=USER_START msg=audit(1391363701.041:2021): pid=18570 uid=0 auid=0 ses=256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391363701.041:2022): pid=18570 uid=0 auid=0 ses=256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391363701.051:2023): pid=18570 uid=0 auid=0 ses=256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391363701.051:2024): pid=18570 uid=0 auid=0 ses=256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391364061.061:2025): pid=18684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391364061.061:2026): pid=18684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391364061.061:2027): login pid=18684 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=257 >type=USER_START msg=audit(1391364061.061:2028): pid=18684 uid=0 auid=0 ses=257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391364061.061:2029): pid=18684 uid=0 auid=0 ses=257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391364061.081:2030): avc: denied { read } for pid=18700 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391364061.081:2030): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc3d6f080 a2=84800 a3=0 items=0 ppid=18698 pid=18700 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=257 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391364061.091:2031): pid=18684 uid=0 auid=0 ses=257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391364061.091:2032): pid=18684 uid=0 auid=0 ses=257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391364601.101:2033): pid=18879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391364601.101:2034): pid=18879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391364601.101:2035): login pid=18879 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=258 >type=USER_START msg=audit(1391364601.101:2036): pid=18879 uid=0 auid=0 ses=258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391364601.111:2037): pid=18879 uid=0 auid=0 ses=258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391364601.111:2038): pid=18879 uid=0 auid=0 ses=258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391364601.111:2039): pid=18879 uid=0 auid=0 ses=258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391365501.122:2040): pid=19155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391365501.122:2041): pid=19155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391365501.122:2042): login pid=19155 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=259 >type=USER_START msg=audit(1391365501.132:2043): pid=19155 uid=0 auid=0 ses=259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391365501.132:2044): pid=19155 uid=0 auid=0 ses=259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391365501.132:2045): pid=19155 uid=0 auid=0 ses=259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391365501.142:2046): pid=19155 uid=0 auid=0 ses=259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391366401.152:2047): pid=19433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391366401.152:2048): pid=19433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391366401.152:2049): login pid=19433 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=260 >type=USER_START msg=audit(1391366401.152:2050): pid=19433 uid=0 auid=0 ses=260 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391366401.152:2051): pid=19433 uid=0 auid=0 ses=260 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391366401.162:2052): pid=19433 uid=0 auid=0 ses=260 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391366401.162:2053): pid=19433 uid=0 auid=0 ses=260 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391367301.173:2054): pid=19713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391367301.173:2055): pid=19713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391367301.173:2056): login pid=19713 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=261 >type=USER_START msg=audit(1391367301.173:2057): pid=19713 uid=0 auid=0 ses=261 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391367301.173:2058): pid=19713 uid=0 auid=0 ses=261 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391367301.183:2059): pid=19713 uid=0 auid=0 ses=261 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391367301.183:2060): pid=19713 uid=0 auid=0 ses=261 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391367661.193:2061): pid=19826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391367661.193:2062): pid=19826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391367661.193:2063): login pid=19826 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=262 >type=USER_START msg=audit(1391367661.193:2064): pid=19826 uid=0 auid=0 ses=262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391367661.193:2065): pid=19826 uid=0 auid=0 ses=262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391367661.203:2066): avc: denied { read } for pid=19842 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391367661.203:2066): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd59eb960 a2=84800 a3=0 items=0 ppid=19840 pid=19842 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=262 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391367661.223:2067): pid=19826 uid=0 auid=0 ses=262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391367661.223:2068): pid=19826 uid=0 auid=0 ses=262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391368201.233:2069): pid=20022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391368201.233:2070): pid=20022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391368201.233:2071): login pid=20022 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=263 >type=USER_START msg=audit(1391368201.233:2072): pid=20022 uid=0 auid=0 ses=263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391368201.233:2073): pid=20022 uid=0 auid=0 ses=263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391368201.253:2074): pid=20022 uid=0 auid=0 ses=263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391368201.253:2075): pid=20022 uid=0 auid=0 ses=263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391369101.264:2076): pid=20300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391369101.264:2077): pid=20300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391369101.264:2078): login pid=20300 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=264 >type=USER_START msg=audit(1391369101.274:2079): pid=20300 uid=0 auid=0 ses=264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391369101.274:2080): pid=20300 uid=0 auid=0 ses=264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391369101.284:2081): pid=20300 uid=0 auid=0 ses=264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391369101.284:2082): pid=20300 uid=0 auid=0 ses=264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391370001.304:2083): pid=20578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391370001.304:2084): pid=20578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391370001.304:2085): login pid=20578 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=265 >type=USER_START msg=audit(1391370001.304:2086): pid=20578 uid=0 auid=0 ses=265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391370001.304:2087): pid=20578 uid=0 auid=0 ses=265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391370001.324:2088): pid=20578 uid=0 auid=0 ses=265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391370001.324:2089): pid=20578 uid=0 auid=0 ses=265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391370901.335:2090): pid=20857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391370901.335:2091): pid=20857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391370901.335:2092): login pid=20857 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=266 >type=USER_START msg=audit(1391370901.335:2093): pid=20857 uid=0 auid=0 ses=266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391370901.335:2094): pid=20857 uid=0 auid=0 ses=266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391370901.345:2095): pid=20857 uid=0 auid=0 ses=266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391370901.345:2096): pid=20857 uid=0 auid=0 ses=266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391371261.345:2097): pid=20971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391371261.345:2098): pid=20971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391371261.345:2099): login pid=20971 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=267 >type=USER_START msg=audit(1391371261.345:2100): pid=20971 uid=0 auid=0 ses=267 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391371261.345:2101): pid=20971 uid=0 auid=0 ses=267 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391371261.365:2102): avc: denied { read } for pid=20987 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391371261.365:2102): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffffa889e0 a2=84800 a3=0 items=0 ppid=20985 pid=20987 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=267 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391371261.385:2103): pid=20971 uid=0 auid=0 ses=267 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391371261.385:2104): pid=20971 uid=0 auid=0 ses=267 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391371801.385:2105): pid=21165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391371801.385:2106): pid=21165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391371801.385:2107): login pid=21165 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=268 >type=USER_START msg=audit(1391371801.385:2108): pid=21165 uid=0 auid=0 ses=268 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391371801.385:2109): pid=21165 uid=0 auid=0 ses=268 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391371801.395:2110): pid=21165 uid=0 auid=0 ses=268 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391371801.395:2111): pid=21165 uid=0 auid=0 ses=268 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391372701.406:2112): pid=21442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391372701.406:2113): pid=21442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391372701.406:2114): login pid=21442 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=269 >type=USER_START msg=audit(1391372701.406:2115): pid=21442 uid=0 auid=0 ses=269 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391372701.406:2116): pid=21442 uid=0 auid=0 ses=269 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391372701.416:2117): pid=21442 uid=0 auid=0 ses=269 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391372701.416:2118): pid=21442 uid=0 auid=0 ses=269 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391373601.427:2119): pid=21721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391373601.427:2120): pid=21721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391373601.427:2121): login pid=21721 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=270 >type=USER_START msg=audit(1391373601.427:2122): pid=21721 uid=0 auid=0 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391373601.437:2123): pid=21721 uid=0 auid=0 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391373601.437:2124): pid=21721 uid=0 auid=0 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391373601.437:2125): pid=21721 uid=0 auid=0 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391374501.447:2126): pid=21999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391374501.447:2127): pid=21999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391374501.447:2128): login pid=21999 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=271 >type=USER_START msg=audit(1391374501.457:2129): pid=21999 uid=0 auid=0 ses=271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391374501.457:2130): pid=21999 uid=0 auid=0 ses=271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391374501.457:2131): pid=21999 uid=0 auid=0 ses=271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391374501.457:2132): pid=21999 uid=0 auid=0 ses=271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391374861.467:2133): pid=22113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391374861.467:2134): pid=22113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391374861.467:2135): login pid=22113 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=272 >type=USER_START msg=audit(1391374861.477:2136): pid=22113 uid=0 auid=0 ses=272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391374861.477:2137): pid=22113 uid=0 auid=0 ses=272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391374861.487:2138): avc: denied { read } for pid=22129 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391374861.487:2138): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffeea93800 a2=84800 a3=0 items=0 ppid=22127 pid=22129 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=272 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391374861.507:2139): pid=22113 uid=0 auid=0 ses=272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391374861.507:2140): pid=22113 uid=0 auid=0 ses=272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391375401.518:2141): pid=22307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391375401.518:2142): pid=22307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391375401.518:2143): login pid=22307 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=273 >type=USER_START msg=audit(1391375401.518:2144): pid=22307 uid=0 auid=0 ses=273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391375401.518:2145): pid=22307 uid=0 auid=0 ses=273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391375401.528:2146): pid=22307 uid=0 auid=0 ses=273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391375401.528:2147): pid=22307 uid=0 auid=0 ses=273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391376301.538:2148): pid=22585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391376301.538:2149): pid=22585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391376301.538:2150): login pid=22585 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=274 >type=USER_START msg=audit(1391376301.548:2151): pid=22585 uid=0 auid=0 ses=274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391376301.548:2152): pid=22585 uid=0 auid=0 ses=274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391376301.548:2153): pid=22585 uid=0 auid=0 ses=274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391376301.548:2154): pid=22585 uid=0 auid=0 ses=274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391377201.569:2155): pid=22861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391377201.569:2156): pid=22861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391377201.569:2157): login pid=22861 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=275 >type=USER_START msg=audit(1391377201.569:2158): pid=22861 uid=0 auid=0 ses=275 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391377201.569:2159): pid=22861 uid=0 auid=0 ses=275 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391377201.589:2160): pid=22861 uid=0 auid=0 ses=275 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391377201.589:2161): pid=22861 uid=0 auid=0 ses=275 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391378101.599:2162): pid=23141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391378101.599:2163): pid=23141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391378101.599:2164): login pid=23141 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=276 >type=USER_START msg=audit(1391378101.609:2165): pid=23141 uid=0 auid=0 ses=276 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391378101.609:2166): pid=23141 uid=0 auid=0 ses=276 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391378101.629:2167): pid=23141 uid=0 auid=0 ses=276 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391378101.629:2168): pid=23141 uid=0 auid=0 ses=276 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391378461.639:2169): pid=23254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391378461.639:2170): pid=23254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391378461.639:2171): login pid=23254 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=277 >type=USER_START msg=audit(1391378461.639:2172): pid=23254 uid=0 auid=0 ses=277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391378461.639:2173): pid=23254 uid=0 auid=0 ses=277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391378461.659:2174): avc: denied { read } for pid=23270 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391378461.659:2174): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff5c91100 a2=84800 a3=0 items=0 ppid=23268 pid=23270 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=277 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391378461.669:2175): pid=23254 uid=0 auid=0 ses=277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391378461.669:2176): pid=23254 uid=0 auid=0 ses=277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391379001.680:2177): pid=23449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391379001.680:2178): pid=23449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391379001.680:2179): login pid=23449 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=278 >type=USER_START msg=audit(1391379001.680:2180): pid=23449 uid=0 auid=0 ses=278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391379001.680:2181): pid=23449 uid=0 auid=0 ses=278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391379001.690:2182): pid=23449 uid=0 auid=0 ses=278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391379001.690:2183): pid=23449 uid=0 auid=0 ses=278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391379901.700:2184): pid=23725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391379901.700:2185): pid=23725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391379901.700:2186): login pid=23725 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=279 >type=USER_START msg=audit(1391379901.710:2187): pid=23725 uid=0 auid=0 ses=279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391379901.710:2188): pid=23725 uid=0 auid=0 ses=279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391379901.710:2189): pid=23725 uid=0 auid=0 ses=279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391379901.710:2190): pid=23725 uid=0 auid=0 ses=279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391380801.721:2191): pid=24004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391380801.721:2192): pid=24004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391380801.721:2193): login pid=24004 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=280 >type=USER_START msg=audit(1391380801.731:2194): pid=24004 uid=0 auid=0 ses=280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391380801.731:2195): pid=24004 uid=0 auid=0 ses=280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391380801.731:2196): pid=24004 uid=0 auid=0 ses=280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391380801.741:2197): pid=24004 uid=0 auid=0 ses=280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391381701.751:2198): pid=24283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391381701.751:2199): pid=24283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391381701.751:2200): login pid=24283 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=281 >type=USER_START msg=audit(1391381701.751:2201): pid=24283 uid=0 auid=0 ses=281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391381701.751:2202): pid=24283 uid=0 auid=0 ses=281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391381701.761:2203): pid=24283 uid=0 auid=0 ses=281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391381701.761:2204): pid=24283 uid=0 auid=0 ses=281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391382061.772:2205): pid=24397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391382061.772:2206): pid=24397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391382061.772:2207): login pid=24397 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=282 >type=USER_START msg=audit(1391382061.772:2208): pid=24397 uid=0 auid=0 ses=282 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391382061.772:2209): pid=24397 uid=0 auid=0 ses=282 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391382061.782:2210): avc: denied { read } for pid=24413 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391382061.782:2210): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff6b4fa00 a2=84800 a3=0 items=0 ppid=24411 pid=24413 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=282 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391382061.802:2211): pid=24397 uid=0 auid=0 ses=282 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391382061.802:2212): pid=24397 uid=0 auid=0 ses=282 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391382601.812:2213): pid=24591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391382601.812:2214): pid=24591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391382601.812:2215): login pid=24591 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=283 >type=USER_START msg=audit(1391382601.812:2216): pid=24591 uid=0 auid=0 ses=283 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391382601.812:2217): pid=24591 uid=0 auid=0 ses=283 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391382601.822:2218): pid=24591 uid=0 auid=0 ses=283 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391382601.822:2219): pid=24591 uid=0 auid=0 ses=283 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391383501.832:2220): pid=24868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391383501.832:2221): pid=24868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391383501.832:2222): login pid=24868 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=284 >type=USER_START msg=audit(1391383501.832:2223): pid=24868 uid=0 auid=0 ses=284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391383501.832:2224): pid=24868 uid=0 auid=0 ses=284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391383501.842:2225): pid=24868 uid=0 auid=0 ses=284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391383501.842:2226): pid=24868 uid=0 auid=0 ses=284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391384401.853:2227): pid=25146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391384401.853:2228): pid=25146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391384401.853:2229): login pid=25146 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=285 >type=USER_START msg=audit(1391384401.853:2230): pid=25146 uid=0 auid=0 ses=285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391384401.853:2231): pid=25146 uid=0 auid=0 ses=285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391384401.863:2232): pid=25146 uid=0 auid=0 ses=285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391384401.863:2233): pid=25146 uid=0 auid=0 ses=285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391385301.874:2234): pid=25425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391385301.874:2235): pid=25425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391385301.874:2236): login pid=25425 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=286 >type=USER_START msg=audit(1391385301.884:2237): pid=25425 uid=0 auid=0 ses=286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391385301.884:2238): pid=25425 uid=0 auid=0 ses=286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391385301.894:2239): pid=25425 uid=0 auid=0 ses=286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391385301.894:2240): pid=25425 uid=0 auid=0 ses=286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391385661.904:2241): pid=25538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391385661.904:2242): pid=25538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391385661.904:2243): login pid=25538 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=287 >type=USER_START msg=audit(1391385661.914:2244): pid=25538 uid=0 auid=0 ses=287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391385661.914:2245): pid=25538 uid=0 auid=0 ses=287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391385661.924:2246): avc: denied { read } for pid=25554 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391385661.924:2246): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe7b70040 a2=84800 a3=0 items=0 ppid=25552 pid=25554 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=287 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391385661.944:2247): pid=25538 uid=0 auid=0 ses=287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391385661.944:2248): pid=25538 uid=0 auid=0 ses=287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391386201.964:2249): pid=25733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391386201.964:2250): pid=25733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391386201.964:2251): login pid=25733 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=288 >type=USER_START msg=audit(1391386201.964:2252): pid=25733 uid=0 auid=0 ses=288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391386201.964:2253): pid=25733 uid=0 auid=0 ses=288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391386201.984:2254): pid=25733 uid=0 auid=0 ses=288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391386201.984:2255): pid=25733 uid=0 auid=0 ses=288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391387101.995:2256): pid=26010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391387101.995:2257): pid=26010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391387101.995:2258): login pid=26010 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=289 >type=USER_START msg=audit(1391387101.995:2259): pid=26010 uid=0 auid=0 ses=289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391387101.995:2260): pid=26010 uid=0 auid=0 ses=289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391387102.005:2261): pid=26010 uid=0 auid=0 ses=289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391387102.005:2262): pid=26010 uid=0 auid=0 ses=289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391388001.015:2263): pid=26287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391388001.015:2264): pid=26287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391388001.015:2265): login pid=26287 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=290 >type=USER_START msg=audit(1391388001.015:2266): pid=26287 uid=0 auid=0 ses=290 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391388001.015:2267): pid=26287 uid=0 auid=0 ses=290 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391388001.025:2268): pid=26287 uid=0 auid=0 ses=290 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391388001.025:2269): pid=26287 uid=0 auid=0 ses=290 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391388901.026:2270): pid=26566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391388901.026:2271): pid=26566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391388901.026:2272): login pid=26566 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=291 >type=USER_START msg=audit(1391388901.026:2273): pid=26566 uid=0 auid=0 ses=291 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391388901.026:2274): pid=26566 uid=0 auid=0 ses=291 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391388901.036:2275): pid=26566 uid=0 auid=0 ses=291 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391388901.036:2276): pid=26566 uid=0 auid=0 ses=291 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391389261.046:2277): pid=26680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391389261.046:2278): pid=26680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391389261.046:2279): login pid=26680 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=292 >type=USER_START msg=audit(1391389261.046:2280): pid=26680 uid=0 auid=0 ses=292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391389261.046:2281): pid=26680 uid=0 auid=0 ses=292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391389261.066:2282): avc: denied { read } for pid=26696 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391389261.066:2282): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffc9bcef0 a2=84800 a3=0 items=0 ppid=26694 pid=26696 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=292 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391389261.076:2283): pid=26680 uid=0 auid=0 ses=292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391389261.076:2284): pid=26680 uid=0 auid=0 ses=292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391389801.086:2285): pid=26875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391389801.086:2286): pid=26875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391389801.086:2287): login pid=26875 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=293 >type=USER_START msg=audit(1391389801.086:2288): pid=26875 uid=0 auid=0 ses=293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391389801.086:2289): pid=26875 uid=0 auid=0 ses=293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391389801.096:2290): pid=26875 uid=0 auid=0 ses=293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391389801.096:2291): pid=26875 uid=0 auid=0 ses=293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391390701.107:2292): pid=27151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391390701.107:2293): pid=27151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391390701.107:2294): login pid=27151 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=294 >type=USER_START msg=audit(1391390701.107:2295): pid=27151 uid=0 auid=0 ses=294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391390701.107:2296): pid=27151 uid=0 auid=0 ses=294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391390701.117:2297): pid=27151 uid=0 auid=0 ses=294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391390701.117:2298): pid=27151 uid=0 auid=0 ses=294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391391601.127:2299): pid=27429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391391601.127:2300): pid=27429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391391601.127:2301): login pid=27429 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=295 >type=USER_START msg=audit(1391391601.127:2302): pid=27429 uid=0 auid=0 ses=295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391391601.137:2303): pid=27429 uid=0 auid=0 ses=295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391391601.137:2304): pid=27429 uid=0 auid=0 ses=295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391391601.137:2305): pid=27429 uid=0 auid=0 ses=295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391392501.148:2306): pid=27709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391392501.148:2307): pid=27709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391392501.148:2308): login pid=27709 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=296 >type=USER_START msg=audit(1391392501.158:2309): pid=27709 uid=0 auid=0 ses=296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391392501.158:2310): pid=27709 uid=0 auid=0 ses=296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391392501.168:2311): pid=27709 uid=0 auid=0 ses=296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391392501.168:2312): pid=27709 uid=0 auid=0 ses=296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391392861.178:2313): pid=27823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391392861.178:2314): pid=27823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391392861.178:2315): login pid=27823 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=297 >type=USER_START msg=audit(1391392861.178:2316): pid=27823 uid=0 auid=0 ses=297 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391392861.178:2317): pid=27823 uid=0 auid=0 ses=297 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391392861.208:2318): avc: denied { read } for pid=27842 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391392861.208:2318): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffde23e310 a2=84800 a3=0 items=0 ppid=27840 pid=27842 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=297 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391392861.218:2319): pid=27823 uid=0 auid=0 ses=297 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391392861.218:2320): pid=27823 uid=0 auid=0 ses=297 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391393401.228:2321): pid=28019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391393401.228:2322): pid=28019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391393401.228:2323): login pid=28019 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=298 >type=USER_START msg=audit(1391393401.228:2324): pid=28019 uid=0 auid=0 ses=298 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391393401.228:2325): pid=28019 uid=0 auid=0 ses=298 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391393401.238:2326): pid=28019 uid=0 auid=0 ses=298 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391393401.238:2327): pid=28019 uid=0 auid=0 ses=298 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391394301.249:2328): pid=28297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391394301.249:2329): pid=28297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391394301.249:2330): login pid=28297 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=299 >type=USER_START msg=audit(1391394301.259:2331): pid=28297 uid=0 auid=0 ses=299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391394301.259:2332): pid=28297 uid=0 auid=0 ses=299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391394301.279:2333): pid=28297 uid=0 auid=0 ses=299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391394301.279:2334): pid=28297 uid=0 auid=0 ses=299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391395201.299:2335): pid=28575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391395201.299:2336): pid=28575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391395201.299:2337): login pid=28575 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=300 >type=USER_START msg=audit(1391395201.299:2338): pid=28575 uid=0 auid=0 ses=300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391395201.299:2339): pid=28575 uid=0 auid=0 ses=300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391395201.319:2340): pid=28575 uid=0 auid=0 ses=300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391395201.319:2341): pid=28575 uid=0 auid=0 ses=300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391396101.330:2342): pid=28853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391396101.330:2343): pid=28853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391396101.330:2344): login pid=28853 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=301 >type=USER_START msg=audit(1391396101.330:2345): pid=28853 uid=0 auid=0 ses=301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391396101.330:2346): pid=28853 uid=0 auid=0 ses=301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391396101.340:2347): pid=28853 uid=0 auid=0 ses=301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391396101.340:2348): pid=28853 uid=0 auid=0 ses=301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391396461.350:2349): pid=28967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391396461.350:2350): pid=28967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391396461.350:2351): login pid=28967 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=302 >type=USER_START msg=audit(1391396461.350:2352): pid=28967 uid=0 auid=0 ses=302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391396461.350:2353): pid=28967 uid=0 auid=0 ses=302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391396461.380:2354): avc: denied { read } for pid=28986 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391396461.380:2354): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc4551be0 a2=84800 a3=0 items=0 ppid=28984 pid=28986 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=302 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391396461.390:2355): pid=28967 uid=0 auid=0 ses=302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391396461.400:2356): pid=28967 uid=0 auid=0 ses=302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391397001.400:2357): pid=29165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391397001.400:2358): pid=29165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391397001.400:2359): login pid=29165 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=303 >type=USER_START msg=audit(1391397001.410:2360): pid=29165 uid=0 auid=0 ses=303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391397001.410:2361): pid=29165 uid=0 auid=0 ses=303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391397001.420:2362): pid=29165 uid=0 auid=0 ses=303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391397001.420:2363): pid=29165 uid=0 auid=0 ses=303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391397901.431:2364): pid=29442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391397901.431:2365): pid=29442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391397901.431:2366): login pid=29442 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=304 >type=USER_START msg=audit(1391397901.431:2367): pid=29442 uid=0 auid=0 ses=304 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391397901.431:2368): pid=29442 uid=0 auid=0 ses=304 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391397901.441:2369): pid=29442 uid=0 auid=0 ses=304 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391397901.441:2370): pid=29442 uid=0 auid=0 ses=304 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391398801.452:2371): pid=29720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391398801.452:2372): pid=29720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391398801.452:2373): login pid=29720 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=305 >type=USER_START msg=audit(1391398801.452:2374): pid=29720 uid=0 auid=0 ses=305 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391398801.452:2375): pid=29720 uid=0 auid=0 ses=305 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391398801.462:2376): pid=29720 uid=0 auid=0 ses=305 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391398801.462:2377): pid=29720 uid=0 auid=0 ses=305 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391399701.472:2378): pid=29999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391399701.472:2379): pid=29999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391399701.472:2380): login pid=29999 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=306 >type=USER_START msg=audit(1391399701.472:2381): pid=29999 uid=0 auid=0 ses=306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391399701.472:2382): pid=29999 uid=0 auid=0 ses=306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391399701.482:2383): pid=29999 uid=0 auid=0 ses=306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391399701.482:2384): pid=29999 uid=0 auid=0 ses=306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391400061.492:2385): pid=30113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391400061.492:2386): pid=30113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391400061.492:2387): login pid=30113 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=307 >type=USER_START msg=audit(1391400061.492:2388): pid=30113 uid=0 auid=0 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391400061.492:2389): pid=30113 uid=0 auid=0 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391400061.512:2390): avc: denied { read } for pid=30132 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391400061.512:2390): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff1fd8310 a2=84800 a3=0 items=0 ppid=30130 pid=30132 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=307 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391400061.532:2391): pid=30113 uid=0 auid=0 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391400061.532:2392): pid=30113 uid=0 auid=0 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391400601.543:2393): pid=30310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391400601.543:2394): pid=30310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391400601.543:2395): login pid=30310 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=308 >type=USER_START msg=audit(1391400601.553:2396): pid=30310 uid=0 auid=0 ses=308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391400601.553:2397): pid=30310 uid=0 auid=0 ses=308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391400601.553:2398): pid=30310 uid=0 auid=0 ses=308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391400601.553:2399): pid=30310 uid=0 auid=0 ses=308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391401501.563:2400): pid=30587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391401501.573:2401): pid=30587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391401501.573:2402): login pid=30587 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=309 >type=USER_START msg=audit(1391401501.573:2403): pid=30587 uid=0 auid=0 ses=309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391401501.573:2404): pid=30587 uid=0 auid=0 ses=309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391401501.583:2405): pid=30587 uid=0 auid=0 ses=309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391401501.583:2406): pid=30587 uid=0 auid=0 ses=309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391402401.594:2407): pid=30865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391402401.594:2408): pid=30865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391402401.594:2409): login pid=30865 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=310 >type=USER_START msg=audit(1391402401.604:2410): pid=30865 uid=0 auid=0 ses=310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391402401.604:2411): pid=30865 uid=0 auid=0 ses=310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391402401.614:2412): pid=30865 uid=0 auid=0 ses=310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391402401.614:2413): pid=30865 uid=0 auid=0 ses=310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391403301.634:2414): pid=31145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391403301.634:2415): pid=31145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391403301.634:2416): login pid=31145 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=311 >type=USER_START msg=audit(1391403301.634:2417): pid=31145 uid=0 auid=0 ses=311 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391403301.634:2418): pid=31145 uid=0 auid=0 ses=311 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391403301.654:2419): pid=31145 uid=0 auid=0 ses=311 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391403301.654:2420): pid=31145 uid=0 auid=0 ses=311 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391403661.664:2421): pid=31258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391403661.664:2422): pid=31258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391403661.664:2423): login pid=31258 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=312 >type=USER_START msg=audit(1391403661.664:2424): pid=31258 uid=0 auid=0 ses=312 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391403661.664:2425): pid=31258 uid=0 auid=0 ses=312 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391403661.684:2426): avc: denied { read } for pid=31277 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391403661.684:2426): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe28ee920 a2=84800 a3=0 items=0 ppid=31275 pid=31277 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=312 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391403661.704:2427): pid=31258 uid=0 auid=0 ses=312 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391403661.704:2428): pid=31258 uid=0 auid=0 ses=312 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391404201.715:2429): pid=31454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391404201.715:2430): pid=31454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391404201.715:2431): login pid=31454 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=313 >type=USER_START msg=audit(1391404201.725:2432): pid=31454 uid=0 auid=0 ses=313 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391404201.725:2433): pid=31454 uid=0 auid=0 ses=313 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391404201.725:2434): pid=31454 uid=0 auid=0 ses=313 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391404201.735:2435): pid=31454 uid=0 auid=0 ses=313 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391405101.735:2436): pid=31731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391405101.735:2437): pid=31731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391405101.735:2438): login pid=31731 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=314 >type=USER_START msg=audit(1391405101.735:2439): pid=31731 uid=0 auid=0 ses=314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391405101.735:2440): pid=31731 uid=0 auid=0 ses=314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391405101.745:2441): pid=31731 uid=0 auid=0 ses=314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391405101.745:2442): pid=31731 uid=0 auid=0 ses=314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391405641.686:2443): avc: denied { read } for pid=31906 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391405641.686:2443): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe93257a0 a2=84800 a3=0 items=0 ppid=31904 pid=31906 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=312 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1391406001.756:2444): pid=32056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391406001.756:2445): pid=32056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391406001.756:2446): login pid=32056 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=315 >type=USER_START msg=audit(1391406001.766:2447): pid=32056 uid=0 auid=0 ses=315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391406001.766:2448): pid=32056 uid=0 auid=0 ses=315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391406001.776:2449): pid=32056 uid=0 auid=0 ses=315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391406001.776:2450): pid=32056 uid=0 auid=0 ses=315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391406901.786:2451): pid=32334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391406901.786:2452): pid=32334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391406901.786:2453): login pid=32334 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=316 >type=USER_START msg=audit(1391406901.786:2454): pid=32334 uid=0 auid=0 ses=316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391406901.786:2455): pid=32334 uid=0 auid=0 ses=316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391406901.796:2456): pid=32334 uid=0 auid=0 ses=316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391406901.796:2457): pid=32334 uid=0 auid=0 ses=316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391407261.807:2458): pid=32449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391407261.807:2459): pid=32449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391407261.807:2460): login pid=32449 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=317 >type=USER_START msg=audit(1391407261.807:2461): pid=32449 uid=0 auid=0 ses=317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391407261.807:2462): pid=32449 uid=0 auid=0 ses=317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391407261.827:2463): avc: denied { read } for pid=32465 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391407261.827:2463): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe35f13c0 a2=84800 a3=0 items=0 ppid=32463 pid=32465 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=317 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391407261.847:2464): pid=32449 uid=0 auid=0 ses=317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391407261.847:2465): pid=32449 uid=0 auid=0 ses=317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391407801.857:2466): pid=32643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391407801.857:2467): pid=32643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391407801.857:2468): login pid=32643 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=318 >type=USER_START msg=audit(1391407801.857:2469): pid=32643 uid=0 auid=0 ses=318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391407801.857:2470): pid=32643 uid=0 auid=0 ses=318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391407801.867:2471): pid=32643 uid=0 auid=0 ses=318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391407801.867:2472): pid=32643 uid=0 auid=0 ses=318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391408701.877:2473): pid=32920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391408701.877:2474): pid=32920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391408701.877:2475): login pid=32920 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=319 >type=USER_START msg=audit(1391408701.877:2476): pid=32920 uid=0 auid=0 ses=319 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391408701.877:2477): pid=32920 uid=0 auid=0 ses=319 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391408701.887:2478): pid=32920 uid=0 auid=0 ses=319 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391408701.887:2479): pid=32920 uid=0 auid=0 ses=319 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391409601.898:2480): pid=33198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391409601.898:2481): pid=33198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391409601.898:2482): login pid=33198 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=320 >type=USER_START msg=audit(1391409601.908:2483): pid=33198 uid=0 auid=0 ses=320 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391409601.908:2484): pid=33198 uid=0 auid=0 ses=320 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391409601.908:2485): pid=33198 uid=0 auid=0 ses=320 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391409601.908:2486): pid=33198 uid=0 auid=0 ses=320 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391410501.928:2487): pid=33477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391410501.928:2488): pid=33477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391410501.928:2489): login pid=33477 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=321 >type=USER_START msg=audit(1391410501.928:2490): pid=33477 uid=0 auid=0 ses=321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391410501.928:2491): pid=33477 uid=0 auid=0 ses=321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391410501.948:2492): pid=33477 uid=0 auid=0 ses=321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391410501.948:2493): pid=33477 uid=0 auid=0 ses=321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391410861.959:2494): pid=33592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391410861.959:2495): pid=33592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391410861.959:2496): login pid=33592 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=322 >type=USER_START msg=audit(1391410861.959:2497): pid=33592 uid=0 auid=0 ses=322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391410861.959:2498): pid=33592 uid=0 auid=0 ses=322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391410861.979:2499): avc: denied { read } for pid=33608 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391410861.979:2499): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff36b3cb0 a2=84800 a3=0 items=0 ppid=33606 pid=33608 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=322 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391410861.989:2500): pid=33592 uid=0 auid=0 ses=322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391410861.999:2501): pid=33592 uid=0 auid=0 ses=322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391411402.009:2502): pid=33785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391411402.009:2503): pid=33785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391411402.009:2504): login pid=33785 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=323 >type=USER_START msg=audit(1391411402.009:2505): pid=33785 uid=0 auid=0 ses=323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391411402.009:2506): pid=33785 uid=0 auid=0 ses=323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391411402.029:2507): pid=33785 uid=0 auid=0 ses=323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391411402.029:2508): pid=33785 uid=0 auid=0 ses=323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391412301.040:2509): pid=34062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391412301.040:2510): pid=34062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391412301.040:2511): login pid=34062 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=324 >type=USER_START msg=audit(1391412301.050:2512): pid=34062 uid=0 auid=0 ses=324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391412301.050:2513): pid=34062 uid=0 auid=0 ses=324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391412301.050:2514): pid=34062 uid=0 auid=0 ses=324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391412301.050:2515): pid=34062 uid=0 auid=0 ses=324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391413201.060:2516): pid=34340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391413201.060:2517): pid=34340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391413201.060:2518): login pid=34340 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=325 >type=USER_START msg=audit(1391413201.070:2519): pid=34340 uid=0 auid=0 ses=325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391413201.070:2520): pid=34340 uid=0 auid=0 ses=325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391413201.070:2521): pid=34340 uid=0 auid=0 ses=325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391413201.080:2522): pid=34340 uid=0 auid=0 ses=325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391414101.091:2523): pid=34619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391414101.091:2524): pid=34619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391414101.091:2525): login pid=34619 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=326 >type=USER_START msg=audit(1391414101.091:2526): pid=34619 uid=0 auid=0 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391414101.091:2527): pid=34619 uid=0 auid=0 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391414101.101:2528): pid=34619 uid=0 auid=0 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391414101.101:2529): pid=34619 uid=0 auid=0 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391414461.101:2530): pid=34733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391414461.101:2531): pid=34733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391414461.101:2532): login pid=34733 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=327 >type=USER_START msg=audit(1391414461.111:2533): pid=34733 uid=0 auid=0 ses=327 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391414461.111:2534): pid=34733 uid=0 auid=0 ses=327 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391414461.121:2535): avc: denied { read } for pid=34749 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391414461.121:2535): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcb65c910 a2=84800 a3=0 items=0 ppid=34747 pid=34749 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=327 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391414461.141:2536): pid=34733 uid=0 auid=0 ses=327 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391414461.141:2537): pid=34733 uid=0 auid=0 ses=327 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391415001.151:2538): pid=34928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391415001.151:2539): pid=34928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391415001.151:2540): login pid=34928 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=328 >type=USER_START msg=audit(1391415001.161:2541): pid=34928 uid=0 auid=0 ses=328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391415001.161:2542): pid=34928 uid=0 auid=0 ses=328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391415001.161:2543): pid=34928 uid=0 auid=0 ses=328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391415001.161:2544): pid=34928 uid=0 auid=0 ses=328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391415901.172:2545): pid=35204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391415901.172:2546): pid=35204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391415901.182:2547): login pid=35204 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=329 >type=USER_START msg=audit(1391415901.182:2548): pid=35204 uid=0 auid=0 ses=329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391415901.182:2549): pid=35204 uid=0 auid=0 ses=329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391415901.182:2550): pid=35204 uid=0 auid=0 ses=329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391415901.192:2551): pid=35204 uid=0 auid=0 ses=329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391416801.202:2552): pid=35482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391416801.202:2553): pid=35482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391416801.202:2554): login pid=35482 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=330 >type=USER_START msg=audit(1391416801.202:2555): pid=35482 uid=0 auid=0 ses=330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391416801.202:2556): pid=35482 uid=0 auid=0 ses=330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391416801.212:2557): pid=35482 uid=0 auid=0 ses=330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391416801.212:2558): pid=35482 uid=0 auid=0 ses=330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391417701.223:2559): pid=35762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391417701.223:2560): pid=35762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391417701.223:2561): login pid=35762 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=331 >type=USER_START msg=audit(1391417701.223:2562): pid=35762 uid=0 auid=0 ses=331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391417701.223:2563): pid=35762 uid=0 auid=0 ses=331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391417701.233:2564): pid=35762 uid=0 auid=0 ses=331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391417701.233:2565): pid=35762 uid=0 auid=0 ses=331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391418061.243:2566): pid=35875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391418061.243:2567): pid=35875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391418061.243:2568): login pid=35875 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=332 >type=USER_START msg=audit(1391418061.243:2569): pid=35875 uid=0 auid=0 ses=332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391418061.243:2570): pid=35875 uid=0 auid=0 ses=332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391418061.263:2571): avc: denied { read } for pid=35892 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391418061.263:2571): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe8a597c0 a2=84800 a3=0 items=0 ppid=35890 pid=35892 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=332 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391418061.283:2572): pid=35875 uid=0 auid=0 ses=332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391418061.283:2573): pid=35875 uid=0 auid=0 ses=332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391418601.303:2574): pid=36069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391418601.303:2575): pid=36069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391418601.303:2576): login pid=36069 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=333 >type=USER_START msg=audit(1391418601.303:2577): pid=36069 uid=0 auid=0 ses=333 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391418601.303:2578): pid=36069 uid=0 auid=0 ses=333 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391418601.323:2579): pid=36069 uid=0 auid=0 ses=333 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391418601.323:2580): pid=36069 uid=0 auid=0 ses=333 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391419501.344:2581): pid=36347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391419501.344:2582): pid=36347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391419501.344:2583): login pid=36347 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=334 >type=USER_START msg=audit(1391419501.344:2584): pid=36347 uid=0 auid=0 ses=334 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391419501.344:2585): pid=36347 uid=0 auid=0 ses=334 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391419501.364:2586): pid=36347 uid=0 auid=0 ses=334 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391419501.364:2587): pid=36347 uid=0 auid=0 ses=334 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391420401.374:2588): pid=36625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391420401.374:2589): pid=36625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391420401.374:2590): login pid=36625 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=335 >type=USER_START msg=audit(1391420401.374:2591): pid=36625 uid=0 auid=0 ses=335 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391420401.374:2592): pid=36625 uid=0 auid=0 ses=335 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391420401.384:2593): pid=36625 uid=0 auid=0 ses=335 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391420401.384:2594): pid=36625 uid=0 auid=0 ses=335 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391421301.395:2595): pid=36902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391421301.395:2596): pid=36902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391421301.395:2597): login pid=36902 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=336 >type=USER_START msg=audit(1391421301.395:2598): pid=36902 uid=0 auid=0 ses=336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391421301.395:2599): pid=36902 uid=0 auid=0 ses=336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391421301.405:2600): pid=36902 uid=0 auid=0 ses=336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391421301.405:2601): pid=36902 uid=0 auid=0 ses=336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391421661.415:2602): pid=37016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391421661.415:2603): pid=37016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391421661.415:2604): login pid=37016 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=337 >type=USER_START msg=audit(1391421661.415:2605): pid=37016 uid=0 auid=0 ses=337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391421661.415:2606): pid=37016 uid=0 auid=0 ses=337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391421661.435:2607): avc: denied { read } for pid=37032 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391421661.435:2607): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffeb1584d0 a2=84800 a3=0 items=0 ppid=37030 pid=37032 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=337 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391421661.445:2608): pid=37016 uid=0 auid=0 ses=337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391421661.445:2609): pid=37016 uid=0 auid=0 ses=337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391422201.445:2610): pid=37211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391422201.445:2611): pid=37211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391422201.445:2612): login pid=37211 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=338 >type=USER_START msg=audit(1391422201.455:2613): pid=37211 uid=0 auid=0 ses=338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391422201.455:2614): pid=37211 uid=0 auid=0 ses=338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391422201.455:2615): pid=37211 uid=0 auid=0 ses=338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391422201.455:2616): pid=37211 uid=0 auid=0 ses=338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391423101.466:2617): pid=37488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391423101.466:2618): pid=37488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391423101.466:2619): login pid=37488 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=339 >type=USER_START msg=audit(1391423101.476:2620): pid=37488 uid=0 auid=0 ses=339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391423101.476:2621): pid=37488 uid=0 auid=0 ses=339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391423101.476:2622): pid=37488 uid=0 auid=0 ses=339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391423101.476:2623): pid=37488 uid=0 auid=0 ses=339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391424001.487:2624): pid=37766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391424001.487:2625): pid=37766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391424001.487:2626): login pid=37766 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=340 >type=USER_START msg=audit(1391424001.497:2627): pid=37766 uid=0 auid=0 ses=340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391424001.497:2628): pid=37766 uid=0 auid=0 ses=340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391424001.497:2629): pid=37766 uid=0 auid=0 ses=340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391424001.507:2630): pid=37766 uid=0 auid=0 ses=340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391424901.507:2631): pid=38045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391424901.507:2632): pid=38045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391424901.517:2633): login pid=38045 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=341 >type=USER_START msg=audit(1391424901.517:2634): pid=38045 uid=0 auid=0 ses=341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391424901.517:2635): pid=38045 uid=0 auid=0 ses=341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391424901.517:2636): pid=38045 uid=0 auid=0 ses=341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391424901.527:2637): pid=38045 uid=0 auid=0 ses=341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391425261.527:2638): pid=38159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391425261.527:2639): pid=38159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391425261.527:2640): login pid=38159 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=342 >type=USER_START msg=audit(1391425261.537:2641): pid=38159 uid=0 auid=0 ses=342 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391425261.537:2642): pid=38159 uid=0 auid=0 ses=342 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391425261.547:2643): avc: denied { read } for pid=38175 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391425261.547:2643): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffaa48310 a2=84800 a3=0 items=0 ppid=38173 pid=38175 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=342 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391425261.567:2644): pid=38159 uid=0 auid=0 ses=342 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391425261.567:2645): pid=38159 uid=0 auid=0 ses=342 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391425801.578:2646): pid=38353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391425801.578:2647): pid=38353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391425801.578:2648): login pid=38353 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=343 >type=USER_START msg=audit(1391425801.578:2649): pid=38353 uid=0 auid=0 ses=343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391425801.578:2650): pid=38353 uid=0 auid=0 ses=343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391425801.588:2651): pid=38353 uid=0 auid=0 ses=343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391425801.588:2652): pid=38353 uid=0 auid=0 ses=343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391426701.598:2653): pid=38630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391426701.598:2654): pid=38630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391426701.598:2655): login pid=38630 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=344 >type=USER_START msg=audit(1391426701.598:2656): pid=38630 uid=0 auid=0 ses=344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391426701.608:2657): pid=38630 uid=0 auid=0 ses=344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391426701.608:2658): pid=38630 uid=0 auid=0 ses=344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391426701.608:2659): pid=38630 uid=0 auid=0 ses=344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391427601.619:2660): pid=38908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391427601.619:2661): pid=38908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391427601.619:2662): login pid=38908 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=345 >type=USER_START msg=audit(1391427601.629:2663): pid=38908 uid=0 auid=0 ses=345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391427601.629:2664): pid=38908 uid=0 auid=0 ses=345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391427601.629:2665): pid=38908 uid=0 auid=0 ses=345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391427601.629:2666): pid=38908 uid=0 auid=0 ses=345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391428450.619:2667): pid=39185 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391428450.619:2668): pid=39185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428450.619:2669): pid=39185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428450.619:2670): pid=39185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428450.619:2671): pid=39185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428450.629:2672): pid=39187 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391428450.629:2673): pid=39187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428450.629:2674): pid=39187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428450.669:2675): pid=39187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428450.669:2676): pid=39187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428450.679:2677): pid=39207 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391428450.679:2678): pid=39207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428450.689:2679): pid=39207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428450.689:2680): pid=39207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428450.689:2681): pid=39207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428460.879:2682): pid=39222 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391428460.879:2683): pid=39222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428460.879:2684): pid=39222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428460.879:2685): pid=39222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428460.879:2686): pid=39222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428460.889:2687): pid=39224 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391428460.889:2688): pid=39224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428460.889:2689): pid=39224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428460.919:2690): pid=39224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428460.919:2691): pid=39224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428460.929:2692): pid=39244 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391428460.929:2693): pid=39244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428460.929:2694): pid=39244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428460.939:2695): pid=39244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428460.939:2696): pid=39244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428471.109:2697): pid=39258 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391428471.109:2698): pid=39258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428471.109:2699): pid=39258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428471.109:2700): pid=39258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428471.109:2701): pid=39258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428471.119:2702): pid=39260 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391428471.119:2703): pid=39260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428471.119:2704): pid=39260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428471.149:2705): pid=39260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428471.149:2706): pid=39260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428471.159:2707): pid=39277 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391428471.159:2708): pid=39277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428471.159:2709): pid=39277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428471.169:2710): pid=39277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428471.169:2711): pid=39277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428481.319:2712): pid=39290 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391428481.319:2713): pid=39290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428481.319:2714): pid=39290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428481.319:2715): pid=39290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428481.319:2716): pid=39290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428481.329:2717): pid=39292 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391428481.329:2718): pid=39292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428481.329:2719): pid=39292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428481.359:2720): pid=39292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428481.359:2721): pid=39292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428481.369:2722): pid=39309 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391428481.369:2723): pid=39309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428481.369:2724): pid=39309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428481.379:2725): pid=39309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428481.379:2726): pid=39309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428491.529:2727): pid=39326 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391428491.529:2728): pid=39326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428491.529:2729): pid=39326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428491.529:2730): pid=39326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428491.529:2731): pid=39326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428491.539:2732): pid=39328 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391428491.539:2733): pid=39328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428491.539:2734): pid=39328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428491.569:2735): pid=39328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428491.569:2736): pid=39328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428491.589:2737): pid=39345 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391428491.589:2738): pid=39345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428491.589:2739): pid=39345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428491.589:2740): pid=39345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428491.589:2741): pid=39345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391428501.649:2742): pid=39353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391428501.649:2743): pid=39353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391428501.649:2744): login pid=39353 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=346 >type=USER_START msg=audit(1391428501.649:2745): pid=39353 uid=0 auid=0 ses=346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391428501.649:2746): pid=39353 uid=0 auid=0 ses=346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391428501.659:2747): pid=39353 uid=0 auid=0 ses=346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391428501.659:2748): pid=39353 uid=0 auid=0 ses=346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391428501.719:2749): pid=39361 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391428501.719:2750): pid=39361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428501.719:2751): pid=39361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428501.719:2752): pid=39361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428501.719:2753): pid=39361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428501.739:2754): pid=39363 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391428501.739:2755): pid=39363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428501.739:2756): pid=39363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428501.769:2757): pid=39363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428501.769:2758): pid=39363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428501.779:2759): pid=39380 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391428501.789:2760): pid=39380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428501.789:2761): pid=39380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428501.789:2762): pid=39380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428501.789:2763): pid=39380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428503.119:2764): pid=39385 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D332031302E31302E32372E36383A2F73746F72616765202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391428503.119:2765): pid=39385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428503.119:2766): pid=39385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428503.179:2767): pid=39385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428503.179:2768): pid=39385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428511.919:2769): pid=39411 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391428511.919:2770): pid=39411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428511.919:2771): pid=39411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428511.919:2772): pid=39411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428511.919:2773): pid=39411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428511.929:2774): pid=39413 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391428511.929:2775): pid=39413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428511.929:2776): pid=39413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428511.959:2777): pid=39413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428511.959:2778): pid=39413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428512.379:2779): pid=39437 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391428512.379:2780): pid=39437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428512.379:2781): pid=39437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428512.389:2782): pid=39437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428512.389:2783): pid=39437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428765.929:2784): pid=39701 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391428765.929:2785): pid=39701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428765.929:2786): pid=39701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428765.929:2787): pid=39701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428765.929:2788): pid=39701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428765.949:2789): pid=39703 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391428765.949:2790): pid=39703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428765.949:2791): pid=39703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428766.039:2792): pid=39703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428766.039:2793): pid=39703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391428861.669:2794): pid=39816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391428861.669:2795): pid=39816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391428861.669:2796): login pid=39816 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=347 >type=USER_START msg=audit(1391428861.679:2797): pid=39816 uid=0 auid=0 ses=347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391428861.679:2798): pid=39816 uid=0 auid=0 ses=347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391428861.709:2799): avc: denied { read } for pid=39833 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391428861.709:2799): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc5b35b40 a2=84800 a3=0 items=0 ppid=39831 pid=39833 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=347 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391428861.719:2800): pid=39816 uid=0 auid=0 ses=347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391428861.719:2801): pid=39816 uid=0 auid=0 ses=347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391428888.209:2802): pid=39877 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391428888.209:2803): pid=39877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428888.209:2804): pid=39877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428888.209:2805): pid=39877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428888.209:2806): pid=39877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428888.219:2807): pid=39879 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391428888.219:2808): pid=39879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391428888.219:2809): pid=39879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391428888.249:2810): pid=39879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391428888.249:2811): pid=39879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391428972.029:2812): pid=40029 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=756D6F756E74202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391428972.029:2813): pid=40029 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391428972.029:2814): pid=40029 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391428972.119:2815): pid=40029 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391428972.119:2816): pid=40029 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_STOP msg=audit(1391428977.689:2817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sanlock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391428982.179:2818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391428986.539:2819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391428986.549:2820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391428995.889:2821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1391428998.759:2822): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1391428998.759:2822): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1391428998.759:2822): arch=80000015 syscall=120 success=yes exit=40201 a0=6c020011 a1=1fffe81a9fd0 a2=5fc1 a3=9 items=0 ppid=1 pid=40077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_START msg=audit(1391429000.059:2823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sanlock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391429002.789:2824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391429004.449:2825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429004.709:2826): pid=40303 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D70446C68665964 terminal=? res=success' >type=CRED_ACQ msg=audit(1391429004.709:2827): pid=40303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429004.709:2828): pid=40303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429004.719:2829): pid=40303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429004.719:2830): pid=40303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429005.209:2831): pid=40323 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1391429005.209:2832): pid=40323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429005.209:2833): pid=40323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429005.219:2834): pid=40323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429005.219:2835): pid=40323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429005.249:2836): pid=40327 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391429005.249:2837): pid=40327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429005.249:2838): pid=40327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429005.249:2839): pid=40327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429005.249:2840): pid=40327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429007.279:2841): pid=40346 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391429007.279:2842): pid=40346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429007.279:2843): pid=40346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429007.339:2844): pid=40346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429007.339:2845): pid=40346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429007.349:2846): pid=40364 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391429007.349:2847): pid=40364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429007.349:2848): pid=40364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429007.359:2849): pid=40364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429007.359:2850): pid=40364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429007.369:2851): pid=40367 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1391429007.369:2852): pid=40367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429007.369:2853): pid=40367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429007.379:2854): pid=40367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429007.379:2855): pid=40367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429007.399:2856): pid=40370 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_ACQ msg=audit(1391429007.399:2857): pid=40370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429007.399:2858): pid=40370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429007.409:2859): pid=40370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429007.409:2860): pid=40370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429007.419:2861): pid=40373 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391429007.419:2862): pid=40373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429007.419:2863): pid=40373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429007.429:2864): pid=40373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429007.429:2865): pid=40373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391429401.740:2866): pid=40529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391429401.740:2867): pid=40529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391429401.740:2868): login pid=40529 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=348 >type=USER_START msg=audit(1391429401.740:2869): pid=40529 uid=0 auid=0 ses=348 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391429401.740:2870): pid=40529 uid=0 auid=0 ses=348 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391429401.750:2871): pid=40529 uid=0 auid=0 ses=348 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391429401.750:2872): pid=40529 uid=0 auid=0 ses=348 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391429412.350:2873): pid=40543 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D332031302E31302E32372E36383A2F73746F72616765202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391429412.350:2874): pid=40543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429412.350:2875): pid=40543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429412.390:2876): pid=40543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429412.390:2877): pid=40543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429412.970:2878): pid=40556 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391429412.970:2879): pid=40556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429412.970:2880): pid=40556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429412.970:2881): pid=40556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429412.970:2882): pid=40556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429412.980:2883): pid=40558 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391429412.980:2884): pid=40558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429412.980:2885): pid=40558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429413.010:2886): pid=40558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429413.010:2887): pid=40558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429413.030:2888): pid=40576 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391429413.030:2889): pid=40576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429413.030:2890): pid=40576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429413.040:2891): pid=40576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429413.040:2892): pid=40576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429413.940:2893): pid=40587 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F756D6F756E74202D66202D6C202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391429413.940:2894): pid=40587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429413.940:2895): pid=40587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429414.020:2896): pid=40587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429414.020:2897): pid=40587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429414.030:2898): pid=40590 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391429414.030:2899): pid=40590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429414.030:2900): pid=40590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429414.030:2901): pid=40590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429414.030:2902): pid=40590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429414.040:2903): pid=40592 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391429414.040:2904): pid=40592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429414.040:2905): pid=40592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429414.070:2906): pid=40592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429414.070:2907): pid=40592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429414.690:2908): pid=40610 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D332031302E31302E32372E36383A2F73746F72616765202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391429414.690:2909): pid=40610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429414.690:2910): pid=40610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429414.700:2911): pid=40610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429414.700:2912): pid=40610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429414.760:2913): pid=40617 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391429414.760:2914): pid=40617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429414.760:2915): pid=40617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429414.760:2916): pid=40617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429414.760:2917): pid=40617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429414.770:2918): pid=40619 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391429414.770:2919): pid=40619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429414.770:2920): pid=40619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429414.790:2921): pid=40619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429414.790:2922): pid=40619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429436.010:2923): pid=40654 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391429436.010:2924): pid=40654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429436.010:2925): pid=40654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429436.020:2926): pid=40654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429436.020:2927): pid=40654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429440.530:2928): pid=40667 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391429440.530:2929): pid=40667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429440.530:2930): pid=40667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429440.530:2931): pid=40667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429440.540:2932): pid=40667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429440.550:2933): pid=40669 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391429440.550:2934): pid=40669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429440.550:2935): pid=40669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429440.580:2936): pid=40669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429440.580:2937): pid=40669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429440.690:2938): pid=40689 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391429440.690:2939): pid=40689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429440.690:2940): pid=40689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429440.700:2941): pid=40689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429440.700:2942): pid=40689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429462.160:2943): pid=40742 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391429462.160:2944): pid=40742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429462.160:2945): pid=40742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429462.160:2946): pid=40742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429462.160:2947): pid=40742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429462.170:2948): pid=40744 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391429462.170:2949): pid=40744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429462.170:2950): pid=40744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429462.200:2951): pid=40744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429462.200:2952): pid=40744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391429462.250:2953): pid=40762 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391429462.250:2954): pid=40762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391429462.250:2955): pid=40762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391429462.260:2956): pid=40762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391429462.260:2957): pid=40762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391430301.770:2958): pid=41602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391430301.770:2959): pid=41602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391430301.770:2960): login pid=41602 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=349 >type=USER_START msg=audit(1391430301.770:2961): pid=41602 uid=0 auid=0 ses=349 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391430301.770:2962): pid=41602 uid=0 auid=0 ses=349 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391430301.780:2963): pid=41602 uid=0 auid=0 ses=349 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391430301.790:2964): pid=41602 uid=0 auid=0 ses=349 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=VIRT_MACHINE_ID msg=audit(1391430326.360:2965): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="ppcvm" uuid=934e1e9c-722c-4ea4-bc18-c4a5267341a1 vm-ctx=system_u:system_r:svirt_tcg_t:s0:c622,c655 img-ctx=system_u:object_r:svirt_image_t:s0:c622,c655 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1391430326.360:2966): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="ppcvm" uuid=934e1e9c-722c-4ea4-bc18-c4a5267341a1 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391430326.390:2967): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=deny vm="ppcvm" uuid=934e1e9c-722c-4ea4-bc18-c4a5267341a1 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391430326.390:2968): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=934e1e9c-722c-4ea4-bc18-c4a5267341a1 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/rhev/data-center/mnt/10.10.27.68:_storage/e44c3cf3-4197-4a9b-894a-29b226ba5101/images/47d10316-bfb7-482e-9a8a-0081a2e424a9/0d883533-e510-42e3-8bae-8e9a032f53a5" rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391430326.390:2969): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=934e1e9c-722c-4ea4-bc18-c4a5267341a1 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391430326.390:2970): avc: denied { entrypoint } for pid=41643 comm="libvirtd" path="/usr/bin/qemu-system-ppc64" dev="dm-1" ino=2263190 scontext=system_u:system_r:svirt_tcg_t:s0:c622,c655 tcontext=unconfined_u:object_r:bin_t:s0 tclass=file >type=SYSCALL msg=audit(1391430326.390:2970): arch=80000015 syscall=11 success=no exit=-13 a0=1fffc800a0d0 a1=1fffc800b640 a2=1fffc800a1e0 a3=8 items=0 ppid=1 pid=41643 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1391430326.610:2971): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=disk reason=start vm="ppcvm" uuid=934e1e9c-722c-4ea4-bc18-c4a5267341a1 old-disk="?" new-disk="/rhev/data-center/mnt/10.10.27.68:_storage/e44c3cf3-4197-4a9b-894a-29b226ba5101/images/47d10316-bfb7-482e-9a8a-0081a2e424a9/0d883533-e510-42e3-8bae-8e9a032f53a5" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391430326.610:2972): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=mem reason=start vm="ppcvm" uuid=934e1e9c-722c-4ea4-bc18-c4a5267341a1 old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391430326.610:2973): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=vcpu reason=start vm="ppcvm" uuid=934e1e9c-722c-4ea4-bc18-c4a5267341a1 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1391430326.610:2974): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=start reason=booted vm="ppcvm" uuid=934e1e9c-722c-4ea4-bc18-c4a5267341a1 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=USER_CMD msg=audit(1391430329.730:2975): pid=41662 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F736572766963652076686F73746D642073746F70 terminal=? res=success' >type=CRED_ACQ msg=audit(1391430329.730:2976): pid=41662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391430329.730:2977): pid=41662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391430329.770:2978): pid=41662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391430329.770:2979): pid=41662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=MAC_STATUS msg=audit(1391430371.850:2980): enforcing=0 old_enforcing=1 auid=0 ses=2 >type=SYSCALL msg=audit(1391430371.850:2980): arch=80000015 syscall=4 success=yes exit=1 a0=3 a1=3fffd0e09fa0 a2=1 a3=0 items=0 ppid=1614 pid=41719 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=2 tty=pts0 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1391431201.801:2981): pid=42536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391431201.801:2982): pid=42536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391431201.801:2983): login pid=42536 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=350 >type=USER_START msg=audit(1391431201.801:2984): pid=42536 uid=0 auid=0 ses=350 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391431201.811:2985): pid=42536 uid=0 auid=0 ses=350 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391431201.811:2986): pid=42536 uid=0 auid=0 ses=350 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391431201.821:2987): pid=42536 uid=0 auid=0 ses=350 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391431330.121:2988): pid=42709 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=756D6F756E74202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391431330.121:2989): pid=42709 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391431330.121:2990): pid=42709 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391431330.131:2991): pid=42709 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391431330.131:2992): pid=42709 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_AVC msg=audit(1391431344.811:2993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received setenforce notice (enforcing=0) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=SERVICE_STOP msg=audit(1391431354.151:2994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391431433.261:2995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sanlock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_CMD msg=audit(1391431445.701:2996): pid=42769 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=756D6F756E74202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391431445.701:2997): pid=42769 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391431445.701:2998): pid=42769 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391431445.771:2999): pid=42769 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391431445.771:3000): pid=42769 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1391431450.341:3001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sanlock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391431455.521:3002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431455.761:3003): pid=42861 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D70487279354E77 terminal=? res=success' >type=CRED_ACQ msg=audit(1391431455.761:3004): pid=42861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431455.761:3005): pid=42861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431455.771:3006): pid=42861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431455.771:3007): pid=42861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431456.361:3008): pid=42881 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1391431456.371:3009): pid=42881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431456.371:3010): pid=42881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431456.371:3011): pid=42881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431456.371:3012): pid=42881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431456.411:3013): pid=42885 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391431456.411:3014): pid=42885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431456.411:3015): pid=42885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431456.411:3016): pid=42885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431456.411:3017): pid=42885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431458.441:3018): pid=42904 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391431458.441:3019): pid=42904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431458.441:3020): pid=42904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431458.471:3021): pid=42904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431458.471:3022): pid=42904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431458.481:3023): pid=42924 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391431458.491:3024): pid=42924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431458.491:3025): pid=42924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431458.501:3026): pid=42924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431458.501:3027): pid=42924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431458.511:3028): pid=42927 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391431458.511:3029): pid=42927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431458.511:3030): pid=42927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431458.521:3031): pid=42927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431458.521:3032): pid=42927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431458.531:3033): pid=42930 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_ACQ msg=audit(1391431458.531:3034): pid=42930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431458.531:3035): pid=42930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431458.541:3036): pid=42930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431458.541:3037): pid=42930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431458.551:3038): pid=42933 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391431458.551:3039): pid=42933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431458.551:3040): pid=42933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431458.561:3041): pid=42933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431458.561:3042): pid=42933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431856.281:3043): pid=43113 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D332031302E31302E32372E36383A2F73746F72616765202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391431856.281:3044): pid=43113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431856.281:3045): pid=43113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431856.321:3046): pid=43113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431856.321:3047): pid=43113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431856.951:3048): pid=43125 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391431856.951:3049): pid=43125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431856.951:3050): pid=43125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431856.951:3051): pid=43125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431856.951:3052): pid=43125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431856.961:3053): pid=43127 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391431856.961:3054): pid=43127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431856.961:3055): pid=43127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431856.991:3056): pid=43127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431856.991:3057): pid=43127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431857.011:3058): pid=43145 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1391431857.011:3059): pid=43145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431857.011:3060): pid=43145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431857.021:3061): pid=43145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431857.021:3062): pid=43145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431858.091:3063): pid=43157 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F756D6F756E74202D66202D6C202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391431858.091:3064): pid=43157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431858.091:3065): pid=43157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431858.171:3066): pid=43157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431858.171:3067): pid=43157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431858.181:3068): pid=43160 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391431858.181:3069): pid=43160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431858.181:3070): pid=43160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431858.181:3071): pid=43160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431858.181:3072): pid=43160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431858.191:3073): pid=43162 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391431858.191:3074): pid=43162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431858.191:3075): pid=43162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431858.221:3076): pid=43162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431858.221:3077): pid=43162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431858.851:3078): pid=43181 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D332031302E31302E32372E36383A2F73746F72616765202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391431858.851:3079): pid=43181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431858.851:3080): pid=43181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431858.861:3081): pid=43181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431858.861:3082): pid=43181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431858.911:3083): pid=43188 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391431858.911:3084): pid=43188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431858.911:3085): pid=43188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431858.911:3086): pid=43188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431858.911:3087): pid=43188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431858.921:3088): pid=43190 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391431858.921:3089): pid=43190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431858.921:3090): pid=43190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431858.951:3091): pid=43190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431858.951:3092): pid=43190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431880.171:3093): pid=43224 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391431880.171:3094): pid=43224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431880.171:3095): pid=43224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431880.181:3096): pid=43224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431880.181:3097): pid=43224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431887.231:3098): pid=43236 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391431887.231:3099): pid=43236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431887.231:3100): pid=43236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431887.231:3101): pid=43236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431887.231:3102): pid=43236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431887.241:3103): pid=43238 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391431887.241:3104): pid=43238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431887.241:3105): pid=43238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431887.271:3106): pid=43238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431887.271:3107): pid=43238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431887.381:3108): pid=43258 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391431887.381:3109): pid=43258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431887.381:3110): pid=43258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431887.391:3111): pid=43258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431887.391:3112): pid=43258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431909.011:3113): pid=43313 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391431909.011:3114): pid=43313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431909.011:3115): pid=43313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431909.011:3116): pid=43313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431909.011:3117): pid=43313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431909.021:3118): pid=43315 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391431909.021:3119): pid=43315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431909.021:3120): pid=43315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431909.051:3121): pid=43315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431909.051:3122): pid=43315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391431909.101:3123): pid=43334 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391431909.101:3124): pid=43334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391431909.101:3125): pid=43334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391431909.111:3126): pid=43334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391431909.111:3127): pid=43334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1391432088.381:3128): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="ppcvm" uuid=8e236d8a-d690-43eb-851b-eb4ed8735297 vm-ctx=system_u:system_r:svirt_tcg_t:s0:c213,c417 img-ctx=system_u:object_r:svirt_image_t:s0:c213,c417 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1391432088.381:3129): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="ppcvm" uuid=8e236d8a-d690-43eb-851b-eb4ed8735297 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1391432088.521:3130): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1391432088.521:3130): arch=80000015 syscall=54 success=yes exit=0 a0=1a a1=89a2 a2=1ffff63fd000 a3=0 items=0 ppid=1 pid=40069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1391432088.591:3131): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=open vm="ppcvm" uuid=8e236d8a-d690-43eb-851b-eb4ed8735297 net=00:1a:4a:88:b2:f2 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391432088.971:3132): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=deny vm="ppcvm" uuid=8e236d8a-d690-43eb-851b-eb4ed8735297 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391432088.971:3133): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=8e236d8a-d690-43eb-851b-eb4ed8735297 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/rhev/data-center/mnt/10.10.27.68:_storage/f98655b5-536f-4d8c-afad-eaaa2cd25a95/images/04da3c11-e2f0-4081-b2ed-c52d750c121f/9e59e1f4-5a4a-464f-8d15-a3137db46805" rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391432088.971:3134): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=8e236d8a-d690-43eb-851b-eb4ed8735297 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391432088.971:3135): avc: denied { entrypoint } for pid=43642 comm="libvirtd" path="/usr/bin/qemu-system-ppc64" dev="dm-1" ino=2263190 scontext=system_u:system_r:svirt_tcg_t:s0:c213,c417 tcontext=unconfined_u:object_r:bin_t:s0 tclass=file >type=SYSCALL msg=audit(1391432088.971:3135): arch=80000015 syscall=11 success=yes exit=0 a0=1fffe4004050 a1=1fffe4005250 a2=1fffe4004160 a3=8 items=0 ppid=1 pid=43642 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 ses=4294967295 tty=(none) comm="qemu-system-ppc" exe="/usr/bin/qemu-system-ppc64" subj=system_u:system_r:svirt_tcg_t:s0:c213,c417 key=(null) >type=VIRT_RESOURCE msg=audit(1391432089.201:3136): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=disk reason=start vm="ppcvm" uuid=8e236d8a-d690-43eb-851b-eb4ed8735297 old-disk="?" new-disk="/rhev/data-center/mnt/10.10.27.68:_storage/f98655b5-536f-4d8c-afad-eaaa2cd25a95/images/04da3c11-e2f0-4081-b2ed-c52d750c121f/9e59e1f4-5a4a-464f-8d15-a3137db46805" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391432089.201:3137): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=start vm="ppcvm" uuid=8e236d8a-d690-43eb-851b-eb4ed8735297 old-net=? new-net=00:1a:4a:88:b2:f2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391432089.201:3138): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=mem reason=start vm="ppcvm" uuid=8e236d8a-d690-43eb-851b-eb4ed8735297 old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391432089.201:3139): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=vcpu reason=start vm="ppcvm" uuid=8e236d8a-d690-43eb-851b-eb4ed8735297 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1391432089.201:3140): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=start reason=booted vm="ppcvm" uuid=8e236d8a-d690-43eb-851b-eb4ed8735297 vm-pid=43642 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391432101.831:3141): pid=43672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391432101.831:3142): pid=43672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391432101.831:3143): login pid=43672 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=351 >type=USER_START msg=audit(1391432101.841:3144): pid=43672 uid=0 auid=0 ses=351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391432101.841:3145): pid=43672 uid=0 auid=0 ses=351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391432101.851:3146): pid=43672 uid=0 auid=0 ses=351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391432101.851:3147): pid=43672 uid=0 auid=0 ses=351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391432461.862:3148): pid=44120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391432461.862:3149): pid=44120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391432461.862:3150): login pid=44120 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=352 >type=USER_START msg=audit(1391432461.862:3151): pid=44120 uid=0 auid=0 ses=352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391432461.862:3152): pid=44120 uid=0 auid=0 ses=352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391432461.882:3153): avc: denied { read } for pid=44136 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391432461.882:3153): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffc0b4fb20 a2=84800 a3=0 items=0 ppid=44134 pid=44136 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=352 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391432461.902:3154): pid=44120 uid=0 auid=0 ses=352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391432461.902:3155): pid=44120 uid=0 auid=0 ses=352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391433001.912:3156): pid=44795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391433001.912:3157): pid=44795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391433001.912:3158): login pid=44795 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=353 >type=USER_START msg=audit(1391433001.922:3159): pid=44795 uid=0 auid=0 ses=353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391433001.922:3160): pid=44795 uid=0 auid=0 ses=353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391433001.932:3161): pid=44795 uid=0 auid=0 ses=353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391433001.932:3162): pid=44795 uid=0 auid=0 ses=353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391433901.942:3163): pid=45876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391433901.942:3164): pid=45876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391433901.942:3165): login pid=45876 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=354 >type=USER_START msg=audit(1391433901.942:3166): pid=45876 uid=0 auid=0 ses=354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391433901.942:3167): pid=45876 uid=0 auid=0 ses=354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391433901.952:3168): pid=45876 uid=0 auid=0 ses=354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391433901.952:3169): pid=45876 uid=0 auid=0 ses=354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391434801.963:3170): pid=46956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391434801.963:3171): pid=46956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391434801.963:3172): login pid=46956 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=355 >type=USER_START msg=audit(1391434801.963:3173): pid=46956 uid=0 auid=0 ses=355 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391434801.963:3174): pid=46956 uid=0 auid=0 ses=355 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391434801.973:3175): pid=46956 uid=0 auid=0 ses=355 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391434801.973:3176): pid=46956 uid=0 auid=0 ses=355 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391435701.983:3177): pid=48041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391435701.983:3178): pid=48041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391435701.983:3179): login pid=48041 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=356 >type=USER_START msg=audit(1391435701.983:3180): pid=48041 uid=0 auid=0 ses=356 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391435701.983:3181): pid=48041 uid=0 auid=0 ses=356 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391435701.993:3182): pid=48041 uid=0 auid=0 ses=356 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391435701.993:3183): pid=48041 uid=0 auid=0 ses=356 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391436062.004:3184): pid=48474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391436062.004:3185): pid=48474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391436062.004:3186): login pid=48474 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=357 >type=USER_START msg=audit(1391436062.004:3187): pid=48474 uid=0 auid=0 ses=357 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391436062.004:3188): pid=48474 uid=0 auid=0 ses=357 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391436062.024:3189): avc: denied { read } for pid=48490 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391436062.024:3189): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffd8a49630 a2=84800 a3=0 items=0 ppid=48488 pid=48490 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=357 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391436062.034:3190): pid=48474 uid=0 auid=0 ses=357 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391436062.034:3191): pid=48474 uid=0 auid=0 ses=357 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391436601.044:3192): pid=49152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391436601.044:3193): pid=49152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391436601.044:3194): login pid=49152 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=358 >type=USER_START msg=audit(1391436601.054:3195): pid=49152 uid=0 auid=0 ses=358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391436601.054:3196): pid=49152 uid=0 auid=0 ses=358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391436601.054:3197): pid=49152 uid=0 auid=0 ses=358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391436601.064:3198): pid=49152 uid=0 auid=0 ses=358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391437501.075:3199): pid=49913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391437501.075:3200): pid=49913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391437501.075:3201): login pid=49913 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=359 >type=USER_START msg=audit(1391437501.075:3202): pid=49913 uid=0 auid=0 ses=359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391437501.075:3203): pid=49913 uid=0 auid=0 ses=359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391437501.085:3204): pid=49913 uid=0 auid=0 ses=359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391437501.085:3205): pid=49913 uid=0 auid=0 ses=359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391438401.095:3206): pid=50869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391438401.095:3207): pid=50869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391438401.095:3208): login pid=50869 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=360 >type=USER_START msg=audit(1391438401.095:3209): pid=50869 uid=0 auid=0 ses=360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391438401.095:3210): pid=50869 uid=0 auid=0 ses=360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391438401.105:3211): pid=50869 uid=0 auid=0 ses=360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391438401.105:3212): pid=50869 uid=0 auid=0 ses=360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391439301.106:3213): pid=51948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391439301.106:3214): pid=51948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391439301.106:3215): login pid=51948 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=361 >type=USER_START msg=audit(1391439301.106:3216): pid=51948 uid=0 auid=0 ses=361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391439301.106:3217): pid=51948 uid=0 auid=0 ses=361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391439301.116:3218): pid=51948 uid=0 auid=0 ses=361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391439301.116:3219): pid=51948 uid=0 auid=0 ses=361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391439661.126:3220): pid=52385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391439661.126:3221): pid=52385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391439661.126:3222): login pid=52385 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=362 >type=USER_START msg=audit(1391439661.136:3223): pid=52385 uid=0 auid=0 ses=362 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391439661.136:3224): pid=52385 uid=0 auid=0 ses=362 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391439661.146:3225): avc: denied { read } for pid=52401 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391439661.146:3225): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffe6cb54a0 a2=84800 a3=0 items=0 ppid=52399 pid=52401 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=362 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391439661.166:3226): pid=52385 uid=0 auid=0 ses=362 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391439661.166:3227): pid=52385 uid=0 auid=0 ses=362 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391440201.176:3228): pid=53061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391440201.176:3229): pid=53061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391440201.176:3230): login pid=53061 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=363 >type=USER_START msg=audit(1391440201.186:3231): pid=53061 uid=0 auid=0 ses=363 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391440201.186:3232): pid=53061 uid=0 auid=0 ses=363 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391440201.196:3233): pid=53061 uid=0 auid=0 ses=363 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391440201.196:3234): pid=53061 uid=0 auid=0 ses=363 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391441101.207:3235): pid=54025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391441101.207:3236): pid=54025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391441101.207:3237): login pid=54025 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=364 >type=USER_START msg=audit(1391441101.207:3238): pid=54025 uid=0 auid=0 ses=364 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391441101.207:3239): pid=54025 uid=0 auid=0 ses=364 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391441101.217:3240): pid=54025 uid=0 auid=0 ses=364 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391441101.217:3241): pid=54025 uid=0 auid=0 ses=364 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391441733.337:3242): pid=54690 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=756D6F756E74202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391441733.337:3243): pid=54690 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391441733.337:3244): pid=54690 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391441733.347:3245): pid=54690 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391441733.347:3246): pid=54690 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=ANOM_PROMISCUOUS msg=audit(1391441744.227:3247): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1391441744.517:3248): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=stop reason=destroyed vm="ppcvm" uuid=8e236d8a-d690-43eb-851b-eb4ed8735297 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391441744.627:3249): pid=54766 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F736572766963652076686F73746D642073746F70 terminal=? res=success' >type=CRED_ACQ msg=audit(1391441744.627:3250): pid=54766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391441744.627:3251): pid=54766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391441744.667:3252): pid=54766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391441744.667:3253): pid=54766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391441745.897:3254): pid=54778 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=756D6F756E74202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391441745.897:3255): pid=54778 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391441745.897:3256): pid=54778 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391441745.907:3257): pid=54778 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391441745.907:3258): pid=54778 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_STOP msg=audit(1391441757.177:3259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391441768.687:3260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sanlock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_CMD msg=audit(1391441773.797:3261): pid=54816 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=756D6F756E74202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391441773.797:3262): pid=54816 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391441773.797:3263): pid=54816 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391441773.887:3264): pid=54816 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391441773.887:3265): pid=54816 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1391441785.397:3266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sanlock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391441790.047:3267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391441790.287:3268): pid=54918 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D7068465A4D436F terminal=? res=success' >type=CRED_ACQ msg=audit(1391441790.297:3269): pid=54918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391441790.297:3270): pid=54918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391441790.297:3271): pid=54918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391441790.297:3272): pid=54918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391441790.887:3273): pid=54938 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1391441790.887:3274): pid=54938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391441790.887:3275): pid=54938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391441790.897:3276): pid=54938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391441790.897:3277): pid=54938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391441790.947:3278): pid=54942 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391441790.947:3279): pid=54942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391441790.947:3280): pid=54942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391441790.957:3281): pid=54942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391441790.957:3282): pid=54942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391441790.967:3283): pid=54947 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391441790.967:3284): pid=54947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391441790.967:3285): pid=54947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391441791.007:3286): pid=54947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391441791.007:3287): pid=54947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391441791.157:3288): pid=54977 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391441791.157:3289): pid=54977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391441791.157:3290): pid=54977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391441791.177:3291): pid=54977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391441791.177:3292): pid=54977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391441791.207:3293): pid=54981 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391441791.207:3294): pid=54981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391441791.207:3295): pid=54981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391441791.217:3296): pid=54981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391441791.217:3297): pid=54981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391441791.237:3298): pid=54984 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_ACQ msg=audit(1391441791.237:3299): pid=54984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391441791.237:3300): pid=54984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391441791.247:3301): pid=54984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391441791.247:3302): pid=54984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391441791.267:3303): pid=54987 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1391441791.267:3304): pid=54987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391441791.277:3305): pid=54987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391441791.277:3306): pid=54987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391441791.277:3307): pid=54987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391441811.577:3308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391441813.207:3309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391441813.457:3310): pid=55075 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D70553750793978 terminal=? res=success' >type=CRED_ACQ msg=audit(1391441813.457:3311): pid=55075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391441813.457:3312): pid=55075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391441813.457:3313): pid=55075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391441813.457:3314): pid=55075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391441814.377:3315): pid=55095 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1391441814.377:3316): pid=55095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391441814.377:3317): pid=55095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391441814.387:3318): pid=55095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391441814.387:3319): pid=55095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391441814.437:3320): pid=55099 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391441814.437:3321): pid=55099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391441814.437:3322): pid=55099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391441814.437:3323): pid=55099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391441814.437:3324): pid=55099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391441814.447:3325): pid=55106 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391441814.447:3326): pid=55106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391441814.447:3327): pid=55106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391441814.487:3328): pid=55106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391441814.487:3329): pid=55106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391441814.647:3330): pid=55135 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391441814.647:3331): pid=55135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391441814.647:3332): pid=55135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391441814.657:3333): pid=55135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391441814.657:3334): pid=55135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391441814.687:3335): pid=55139 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391441814.687:3336): pid=55139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391441814.687:3337): pid=55139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391441814.697:3338): pid=55139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391441814.697:3339): pid=55139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391441814.727:3340): pid=55142 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_ACQ msg=audit(1391441814.727:3341): pid=55142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391441814.727:3342): pid=55142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391441814.737:3343): pid=55142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391441814.737:3344): pid=55142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391441814.767:3345): pid=55145 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391441814.767:3346): pid=55145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391441814.767:3347): pid=55145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391441814.777:3348): pid=55145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391441814.777:3349): pid=55145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391442001.227:3350): pid=55208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391442001.227:3351): pid=55208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391442001.227:3352): login pid=55208 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=365 >type=USER_START msg=audit(1391442001.237:3353): pid=55208 uid=0 auid=0 ses=365 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391442001.237:3354): pid=55208 uid=0 auid=0 ses=365 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391442001.247:3355): pid=55208 uid=0 auid=0 ses=365 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391442001.247:3356): pid=55208 uid=0 auid=0 ses=365 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391442802.028:3357): pid=55498 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D332031302E31302E32372E36383A2F73746F72616765202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391442802.028:3358): pid=55498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391442802.028:3359): pid=55498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391442802.068:3360): pid=55498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391442802.068:3361): pid=55498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391442802.698:3362): pid=55510 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391442802.698:3363): pid=55510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391442802.698:3364): pid=55510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391442802.698:3365): pid=55510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391442802.698:3366): pid=55510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391442802.708:3367): pid=55512 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391442802.708:3368): pid=55512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391442802.708:3369): pid=55512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391442802.738:3370): pid=55512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391442802.738:3371): pid=55512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391442802.758:3372): pid=55532 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F' >type=CRED_ACQ msg=audit(1391442802.758:3373): pid=55532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391442802.758:3374): pid=55532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391442802.768:3375): pid=55532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391442802.768:3376): pid=55532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391442803.758:3377): pid=55543 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F756D6F756E74202D66202D6C202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391442803.758:3378): pid=55543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391442803.758:3379): pid=55543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391442803.828:3380): pid=55543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391442803.828:3381): pid=55543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391442803.838:3382): pid=55546 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391442803.838:3383): pid=55546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391442803.838:3384): pid=55546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391442803.838:3385): pid=55546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391442803.838:3386): pid=55546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391442803.848:3387): pid=55548 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391442803.848:3388): pid=55548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391442803.858:3389): pid=55548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391442803.878:3390): pid=55548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391442803.878:3391): pid=55548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391442804.718:3392): pid=55566 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D332031302E31302E32372E36383A2F73746F72616765202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391442804.718:3393): pid=55566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391442804.718:3394): pid=55566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391442804.728:3395): pid=55566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391442804.728:3396): pid=55566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391442804.788:3397): pid=55573 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391442804.788:3398): pid=55573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391442804.788:3399): pid=55573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391442804.788:3400): pid=55573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391442804.788:3401): pid=55573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391442804.808:3402): pid=55575 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391442804.808:3403): pid=55575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391442804.808:3404): pid=55575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391442804.828:3405): pid=55575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391442804.828:3406): pid=55575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391442826.048:3407): pid=55609 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391442826.048:3408): pid=55609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391442826.048:3409): pid=55609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391442826.058:3410): pid=55609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391442826.058:3411): pid=55609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391442830.198:3412): pid=55622 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391442830.198:3413): pid=55622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391442830.198:3414): pid=55622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391442830.198:3415): pid=55622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391442830.198:3416): pid=55622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391442830.208:3417): pid=55624 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391442830.208:3418): pid=55624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391442830.208:3419): pid=55624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391442830.238:3420): pid=55624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391442830.238:3421): pid=55624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391442830.348:3422): pid=55643 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391442830.348:3423): pid=55643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391442830.348:3424): pid=55643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391442830.358:3425): pid=55643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391442830.358:3426): pid=55643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391442852.878:3427): pid=55696 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391442852.878:3428): pid=55696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391442852.878:3429): pid=55696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391442852.878:3430): pid=55696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391442852.878:3431): pid=55696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391442852.888:3432): pid=55698 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391442852.888:3433): pid=55698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391442852.888:3434): pid=55698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391442852.938:3435): pid=55698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391442852.938:3436): pid=55698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391442852.978:3437): pid=55717 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391442852.978:3438): pid=55717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391442852.978:3439): pid=55717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391442852.988:3440): pid=55717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391442852.988:3441): pid=55717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391442901.258:3442): pid=55767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391442901.268:3443): pid=55767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391442901.268:3444): login pid=55767 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=366 >type=USER_START msg=audit(1391442901.268:3445): pid=55767 uid=0 auid=0 ses=366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391442901.268:3446): pid=55767 uid=0 auid=0 ses=366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391442901.278:3447): pid=55767 uid=0 auid=0 ses=366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391442901.278:3448): pid=55767 uid=0 auid=0 ses=366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=VIRT_MACHINE_ID msg=audit(1391442980.188:3449): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 vm-ctx=system_u:system_r:svirt_tcg_t:s0:c175,c705 img-ctx=system_u:object_r:svirt_image_t:s0:c175,c705 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1391442980.188:3450): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1391442980.348:3451): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1391442980.348:3451): arch=80000015 syscall=54 success=yes exit=0 a0=1a a1=89a2 a2=1ffff53fd000 a3=0 items=0 ppid=1 pid=40071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1391442980.418:3452): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=open vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 net=00:1a:4a:1d:90:7e path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391442980.728:3453): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=deny vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391442980.728:3454): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/rhev/data-center/mnt/10.10.27.68:_storage/9550cdb4-2d33-40e1-9a35-3ecb0a6efba0/images/7efab88b-d498-4e8f-b2bc-eca234dc684c/a7c717a2-5326-44dc-aa90-dc06c820d16c" rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391442980.728:3455): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391442980.728:3456): avc: denied { entrypoint } for pid=55976 comm="libvirtd" path="/usr/bin/qemu-system-ppc64" dev="dm-1" ino=2263190 scontext=system_u:system_r:svirt_tcg_t:s0:c175,c705 tcontext=unconfined_u:object_r:bin_t:s0 tclass=file >type=SYSCALL msg=audit(1391442980.728:3456): arch=80000015 syscall=11 success=yes exit=0 a0=1fffc8006d10 a1=1fffc8002b70 a2=1fffc8006e20 a3=8 items=0 ppid=1 pid=55976 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 ses=4294967295 tty=(none) comm="qemu-system-ppc" exe="/usr/bin/qemu-system-ppc64" subj=system_u:system_r:svirt_tcg_t:s0:c175,c705 key=(null) >type=VIRT_RESOURCE msg=audit(1391442980.948:3457): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=disk reason=start vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 old-disk="?" new-disk="/rhev/data-center/mnt/10.10.27.68:_storage/9550cdb4-2d33-40e1-9a35-3ecb0a6efba0/images/7efab88b-d498-4e8f-b2bc-eca234dc684c/a7c717a2-5326-44dc-aa90-dc06c820d16c" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391442980.948:3458): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=start vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 old-net=? new-net=00:1a:4a:1d:90:7e exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391442980.948:3459): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=mem reason=start vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391442980.948:3460): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=vcpu reason=start vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1391442980.948:3461): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=start reason=booted vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 vm-pid=55976 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391443090.288:3462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391443090.288:3463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391443261.288:3464): pid=56311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391443261.288:3465): pid=56311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391443261.288:3466): login pid=56311 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=367 >type=USER_START msg=audit(1391443261.298:3467): pid=56311 uid=0 auid=0 ses=367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391443261.298:3468): pid=56311 uid=0 auid=0 ses=367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391443261.318:3469): avc: denied { read } for pid=56327 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391443261.318:3469): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffd4f6dd70 a2=84800 a3=0 items=0 ppid=56325 pid=56327 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=367 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391443261.338:3470): pid=56311 uid=0 auid=0 ses=367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391443261.348:3471): pid=56311 uid=0 auid=0 ses=367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391443801.358:3472): pid=56832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391443801.358:3473): pid=56832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391443801.358:3474): login pid=56832 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=368 >type=USER_START msg=audit(1391443801.358:3475): pid=56832 uid=0 auid=0 ses=368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391443801.358:3476): pid=56832 uid=0 auid=0 ses=368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391443801.368:3477): pid=56832 uid=0 auid=0 ses=368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391443801.368:3478): pid=56832 uid=0 auid=0 ses=368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391444701.379:3479): pid=57466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391444701.379:3480): pid=57466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391444701.379:3481): login pid=57466 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=369 >type=USER_START msg=audit(1391444701.379:3482): pid=57466 uid=0 auid=0 ses=369 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391444701.379:3483): pid=57466 uid=0 auid=0 ses=369 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391444701.389:3484): pid=57466 uid=0 auid=0 ses=369 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391444701.389:3485): pid=57466 uid=0 auid=0 ses=369 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391445601.399:3486): pid=58080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391445601.399:3487): pid=58080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391445601.399:3488): login pid=58080 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=370 >type=USER_START msg=audit(1391445601.409:3489): pid=58080 uid=0 auid=0 ses=370 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391445601.409:3490): pid=58080 uid=0 auid=0 ses=370 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391445601.409:3491): pid=58080 uid=0 auid=0 ses=370 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391445601.409:3492): pid=58080 uid=0 auid=0 ses=370 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391446501.420:3493): pid=58721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391446501.420:3494): pid=58721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391446501.420:3495): login pid=58721 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=371 >type=USER_START msg=audit(1391446501.430:3496): pid=58721 uid=0 auid=0 ses=371 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391446501.430:3497): pid=58721 uid=0 auid=0 ses=371 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391446501.440:3498): pid=58721 uid=0 auid=0 ses=371 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391446501.440:3499): pid=58721 uid=0 auid=0 ses=371 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391446861.450:3500): pid=59109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391446861.450:3501): pid=59109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391446861.450:3502): login pid=59109 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=372 >type=USER_START msg=audit(1391446861.450:3503): pid=59109 uid=0 auid=0 ses=372 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391446861.450:3504): pid=59109 uid=0 auid=0 ses=372 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391446861.470:3505): avc: denied { read } for pid=59125 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391446861.470:3505): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffd097ee00 a2=84800 a3=0 items=0 ppid=59123 pid=59125 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=372 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391446861.480:3506): pid=59109 uid=0 auid=0 ses=372 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391446861.480:3507): pid=59109 uid=0 auid=0 ses=372 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391447401.490:3508): pid=59514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391447401.490:3509): pid=59514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391447401.490:3510): login pid=59514 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=373 >type=USER_START msg=audit(1391447401.500:3511): pid=59514 uid=0 auid=0 ses=373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391447401.500:3512): pid=59514 uid=0 auid=0 ses=373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391447401.510:3513): pid=59514 uid=0 auid=0 ses=373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391447401.510:3514): pid=59514 uid=0 auid=0 ses=373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391448301.521:3515): pid=60117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391448301.521:3516): pid=60117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391448301.521:3517): login pid=60117 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=374 >type=USER_START msg=audit(1391448301.521:3518): pid=60117 uid=0 auid=0 ses=374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391448301.521:3519): pid=60117 uid=0 auid=0 ses=374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391448301.531:3520): pid=60117 uid=0 auid=0 ses=374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391448301.531:3521): pid=60117 uid=0 auid=0 ses=374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391449201.541:3522): pid=61190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391449201.541:3523): pid=61190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391449201.541:3524): login pid=61190 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=375 >type=USER_START msg=audit(1391449201.541:3525): pid=61190 uid=0 auid=0 ses=375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391449201.541:3526): pid=61190 uid=0 auid=0 ses=375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391449201.551:3527): pid=61190 uid=0 auid=0 ses=375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391449201.551:3528): pid=61190 uid=0 auid=0 ses=375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391450101.562:3529): pid=61816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391450101.562:3530): pid=61816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391450101.562:3531): login pid=61816 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=376 >type=USER_START msg=audit(1391450101.572:3532): pid=61816 uid=0 auid=0 ses=376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391450101.572:3533): pid=61816 uid=0 auid=0 ses=376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391450101.572:3534): pid=61816 uid=0 auid=0 ses=376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391450101.582:3535): pid=61816 uid=0 auid=0 ses=376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391450461.582:3536): pid=62041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391450461.582:3537): pid=62041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391450461.582:3538): login pid=62041 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=377 >type=USER_START msg=audit(1391450461.592:3539): pid=62041 uid=0 auid=0 ses=377 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391450461.592:3540): pid=62041 uid=0 auid=0 ses=377 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391450461.602:3541): avc: denied { read } for pid=62057 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391450461.602:3541): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffd73b8030 a2=84800 a3=0 items=0 ppid=62055 pid=62057 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=377 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391450461.622:3542): pid=62041 uid=0 auid=0 ses=377 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391450461.622:3543): pid=62041 uid=0 auid=0 ses=377 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391451001.633:3544): pid=62397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391451001.633:3545): pid=62397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391451001.633:3546): login pid=62397 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=378 >type=USER_START msg=audit(1391451001.643:3547): pid=62397 uid=0 auid=0 ses=378 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391451001.643:3548): pid=62397 uid=0 auid=0 ses=378 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391451001.643:3549): pid=62397 uid=0 auid=0 ses=378 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391451001.653:3550): pid=62397 uid=0 auid=0 ses=378 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391451901.663:3551): pid=63103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391451901.663:3552): pid=63103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391451901.663:3553): login pid=63103 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=379 >type=USER_START msg=audit(1391451901.663:3554): pid=63103 uid=0 auid=0 ses=379 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391451901.663:3555): pid=63103 uid=0 auid=0 ses=379 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391451901.673:3556): pid=63103 uid=0 auid=0 ses=379 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391451901.673:3557): pid=63103 uid=0 auid=0 ses=379 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391452801.684:3558): pid=63651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391452801.684:3559): pid=63651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391452801.684:3560): login pid=63651 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=380 >type=USER_START msg=audit(1391452801.684:3561): pid=63651 uid=0 auid=0 ses=380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391452801.684:3562): pid=63651 uid=0 auid=0 ses=380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391452801.694:3563): pid=63651 uid=0 auid=0 ses=380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391452801.694:3564): pid=63651 uid=0 auid=0 ses=380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391453701.704:3565): pid=64200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391453701.704:3566): pid=64200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391453701.704:3567): login pid=64200 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=381 >type=USER_START msg=audit(1391453701.704:3568): pid=64200 uid=0 auid=0 ses=381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391453701.704:3569): pid=64200 uid=0 auid=0 ses=381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391453701.714:3570): pid=64200 uid=0 auid=0 ses=381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391453701.714:3571): pid=64200 uid=0 auid=0 ses=381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391454061.724:3572): pid=64424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391454061.724:3573): pid=64424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391454061.724:3574): login pid=64424 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=382 >type=USER_START msg=audit(1391454061.724:3575): pid=64424 uid=0 auid=0 ses=382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391454061.724:3576): pid=64424 uid=0 auid=0 ses=382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391454061.744:3577): avc: denied { read } for pid=64440 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391454061.744:3577): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffc9099b00 a2=84800 a3=0 items=0 ppid=64438 pid=64440 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=382 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391454061.754:3578): pid=64424 uid=0 auid=0 ses=382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391454061.764:3579): pid=64424 uid=0 auid=0 ses=382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391454601.765:3580): pid=64780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391454601.765:3581): pid=64780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391454601.775:3582): login pid=64780 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=383 >type=USER_START msg=audit(1391454601.775:3583): pid=64780 uid=0 auid=0 ses=383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391454601.775:3584): pid=64780 uid=0 auid=0 ses=383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391454601.785:3585): pid=64780 uid=0 auid=0 ses=383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391454601.785:3586): pid=64780 uid=0 auid=0 ses=383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391455501.785:3587): pid=65328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391455501.785:3588): pid=65328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391455501.785:3589): login pid=65328 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=384 >type=USER_START msg=audit(1391455501.785:3590): pid=65328 uid=0 auid=0 ses=384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391455501.785:3591): pid=65328 uid=0 auid=0 ses=384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391455501.795:3592): pid=65328 uid=0 auid=0 ses=384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391455501.795:3593): pid=65328 uid=0 auid=0 ses=384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391456401.806:3594): pid=693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391456401.806:3595): pid=693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391456401.806:3596): login pid=693 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=385 >type=USER_START msg=audit(1391456401.816:3597): pid=693 uid=0 auid=0 ses=385 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391456401.816:3598): pid=693 uid=0 auid=0 ses=385 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391456401.816:3599): pid=693 uid=0 auid=0 ses=385 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391456401.816:3600): pid=693 uid=0 auid=0 ses=385 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391457301.826:3601): pid=1293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391457301.826:3602): pid=1293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391457301.826:3603): login pid=1293 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=386 >type=USER_START msg=audit(1391457301.836:3604): pid=1293 uid=0 auid=0 ses=386 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391457301.836:3605): pid=1293 uid=0 auid=0 ses=386 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391457302.146:3606): pid=1293 uid=0 auid=0 ses=386 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391457302.146:3607): pid=1293 uid=0 auid=0 ses=386 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391457661.157:3608): pid=1520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391457661.157:3609): pid=1520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391457661.157:3610): login pid=1520 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=387 >type=USER_START msg=audit(1391457661.157:3611): pid=1520 uid=0 auid=0 ses=387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391457661.157:3612): pid=1520 uid=0 auid=0 ses=387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391457661.177:3613): avc: denied { read } for pid=1536 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391457661.177:3613): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffd02cec90 a2=84800 a3=0 items=0 ppid=1534 pid=1536 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=387 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391457661.197:3614): pid=1520 uid=0 auid=0 ses=387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391457661.207:3615): pid=1520 uid=0 auid=0 ses=387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391458201.207:3616): pid=1880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391458201.207:3617): pid=1880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391458201.207:3618): login pid=1880 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=388 >type=USER_START msg=audit(1391458201.217:3619): pid=1880 uid=0 auid=0 ses=388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391458201.217:3620): pid=1880 uid=0 auid=0 ses=388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391458201.357:3621): pid=1880 uid=0 auid=0 ses=388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391458201.357:3622): pid=1880 uid=0 auid=0 ses=388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391459101.367:3623): pid=2448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391459101.367:3624): pid=2448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391459101.367:3625): login pid=2448 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=389 >type=USER_START msg=audit(1391459101.377:3626): pid=2448 uid=0 auid=0 ses=389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391459101.377:3627): pid=2448 uid=0 auid=0 ses=389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391459101.707:3628): pid=2448 uid=0 auid=0 ses=389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391459101.707:3629): pid=2448 uid=0 auid=0 ses=389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391460001.718:3630): pid=3001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391460001.718:3631): pid=3001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391460001.718:3632): login pid=3001 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=390 >type=USER_START msg=audit(1391460001.718:3633): pid=3001 uid=0 auid=0 ses=390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391460001.728:3634): pid=3001 uid=0 auid=0 ses=390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391460001.858:3635): pid=3001 uid=0 auid=0 ses=390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391460001.858:3636): pid=3001 uid=0 auid=0 ses=390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391460901.878:3637): pid=3555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391460901.878:3638): pid=3555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391460901.878:3639): login pid=3555 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=391 >type=USER_START msg=audit(1391460901.878:3640): pid=3555 uid=0 auid=0 ses=391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391460901.878:3641): pid=3555 uid=0 auid=0 ses=391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391460902.238:3642): pid=3555 uid=0 auid=0 ses=391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391460902.238:3643): pid=3555 uid=0 auid=0 ses=391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391461261.249:3644): pid=3782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391461261.249:3645): pid=3782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391461261.249:3646): login pid=3782 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=392 >type=USER_START msg=audit(1391461261.259:3647): pid=3782 uid=0 auid=0 ses=392 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391461261.259:3648): pid=3782 uid=0 auid=0 ses=392 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391461261.279:3649): avc: denied { read } for pid=3798 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391461261.279:3649): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffcc6f4950 a2=84800 a3=0 items=0 ppid=3796 pid=3798 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=392 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391461261.289:3650): pid=3782 uid=0 auid=0 ses=392 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391461261.289:3651): pid=3782 uid=0 auid=0 ses=392 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391461801.299:3652): pid=4139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391461801.299:3653): pid=4139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391461801.299:3654): login pid=4139 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=393 >type=USER_START msg=audit(1391461801.309:3655): pid=4139 uid=0 auid=0 ses=393 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391461801.309:3656): pid=4139 uid=0 auid=0 ses=393 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391461801.549:3657): pid=4139 uid=0 auid=0 ses=393 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391461801.549:3658): pid=4139 uid=0 auid=0 ses=393 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391462701.560:3659): pid=4691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391462701.560:3660): pid=4691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391462701.560:3661): login pid=4691 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=394 >type=USER_START msg=audit(1391462701.560:3662): pid=4691 uid=0 auid=0 ses=394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391462701.560:3663): pid=4691 uid=0 auid=0 ses=394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391462701.870:3664): pid=4691 uid=0 auid=0 ses=394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391462701.870:3665): pid=4691 uid=0 auid=0 ses=394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391463601.880:3666): pid=5243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391463601.880:3667): pid=5243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391463601.880:3668): login pid=5243 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=395 >type=USER_START msg=audit(1391463601.890:3669): pid=5243 uid=0 auid=0 ses=395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391463601.890:3670): pid=5243 uid=0 auid=0 ses=395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391463602.030:3671): pid=5243 uid=0 auid=0 ses=395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391463602.030:3672): pid=5243 uid=0 auid=0 ses=395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391464501.041:3673): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391464501.041:3674): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391464501.041:3675): login pid=5798 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=396 >type=USER_START msg=audit(1391464501.041:3676): pid=5798 uid=0 auid=0 ses=396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391464501.041:3677): pid=5798 uid=0 auid=0 ses=396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391464501.441:3678): pid=5798 uid=0 auid=0 ses=396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391464501.441:3679): pid=5798 uid=0 auid=0 ses=396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391464861.451:3680): pid=6025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391464861.451:3681): pid=6025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391464861.451:3682): login pid=6025 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=397 >type=USER_START msg=audit(1391464861.461:3683): pid=6025 uid=0 auid=0 ses=397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391464861.461:3684): pid=6025 uid=0 auid=0 ses=397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391464861.471:3685): avc: denied { read } for pid=6041 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391464861.471:3685): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffe2319c00 a2=84800 a3=0 items=0 ppid=6039 pid=6041 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=397 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391464861.491:3686): pid=6025 uid=0 auid=0 ses=397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391464861.491:3687): pid=6025 uid=0 auid=0 ses=397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391465401.501:3688): pid=6382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391465401.501:3689): pid=6382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391465401.501:3690): login pid=6382 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=398 >type=USER_START msg=audit(1391465401.511:3691): pid=6382 uid=0 auid=0 ses=398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391465401.511:3692): pid=6382 uid=0 auid=0 ses=398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391465401.701:3693): pid=6382 uid=0 auid=0 ses=398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391465401.711:3694): pid=6382 uid=0 auid=0 ses=398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391466301.722:3695): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391466301.722:3696): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391466301.722:3697): login pid=6932 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=399 >type=USER_START msg=audit(1391466301.722:3698): pid=6932 uid=0 auid=0 ses=399 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391466301.722:3699): pid=6932 uid=0 auid=0 ses=399 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391466302.132:3700): pid=6932 uid=0 auid=0 ses=399 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391466302.132:3701): pid=6932 uid=0 auid=0 ses=399 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391467201.152:3702): pid=7485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391467201.152:3703): pid=7485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391467201.152:3704): login pid=7485 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=400 >type=USER_START msg=audit(1391467201.152:3705): pid=7485 uid=0 auid=0 ses=400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391467201.152:3706): pid=7485 uid=0 auid=0 ses=400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391467201.302:3707): pid=7485 uid=0 auid=0 ses=400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391467201.312:3708): pid=7485 uid=0 auid=0 ses=400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391468101.323:3709): pid=8039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391468101.323:3710): pid=8039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391468101.323:3711): login pid=8039 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=401 >type=USER_START msg=audit(1391468101.323:3712): pid=8039 uid=0 auid=0 ses=401 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391468101.323:3713): pid=8039 uid=0 auid=0 ses=401 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391468101.653:3714): pid=8039 uid=0 auid=0 ses=401 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391468101.653:3715): pid=8039 uid=0 auid=0 ses=401 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391468461.663:3716): pid=8267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391468461.663:3717): pid=8267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391468461.663:3718): login pid=8267 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=402 >type=USER_START msg=audit(1391468461.673:3719): pid=8267 uid=0 auid=0 ses=402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391468461.673:3720): pid=8267 uid=0 auid=0 ses=402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391468461.693:3721): avc: denied { read } for pid=8283 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391468461.693:3721): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3ffff8a94b30 a2=84800 a3=0 items=0 ppid=8281 pid=8283 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=402 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391468461.703:3722): pid=8267 uid=0 auid=0 ses=402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391468461.703:3723): pid=8267 uid=0 auid=0 ses=402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391469001.713:3724): pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391469001.713:3725): pid=8622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391469001.713:3726): login pid=8622 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=403 >type=USER_START msg=audit(1391469001.723:3727): pid=8622 uid=0 auid=0 ses=403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391469001.723:3728): pid=8622 uid=0 auid=0 ses=403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391469001.853:3729): pid=8622 uid=0 auid=0 ses=403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391469001.853:3730): pid=8622 uid=0 auid=0 ses=403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391469901.864:3731): pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391469901.864:3732): pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391469901.864:3733): login pid=9173 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=404 >type=USER_START msg=audit(1391469901.874:3734): pid=9173 uid=0 auid=0 ses=404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391469901.874:3735): pid=9173 uid=0 auid=0 ses=404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391469902.204:3736): pid=9173 uid=0 auid=0 ses=404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391469902.214:3737): pid=9173 uid=0 auid=0 ses=404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391470801.224:3738): pid=9727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391470801.224:3739): pid=9727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391470801.224:3740): login pid=9727 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=405 >type=USER_START msg=audit(1391470801.224:3741): pid=9727 uid=0 auid=0 ses=405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391470801.224:3742): pid=9727 uid=0 auid=0 ses=405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391470801.354:3743): pid=9727 uid=0 auid=0 ses=405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391470801.354:3744): pid=9727 uid=0 auid=0 ses=405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391471701.365:3745): pid=10281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391471701.365:3746): pid=10281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391471701.365:3747): login pid=10281 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=406 >type=USER_START msg=audit(1391471701.375:3748): pid=10281 uid=0 auid=0 ses=406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391471701.375:3749): pid=10281 uid=0 auid=0 ses=406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391471701.715:3750): pid=10281 uid=0 auid=0 ses=406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391471701.715:3751): pid=10281 uid=0 auid=0 ses=406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391472061.725:3752): pid=10509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391472061.725:3753): pid=10509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391472061.725:3754): login pid=10509 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=407 >type=USER_START msg=audit(1391472061.725:3755): pid=10509 uid=0 auid=0 ses=407 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391472061.725:3756): pid=10509 uid=0 auid=0 ses=407 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391472061.745:3757): avc: denied { read } for pid=10525 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391472061.745:3757): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffd6832be0 a2=84800 a3=0 items=0 ppid=10523 pid=10525 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=407 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391472061.865:3758): pid=10509 uid=0 auid=0 ses=407 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391472061.875:3759): pid=10509 uid=0 auid=0 ses=407 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391472601.875:3760): pid=10865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391472601.875:3761): pid=10865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391472601.875:3762): login pid=10865 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=408 >type=USER_START msg=audit(1391472601.875:3763): pid=10865 uid=0 auid=0 ses=408 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391472601.875:3764): pid=10865 uid=0 auid=0 ses=408 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391472602.015:3765): pid=10865 uid=0 auid=0 ses=408 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391472602.015:3766): pid=10865 uid=0 auid=0 ses=408 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391473501.026:3767): pid=11416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391473501.036:3768): pid=11416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391473501.036:3769): login pid=11416 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=409 >type=USER_START msg=audit(1391473501.036:3770): pid=11416 uid=0 auid=0 ses=409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391473501.036:3771): pid=11416 uid=0 auid=0 ses=409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391473501.386:3772): pid=11416 uid=0 auid=0 ses=409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391473501.386:3773): pid=11416 uid=0 auid=0 ses=409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391474401.396:3774): pid=11970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391474401.396:3775): pid=11970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391474401.396:3776): login pid=11970 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=410 >type=USER_START msg=audit(1391474401.406:3777): pid=11970 uid=0 auid=0 ses=410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391474401.406:3778): pid=11970 uid=0 auid=0 ses=410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391474401.536:3779): pid=11970 uid=0 auid=0 ses=410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391474401.536:3780): pid=11970 uid=0 auid=0 ses=410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391475301.547:3781): pid=12524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391475301.547:3782): pid=12524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391475301.547:3783): login pid=12524 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=411 >type=USER_START msg=audit(1391475301.557:3784): pid=12524 uid=0 auid=0 ses=411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391475301.557:3785): pid=12524 uid=0 auid=0 ses=411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391475301.907:3786): pid=12524 uid=0 auid=0 ses=411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391475301.907:3787): pid=12524 uid=0 auid=0 ses=411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391475661.917:3788): pid=12752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391475661.917:3789): pid=12752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391475661.917:3790): login pid=12752 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=412 >type=USER_START msg=audit(1391475661.927:3791): pid=12752 uid=0 auid=0 ses=412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391475661.927:3792): pid=12752 uid=0 auid=0 ses=412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391475661.937:3793): avc: denied { read } for pid=12768 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391475661.937:3793): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffed28a450 a2=84800 a3=0 items=0 ppid=12766 pid=12768 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=412 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391475661.957:3794): pid=12752 uid=0 auid=0 ses=412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391475661.967:3795): pid=12752 uid=0 auid=0 ses=412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391476201.968:3796): pid=13108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391476201.968:3797): pid=13108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391476201.968:3798): login pid=13108 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=413 >type=USER_START msg=audit(1391476201.978:3799): pid=13108 uid=0 auid=0 ses=413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391476201.978:3800): pid=13108 uid=0 auid=0 ses=413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391476202.168:3801): pid=13108 uid=0 auid=0 ses=413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391476202.168:3802): pid=13108 uid=0 auid=0 ses=413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391477101.188:3803): pid=13659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391477101.188:3804): pid=13659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391477101.188:3805): login pid=13659 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=414 >type=USER_START msg=audit(1391477101.188:3806): pid=13659 uid=0 auid=0 ses=414 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391477101.188:3807): pid=13659 uid=0 auid=0 ses=414 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391477101.498:3808): pid=13659 uid=0 auid=0 ses=414 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391477101.508:3809): pid=13659 uid=0 auid=0 ses=414 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391478001.519:3810): pid=14212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391478001.519:3811): pid=14212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391478001.519:3812): login pid=14212 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=415 >type=USER_START msg=audit(1391478001.519:3813): pid=14212 uid=0 auid=0 ses=415 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391478001.519:3814): pid=14212 uid=0 auid=0 ses=415 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391478001.639:3815): pid=14212 uid=0 auid=0 ses=415 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391478001.649:3816): pid=14212 uid=0 auid=0 ses=415 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391478901.659:3817): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391478901.659:3818): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391478901.659:3819): login pid=14767 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=416 >type=USER_START msg=audit(1391478901.659:3820): pid=14767 uid=0 auid=0 ses=416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391478901.659:3821): pid=14767 uid=0 auid=0 ses=416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391478902.009:3822): pid=14767 uid=0 auid=0 ses=416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391478902.009:3823): pid=14767 uid=0 auid=0 ses=416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391479261.019:3824): pid=14995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391479261.019:3825): pid=14995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391479261.019:3826): login pid=14995 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=417 >type=USER_START msg=audit(1391479261.019:3827): pid=14995 uid=0 auid=0 ses=417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391479261.029:3828): pid=14995 uid=0 auid=0 ses=417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391479261.049:3829): avc: denied { read } for pid=15014 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391479261.049:3829): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffd451ba00 a2=84800 a3=0 items=0 ppid=15012 pid=15014 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=417 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391479264.699:3830): pid=14995 uid=0 auid=0 ses=417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391479264.699:3831): pid=14995 uid=0 auid=0 ses=417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391479801.720:3832): pid=15356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391479801.720:3833): pid=15356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391479801.720:3834): login pid=15356 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=418 >type=USER_START msg=audit(1391479801.720:3835): pid=15356 uid=0 auid=0 ses=418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391479801.720:3836): pid=15356 uid=0 auid=0 ses=418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391479801.840:3837): pid=15356 uid=0 auid=0 ses=418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391479801.850:3838): pid=15356 uid=0 auid=0 ses=418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391480701.860:3839): pid=15908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391480701.860:3840): pid=15908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391480701.860:3841): login pid=15908 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=419 >type=USER_START msg=audit(1391480701.860:3842): pid=15908 uid=0 auid=0 ses=419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391480701.860:3843): pid=15908 uid=0 auid=0 ses=419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391480702.230:3844): pid=15908 uid=0 auid=0 ses=419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391480702.240:3845): pid=15908 uid=0 auid=0 ses=419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391481601.251:3846): pid=16459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391481601.251:3847): pid=16459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391481601.251:3848): login pid=16459 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=420 >type=USER_START msg=audit(1391481601.251:3849): pid=16459 uid=0 auid=0 ses=420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391481601.251:3850): pid=16459 uid=0 auid=0 ses=420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391481601.391:3851): pid=16459 uid=0 auid=0 ses=420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391481601.391:3852): pid=16459 uid=0 auid=0 ses=420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391482501.401:3853): pid=17012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391482501.401:3854): pid=17012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391482501.401:3855): login pid=17012 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=421 >type=USER_START msg=audit(1391482501.401:3856): pid=17012 uid=0 auid=0 ses=421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391482501.401:3857): pid=17012 uid=0 auid=0 ses=421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391482501.771:3858): pid=17012 uid=0 auid=0 ses=421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391482501.771:3859): pid=17012 uid=0 auid=0 ses=421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391482861.781:3860): pid=17240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391482861.781:3861): pid=17240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391482861.781:3862): login pid=17240 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=422 >type=USER_START msg=audit(1391482861.781:3863): pid=17240 uid=0 auid=0 ses=422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391482861.781:3864): pid=17240 uid=0 auid=0 ses=422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391482861.811:3865): avc: denied { read } for pid=17259 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391482861.811:3865): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffcff289e0 a2=84800 a3=0 items=0 ppid=17257 pid=17259 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=422 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391482861.821:3866): pid=17240 uid=0 auid=0 ses=422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391482861.821:3867): pid=17240 uid=0 auid=0 ses=422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391483401.832:3868): pid=17601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391483401.832:3869): pid=17601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391483401.842:3870): login pid=17601 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=423 >type=USER_START msg=audit(1391483401.842:3871): pid=17601 uid=0 auid=0 ses=423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391483401.842:3872): pid=17601 uid=0 auid=0 ses=423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391483401.972:3873): pid=17601 uid=0 auid=0 ses=423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391483401.972:3874): pid=17601 uid=0 auid=0 ses=423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391484301.982:3875): pid=18154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391484301.982:3876): pid=18154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391484301.982:3877): login pid=18154 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=424 >type=USER_START msg=audit(1391484301.992:3878): pid=18154 uid=0 auid=0 ses=424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391484301.992:3879): pid=18154 uid=0 auid=0 ses=424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391484302.532:3880): pid=18154 uid=0 auid=0 ses=424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391484302.532:3881): pid=18154 uid=0 auid=0 ses=424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391485201.543:3882): pid=18707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391485201.543:3883): pid=18707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391485201.543:3884): login pid=18707 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=425 >type=USER_START msg=audit(1391485201.543:3885): pid=18707 uid=0 auid=0 ses=425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391485201.543:3886): pid=18707 uid=0 auid=0 ses=425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391485201.703:3887): pid=18707 uid=0 auid=0 ses=425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391485201.703:3888): pid=18707 uid=0 auid=0 ses=425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391486101.713:3889): pid=19261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391486101.713:3890): pid=19261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391486101.713:3891): login pid=19261 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=426 >type=USER_START msg=audit(1391486101.723:3892): pid=19261 uid=0 auid=0 ses=426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391486101.723:3893): pid=19261 uid=0 auid=0 ses=426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391486102.043:3894): pid=19261 uid=0 auid=0 ses=426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391486102.043:3895): pid=19261 uid=0 auid=0 ses=426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391486461.054:3896): pid=19486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391486461.054:3897): pid=19486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391486461.054:3898): login pid=19486 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=427 >type=USER_START msg=audit(1391486461.054:3899): pid=19486 uid=0 auid=0 ses=427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391486461.054:3900): pid=19486 uid=0 auid=0 ses=427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391486461.084:3901): avc: denied { read } for pid=19505 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391486461.084:3901): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3ffff8c40470 a2=84800 a3=0 items=0 ppid=19503 pid=19505 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=427 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391486461.094:3902): pid=19486 uid=0 auid=0 ses=427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391486461.094:3903): pid=19486 uid=0 auid=0 ses=427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391487001.104:3904): pid=19845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391487001.104:3905): pid=19845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391487001.104:3906): login pid=19845 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=428 >type=USER_START msg=audit(1391487001.114:3907): pid=19845 uid=0 auid=0 ses=428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391487001.114:3908): pid=19845 uid=0 auid=0 ses=428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391487001.244:3909): pid=19845 uid=0 auid=0 ses=428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391487001.244:3910): pid=19845 uid=0 auid=0 ses=428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391487901.254:3911): pid=20400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391487901.254:3912): pid=20400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391487901.254:3913): login pid=20400 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=429 >type=USER_START msg=audit(1391487901.254:3914): pid=20400 uid=0 auid=0 ses=429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391487901.254:3915): pid=20400 uid=0 auid=0 ses=429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391487902.194:3916): pid=20400 uid=0 auid=0 ses=429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391487902.204:3917): pid=20400 uid=0 auid=0 ses=429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391488801.215:3918): pid=20952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391488801.215:3919): pid=20952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391488801.215:3920): login pid=20952 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=430 >type=USER_START msg=audit(1391488801.215:3921): pid=20952 uid=0 auid=0 ses=430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391488801.215:3922): pid=20952 uid=0 auid=0 ses=430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391488801.345:3923): pid=20952 uid=0 auid=0 ses=430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391488801.345:3924): pid=20952 uid=0 auid=0 ses=430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391489701.346:3925): pid=21508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391489701.346:3926): pid=21508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391489701.346:3927): login pid=21508 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=431 >type=USER_START msg=audit(1391489701.346:3928): pid=21508 uid=0 auid=0 ses=431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391489701.356:3929): pid=21508 uid=0 auid=0 ses=431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391489701.686:3930): pid=21508 uid=0 auid=0 ses=431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391489701.696:3931): pid=21508 uid=0 auid=0 ses=431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391490061.696:3932): pid=21735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391490061.696:3933): pid=21735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391490061.696:3934): login pid=21735 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=432 >type=USER_START msg=audit(1391490061.706:3935): pid=21735 uid=0 auid=0 ses=432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391490061.706:3936): pid=21735 uid=0 auid=0 ses=432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391490061.726:3937): avc: denied { read } for pid=21754 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391490061.726:3937): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffcf4230c0 a2=84800 a3=0 items=0 ppid=21752 pid=21754 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=432 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391490061.746:3938): pid=21735 uid=0 auid=0 ses=432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391490061.746:3939): pid=21735 uid=0 auid=0 ses=432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391490601.756:3940): pid=22140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391490601.756:3941): pid=22140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391490601.756:3942): login pid=22140 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=433 >type=USER_START msg=audit(1391490601.766:3943): pid=22140 uid=0 auid=0 ses=433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391490601.766:3944): pid=22140 uid=0 auid=0 ses=433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391490601.776:3945): pid=22140 uid=0 auid=0 ses=433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391490601.776:3946): pid=22140 uid=0 auid=0 ses=433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391491501.787:3947): pid=22688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391491501.787:3948): pid=22688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391491501.787:3949): login pid=22688 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=434 >type=USER_START msg=audit(1391491501.787:3950): pid=22688 uid=0 auid=0 ses=434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391491501.787:3951): pid=22688 uid=0 auid=0 ses=434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391491501.797:3952): pid=22688 uid=0 auid=0 ses=434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391491501.797:3953): pid=22688 uid=0 auid=0 ses=434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391492401.807:3954): pid=23246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391492401.807:3955): pid=23246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391492401.807:3956): login pid=23246 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=435 >type=USER_START msg=audit(1391492401.807:3957): pid=23246 uid=0 auid=0 ses=435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391492401.807:3958): pid=23246 uid=0 auid=0 ses=435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391492401.817:3959): pid=23246 uid=0 auid=0 ses=435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391492401.817:3960): pid=23246 uid=0 auid=0 ses=435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391493301.828:3961): pid=23796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391493301.828:3962): pid=23796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391493301.828:3963): login pid=23796 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=436 >type=USER_START msg=audit(1391493301.838:3964): pid=23796 uid=0 auid=0 ses=436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391493301.838:3965): pid=23796 uid=0 auid=0 ses=436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391493301.848:3966): pid=23796 uid=0 auid=0 ses=436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391493301.848:3967): pid=23796 uid=0 auid=0 ses=436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391493661.858:3968): pid=24017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391493661.858:3969): pid=24017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391493661.858:3970): login pid=24017 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=437 >type=USER_START msg=audit(1391493661.858:3971): pid=24017 uid=0 auid=0 ses=437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391493661.858:3972): pid=24017 uid=0 auid=0 ses=437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391493661.878:3973): avc: denied { read } for pid=24033 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391493661.878:3973): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffcf406590 a2=84800 a3=0 items=0 ppid=24031 pid=24033 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=437 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391493661.888:3974): pid=24017 uid=0 auid=0 ses=437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391493661.888:3975): pid=24017 uid=0 auid=0 ses=437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391494201.898:3976): pid=24376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391494201.898:3977): pid=24376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391494201.898:3978): login pid=24376 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=438 >type=USER_START msg=audit(1391494201.908:3979): pid=24376 uid=0 auid=0 ses=438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391494201.908:3980): pid=24376 uid=0 auid=0 ses=438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391494201.918:3981): pid=24376 uid=0 auid=0 ses=438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391494201.918:3982): pid=24376 uid=0 auid=0 ses=438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391495101.929:3983): pid=24924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391495101.929:3984): pid=24924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391495101.929:3985): login pid=24924 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=439 >type=USER_START msg=audit(1391495101.929:3986): pid=24924 uid=0 auid=0 ses=439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391495101.929:3987): pid=24924 uid=0 auid=0 ses=439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391495101.939:3988): pid=24924 uid=0 auid=0 ses=439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391495101.939:3989): pid=24924 uid=0 auid=0 ses=439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391496001.949:3990): pid=25473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391496001.949:3991): pid=25473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391496001.949:3992): login pid=25473 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=440 >type=USER_START msg=audit(1391496001.949:3993): pid=25473 uid=0 auid=0 ses=440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391496001.949:3994): pid=25473 uid=0 auid=0 ses=440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391496001.959:3995): pid=25473 uid=0 auid=0 ses=440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391496001.959:3996): pid=25473 uid=0 auid=0 ses=440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391496901.970:3997): pid=26024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391496901.970:3998): pid=26024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391496901.970:3999): login pid=26024 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=441 >type=USER_START msg=audit(1391496901.970:4000): pid=26024 uid=0 auid=0 ses=441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391496901.970:4001): pid=26024 uid=0 auid=0 ses=441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391496901.980:4002): pid=26024 uid=0 auid=0 ses=441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391496901.980:4003): pid=26024 uid=0 auid=0 ses=441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391497261.990:4004): pid=26246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391497261.990:4005): pid=26246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391497261.990:4006): login pid=26246 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=442 >type=USER_START msg=audit(1391497261.990:4007): pid=26246 uid=0 auid=0 ses=442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391497261.990:4008): pid=26246 uid=0 auid=0 ses=442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391497262.020:4009): pid=26246 uid=0 auid=0 ses=442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391497262.020:4010): pid=26246 uid=0 auid=0 ses=442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391497801.030:4011): pid=26601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391497801.030:4012): pid=26601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391497801.030:4013): login pid=26601 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=443 >type=USER_START msg=audit(1391497801.030:4014): pid=26601 uid=0 auid=0 ses=443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391497801.030:4015): pid=26601 uid=0 auid=0 ses=443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391497801.040:4016): pid=26601 uid=0 auid=0 ses=443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391497801.040:4017): pid=26601 uid=0 auid=0 ses=443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391498701.051:4018): pid=27148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391498701.051:4019): pid=27148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391498701.051:4020): login pid=27148 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=444 >type=USER_START msg=audit(1391498701.061:4021): pid=27148 uid=0 auid=0 ses=444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391498701.061:4022): pid=27148 uid=0 auid=0 ses=444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391498701.061:4023): pid=27148 uid=0 auid=0 ses=444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391498701.061:4024): pid=27148 uid=0 auid=0 ses=444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391499601.071:4025): pid=27698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391499601.071:4026): pid=27698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391499601.071:4027): login pid=27698 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=445 >type=USER_START msg=audit(1391499601.081:4028): pid=27698 uid=0 auid=0 ses=445 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391499601.081:4029): pid=27698 uid=0 auid=0 ses=445 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391499601.081:4030): pid=27698 uid=0 auid=0 ses=445 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391499601.081:4031): pid=27698 uid=0 auid=0 ses=445 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391500501.092:4032): pid=28250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391500501.092:4033): pid=28250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391500501.092:4034): login pid=28250 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=446 >type=USER_START msg=audit(1391500501.102:4035): pid=28250 uid=0 auid=0 ses=446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391500501.102:4036): pid=28250 uid=0 auid=0 ses=446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391500501.102:4037): pid=28250 uid=0 auid=0 ses=446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391500501.112:4038): pid=28250 uid=0 auid=0 ses=446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391500861.112:4039): pid=28471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391500861.112:4040): pid=28471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391500861.112:4041): login pid=28471 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=447 >type=USER_START msg=audit(1391500861.122:4042): pid=28471 uid=0 auid=0 ses=447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391500861.122:4043): pid=28471 uid=0 auid=0 ses=447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391500861.142:4044): pid=28471 uid=0 auid=0 ses=447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391500861.142:4045): pid=28471 uid=0 auid=0 ses=447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391501401.153:4046): pid=28828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391501401.153:4047): pid=28828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391501401.153:4048): login pid=28828 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=448 >type=USER_START msg=audit(1391501401.163:4049): pid=28828 uid=0 auid=0 ses=448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391501401.163:4050): pid=28828 uid=0 auid=0 ses=448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391501401.163:4051): pid=28828 uid=0 auid=0 ses=448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391501401.173:4052): pid=28828 uid=0 auid=0 ses=448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391502301.173:4053): pid=29375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391502301.173:4054): pid=29375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391502301.173:4055): login pid=29375 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=449 >type=USER_START msg=audit(1391502301.183:4056): pid=29375 uid=0 auid=0 ses=449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391502301.183:4057): pid=29375 uid=0 auid=0 ses=449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391502301.183:4058): pid=29375 uid=0 auid=0 ses=449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391502301.193:4059): pid=29375 uid=0 auid=0 ses=449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391503201.204:4060): pid=29925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391503201.204:4061): pid=29925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391503201.204:4062): login pid=29925 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=450 >type=USER_START msg=audit(1391503201.204:4063): pid=29925 uid=0 auid=0 ses=450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391503201.204:4064): pid=29925 uid=0 auid=0 ses=450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391503201.214:4065): pid=29925 uid=0 auid=0 ses=450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391503201.214:4066): pid=29925 uid=0 auid=0 ses=450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391504101.224:4067): pid=30475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391504101.224:4068): pid=30475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391504101.224:4069): login pid=30475 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=451 >type=USER_START msg=audit(1391504101.224:4070): pid=30475 uid=0 auid=0 ses=451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391504101.224:4071): pid=30475 uid=0 auid=0 ses=451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391504101.234:4072): pid=30475 uid=0 auid=0 ses=451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391504101.234:4073): pid=30475 uid=0 auid=0 ses=451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391504461.244:4074): pid=30696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391504461.244:4075): pid=30696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391504461.244:4076): login pid=30696 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=452 >type=USER_START msg=audit(1391504461.244:4077): pid=30696 uid=0 auid=0 ses=452 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391504461.244:4078): pid=30696 uid=0 auid=0 ses=452 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391504461.274:4079): pid=30696 uid=0 auid=0 ses=452 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391504461.274:4080): pid=30696 uid=0 auid=0 ses=452 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391505001.285:4081): pid=31053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391505001.285:4082): pid=31053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391505001.285:4083): login pid=31053 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=453 >type=USER_START msg=audit(1391505001.285:4084): pid=31053 uid=0 auid=0 ses=453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391505001.285:4085): pid=31053 uid=0 auid=0 ses=453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391505001.295:4086): pid=31053 uid=0 auid=0 ses=453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391505001.295:4087): pid=31053 uid=0 auid=0 ses=453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391505901.295:4088): pid=31600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391505901.295:4089): pid=31600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391505901.295:4090): login pid=31600 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=454 >type=USER_START msg=audit(1391505901.295:4091): pid=31600 uid=0 auid=0 ses=454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391505901.295:4092): pid=31600 uid=0 auid=0 ses=454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391505901.305:4093): pid=31600 uid=0 auid=0 ses=454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391505901.305:4094): pid=31600 uid=0 auid=0 ses=454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391506801.316:4095): pid=32148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391506801.316:4096): pid=32148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391506801.316:4097): login pid=32148 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=455 >type=USER_START msg=audit(1391506801.316:4098): pid=32148 uid=0 auid=0 ses=455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391506801.316:4099): pid=32148 uid=0 auid=0 ses=455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391506801.326:4100): pid=32148 uid=0 auid=0 ses=455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391506801.326:4101): pid=32148 uid=0 auid=0 ses=455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391507701.336:4102): pid=32698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391507701.336:4103): pid=32698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391507701.336:4104): login pid=32698 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=456 >type=USER_START msg=audit(1391507701.336:4105): pid=32698 uid=0 auid=0 ses=456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391507701.336:4106): pid=32698 uid=0 auid=0 ses=456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391507701.346:4107): pid=32698 uid=0 auid=0 ses=456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391507701.346:4108): pid=32698 uid=0 auid=0 ses=456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391508061.356:4109): pid=32919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391508061.356:4110): pid=32919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391508061.356:4111): login pid=32919 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=457 >type=USER_START msg=audit(1391508061.356:4112): pid=32919 uid=0 auid=0 ses=457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391508061.356:4113): pid=32919 uid=0 auid=0 ses=457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391508061.386:4114): pid=32919 uid=0 auid=0 ses=457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391508061.386:4115): pid=32919 uid=0 auid=0 ses=457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391508601.397:4116): pid=33274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391508601.397:4117): pid=33274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391508601.397:4118): login pid=33274 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=458 >type=USER_START msg=audit(1391508601.397:4119): pid=33274 uid=0 auid=0 ses=458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391508601.397:4120): pid=33274 uid=0 auid=0 ses=458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391508601.407:4121): pid=33274 uid=0 auid=0 ses=458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391508601.407:4122): pid=33274 uid=0 auid=0 ses=458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391509501.417:4123): pid=33824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391509501.417:4124): pid=33824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391509501.417:4125): login pid=33824 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=459 >type=USER_START msg=audit(1391509501.417:4126): pid=33824 uid=0 auid=0 ses=459 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391509501.417:4127): pid=33824 uid=0 auid=0 ses=459 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391509501.427:4128): pid=33824 uid=0 auid=0 ses=459 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391509501.427:4129): pid=33824 uid=0 auid=0 ses=459 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391510401.438:4130): pid=34373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391510401.438:4131): pid=34373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391510401.438:4132): login pid=34373 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=460 >type=USER_START msg=audit(1391510401.448:4133): pid=34373 uid=0 auid=0 ses=460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391510401.448:4134): pid=34373 uid=0 auid=0 ses=460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391510401.448:4135): pid=34373 uid=0 auid=0 ses=460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391510401.448:4136): pid=34373 uid=0 auid=0 ses=460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=ANOM_PROMISCUOUS msg=audit(1391511168.208:4137): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1391511168.518:4138): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=stop reason=destroyed vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391511168.618:4139): pid=34979 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F736572766963652076686F73746D642073746F70 terminal=? res=success' >type=CRED_ACQ msg=audit(1391511168.618:4140): pid=34979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391511168.628:4141): pid=34979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391511168.658:4142): pid=34979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391511168.658:4143): pid=34979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391511301.468:4144): pid=35121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391511301.468:4145): pid=35121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391511301.468:4146): login pid=35121 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=461 >type=USER_START msg=audit(1391511301.468:4147): pid=35121 uid=0 auid=0 ses=461 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391511301.468:4148): pid=35121 uid=0 auid=0 ses=461 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391511301.478:4149): pid=35121 uid=0 auid=0 ses=461 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391511301.478:4150): pid=35121 uid=0 auid=0 ses=461 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391511661.489:4151): pid=35484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391511661.489:4152): pid=35484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391511661.489:4153): login pid=35484 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=462 >type=USER_START msg=audit(1391511661.489:4154): pid=35484 uid=0 auid=0 ses=462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391511661.499:4155): pid=35484 uid=0 auid=0 ses=462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391511661.519:4156): avc: denied { read } for pid=35501 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391511661.519:4156): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffd94c06b0 a2=84800 a3=0 items=0 ppid=35499 pid=35501 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=462 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391511661.529:4157): pid=35484 uid=0 auid=0 ses=462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391511661.529:4158): pid=35484 uid=0 auid=0 ses=462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391512174.889:4159): pid=36037 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F756D6F756E74202D66202D6C202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391512174.889:4160): pid=36037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391512174.889:4161): pid=36037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391512174.939:4162): pid=36037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391512174.939:4163): pid=36037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391512174.949:4164): pid=36041 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391512174.949:4165): pid=36041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391512174.949:4166): pid=36041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391512174.949:4167): pid=36041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391512174.949:4168): pid=36041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391512174.959:4169): pid=36043 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391512174.959:4170): pid=36043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391512174.959:4171): pid=36043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391512174.989:4172): pid=36043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391512174.989:4173): pid=36043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391512201.539:4174): pid=36070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391512201.539:4175): pid=36070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391512201.549:4176): login pid=36070 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=463 >type=USER_START msg=audit(1391512201.549:4177): pid=36070 uid=0 auid=0 ses=463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391512201.549:4178): pid=36070 uid=0 auid=0 ses=463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391512201.559:4179): pid=36070 uid=0 auid=0 ses=463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391512201.559:4180): pid=36070 uid=0 auid=0 ses=463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391512749.039:4181): pid=36252 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D332031302E31302E32372E36383A2F73746F72616765202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391512749.049:4182): pid=36252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391512749.049:4183): pid=36252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391512749.059:4184): pid=36252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391512749.059:4185): pid=36252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391512749.139:4186): pid=36260 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391512749.139:4187): pid=36260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391512749.139:4188): pid=36260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391512749.139:4189): pid=36260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391512749.139:4190): pid=36260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391512749.159:4191): pid=36262 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391512749.159:4192): pid=36262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391512749.159:4193): pid=36262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391512749.189:4194): pid=36262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391512749.189:4195): pid=36262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391512749.309:4196): pid=36283 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391512749.309:4197): pid=36283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391512749.309:4198): pid=36283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391512749.319:4199): pid=36283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391512749.319:4200): pid=36283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391512779.099:4201): pid=36308 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F756D6F756E74202D66202D6C202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391512779.099:4202): pid=36308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391512779.099:4203): pid=36308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391512779.139:4204): pid=36308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391512779.139:4205): pid=36308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391512779.149:4206): pid=36312 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391512779.149:4207): pid=36312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391512779.149:4208): pid=36312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391512779.149:4209): pid=36312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391512779.149:4210): pid=36312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391512779.169:4211): pid=36314 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391512779.169:4212): pid=36314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391512779.169:4213): pid=36314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391512779.199:4214): pid=36314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391512779.199:4215): pid=36314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391513101.569:4216): pid=36431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391513101.569:4217): pid=36431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391513101.569:4218): login pid=36431 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=464 >type=USER_START msg=audit(1391513101.579:4219): pid=36431 uid=0 auid=0 ses=464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391513101.579:4220): pid=36431 uid=0 auid=0 ses=464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391513101.589:4221): pid=36431 uid=0 auid=0 ses=464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391513101.589:4222): pid=36431 uid=0 auid=0 ses=464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391514001.600:4223): pid=36708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391514001.600:4224): pid=36708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391514001.600:4225): login pid=36708 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=465 >type=USER_START msg=audit(1391514001.600:4226): pid=36708 uid=0 auid=0 ses=465 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391514001.600:4227): pid=36708 uid=0 auid=0 ses=465 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391514001.610:4228): pid=36708 uid=0 auid=0 ses=465 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391514001.610:4229): pid=36708 uid=0 auid=0 ses=465 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391514901.621:4230): pid=36986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391514901.621:4231): pid=36986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391514901.621:4232): login pid=36986 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=466 >type=USER_START msg=audit(1391514901.631:4233): pid=36986 uid=0 auid=0 ses=466 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391514901.631:4234): pid=36986 uid=0 auid=0 ses=466 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391514901.631:4235): pid=36986 uid=0 auid=0 ses=466 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391514901.641:4236): pid=36986 uid=0 auid=0 ses=466 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391515261.641:4237): pid=37101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391515261.641:4238): pid=37101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391515261.641:4239): login pid=37101 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=467 >type=USER_START msg=audit(1391515261.651:4240): pid=37101 uid=0 auid=0 ses=467 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391515261.651:4241): pid=37101 uid=0 auid=0 ses=467 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391515261.661:4242): avc: denied { read } for pid=37117 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391515261.661:4242): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffe411eed0 a2=84800 a3=0 items=0 ppid=37115 pid=37117 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=467 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391515261.681:4243): pid=37101 uid=0 auid=0 ses=467 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391515261.681:4244): pid=37101 uid=0 auid=0 ses=467 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391515801.691:4245): pid=37302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391515801.691:4246): pid=37302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391515801.691:4247): login pid=37302 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=468 >type=USER_START msg=audit(1391515801.691:4248): pid=37302 uid=0 auid=0 ses=468 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391515801.691:4249): pid=37302 uid=0 auid=0 ses=468 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391515801.701:4250): pid=37302 uid=0 auid=0 ses=468 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391515801.701:4251): pid=37302 uid=0 auid=0 ses=468 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391516701.712:4252): pid=37578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391516701.712:4253): pid=37578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391516701.712:4254): login pid=37578 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=469 >type=USER_START msg=audit(1391516701.722:4255): pid=37578 uid=0 auid=0 ses=469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391516701.722:4256): pid=37578 uid=0 auid=0 ses=469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391516701.732:4257): pid=37578 uid=0 auid=0 ses=469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391516701.732:4258): pid=37578 uid=0 auid=0 ses=469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391517601.742:4259): pid=37856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391517601.742:4260): pid=37856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391517601.742:4261): login pid=37856 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=470 >type=USER_START msg=audit(1391517601.742:4262): pid=37856 uid=0 auid=0 ses=470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391517601.742:4263): pid=37856 uid=0 auid=0 ses=470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391517601.752:4264): pid=37856 uid=0 auid=0 ses=470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391517601.752:4265): pid=37856 uid=0 auid=0 ses=470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391518501.763:4266): pid=38135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391518501.763:4267): pid=38135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391518501.763:4268): login pid=38135 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=471 >type=USER_START msg=audit(1391518501.763:4269): pid=38135 uid=0 auid=0 ses=471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391518501.763:4270): pid=38135 uid=0 auid=0 ses=471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391518501.773:4271): pid=38135 uid=0 auid=0 ses=471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391518501.773:4272): pid=38135 uid=0 auid=0 ses=471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391518861.783:4273): pid=38249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391518861.783:4274): pid=38249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391518861.783:4275): login pid=38249 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=472 >type=USER_START msg=audit(1391518861.783:4276): pid=38249 uid=0 auid=0 ses=472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391518861.783:4277): pid=38249 uid=0 auid=0 ses=472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391518861.803:4278): avc: denied { read } for pid=38265 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391518861.803:4278): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffe24d97a0 a2=84800 a3=0 items=0 ppid=38263 pid=38265 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=472 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391518861.813:4279): pid=38249 uid=0 auid=0 ses=472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391518861.813:4280): pid=38249 uid=0 auid=0 ses=472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391518910.043:4281): pid=38304 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D332031302E31302E32372E36383A2F73746F72616765202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391518910.043:4282): pid=38304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391518910.053:4283): pid=38304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391518910.063:4284): pid=38304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391518910.063:4285): pid=38304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391518910.163:4286): pid=38312 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391518910.163:4287): pid=38312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391518910.163:4288): pid=38312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391518910.163:4289): pid=38312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391518910.163:4290): pid=38312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391518910.173:4291): pid=38314 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391518910.173:4292): pid=38314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391518910.173:4293): pid=38314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391518910.203:4294): pid=38314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391518910.203:4295): pid=38314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391518910.313:4296): pid=38334 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391518910.313:4297): pid=38334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391518910.313:4298): pid=38334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391518910.333:4299): pid=38334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391518910.333:4300): pid=38334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391518925.363:4301): pid=38353 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F756D6F756E74202D66202D6C202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391518925.363:4302): pid=38353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391518925.363:4303): pid=38353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391518925.443:4304): pid=38353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391518925.443:4305): pid=38353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391518925.453:4306): pid=38357 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391518925.453:4307): pid=38357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391518925.453:4308): pid=38357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391518925.453:4309): pid=38357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391518925.453:4310): pid=38357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391518925.463:4311): pid=38359 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391518925.463:4312): pid=38359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391518925.463:4313): pid=38359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391518925.493:4314): pid=38359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391518925.493:4315): pid=38359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391519401.823:4316): pid=38530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391519401.823:4317): pid=38530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391519401.823:4318): login pid=38530 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=473 >type=USER_START msg=audit(1391519401.833:4319): pid=38530 uid=0 auid=0 ses=473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391519401.833:4320): pid=38530 uid=0 auid=0 ses=473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391519401.843:4321): pid=38530 uid=0 auid=0 ses=473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391519401.843:4322): pid=38530 uid=0 auid=0 ses=473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391519466.993:4323): pid=38564 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D332031302E31302E32372E36383A2F73746F72616765202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391519467.003:4324): pid=38564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391519467.003:4325): pid=38564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391519467.013:4326): pid=38564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391519467.013:4327): pid=38564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391519467.103:4328): pid=38572 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391519467.103:4329): pid=38572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391519467.103:4330): pid=38572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391519467.103:4331): pid=38572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391519467.103:4332): pid=38572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391519467.113:4333): pid=38574 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391519467.113:4334): pid=38574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391519467.113:4335): pid=38574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391519467.143:4336): pid=38574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391519467.143:4337): pid=38574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391519467.253:4338): pid=38595 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391519467.253:4339): pid=38595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391519467.253:4340): pid=38595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391519467.273:4341): pid=38595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391519467.273:4342): pid=38595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391519478.983:4343): pid=38614 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F756D6F756E74202D66202D6C202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391519478.983:4344): pid=38614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391519478.983:4345): pid=38614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391519479.043:4346): pid=38614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391519479.043:4347): pid=38614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391519479.053:4348): pid=38618 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391519479.053:4349): pid=38618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391519479.053:4350): pid=38618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391519479.053:4351): pid=38618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391519479.053:4352): pid=38618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391519479.063:4353): pid=38620 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391519479.063:4354): pid=38620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391519479.063:4355): pid=38620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391519479.093:4356): pid=38620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391519479.093:4357): pid=38620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391520179.734:4358): pid=38860 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D332031302E31302E32372E36383A2F73746F72616765202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391520179.734:4359): pid=38860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391520179.734:4360): pid=38860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391520179.744:4361): pid=38860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391520179.744:4362): pid=38860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391520179.804:4363): pid=38868 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391520179.804:4364): pid=38868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391520179.804:4365): pid=38868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391520179.804:4366): pid=38868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391520179.804:4367): pid=38868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391520179.824:4368): pid=38870 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391520179.824:4369): pid=38870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391520179.824:4370): pid=38870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391520179.854:4371): pid=38870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391520179.854:4372): pid=38870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391520179.954:4373): pid=38891 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391520179.954:4374): pid=38891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391520179.954:4375): pid=38891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391520179.964:4376): pid=38891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391520179.964:4377): pid=38891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391520301.854:4378): pid=38950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391520301.854:4379): pid=38950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391520301.854:4380): login pid=38950 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=474 >type=USER_START msg=audit(1391520301.864:4381): pid=38950 uid=0 auid=0 ses=474 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391520301.864:4382): pid=38950 uid=0 auid=0 ses=474 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391520301.874:4383): pid=38950 uid=0 auid=0 ses=474 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391520301.874:4384): pid=38950 uid=0 auid=0 ses=474 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391521201.884:4385): pid=39321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391521201.884:4386): pid=39321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391521201.884:4387): login pid=39321 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=475 >type=USER_START msg=audit(1391521201.894:4388): pid=39321 uid=0 auid=0 ses=475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391521201.894:4389): pid=39321 uid=0 auid=0 ses=475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391521201.904:4390): pid=39321 uid=0 auid=0 ses=475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391521201.904:4391): pid=39321 uid=0 auid=0 ses=475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391522101.915:4392): pid=39696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391522101.915:4393): pid=39696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391522101.915:4394): login pid=39696 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=476 >type=USER_START msg=audit(1391522101.915:4395): pid=39696 uid=0 auid=0 ses=476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391522101.915:4396): pid=39696 uid=0 auid=0 ses=476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391522101.925:4397): pid=39696 uid=0 auid=0 ses=476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391522101.925:4398): pid=39696 uid=0 auid=0 ses=476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391522461.935:4399): pid=39845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391522461.935:4400): pid=39845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391522461.935:4401): login pid=39845 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=477 >type=USER_START msg=audit(1391522461.935:4402): pid=39845 uid=0 auid=0 ses=477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391522461.935:4403): pid=39845 uid=0 auid=0 ses=477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391522461.955:4404): avc: denied { read } for pid=39861 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391522461.955:4404): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3ffff8ade5f0 a2=84800 a3=0 items=0 ppid=39859 pid=39861 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=477 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391522461.975:4405): pid=39845 uid=0 auid=0 ses=477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391522461.975:4406): pid=39845 uid=0 auid=0 ses=477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391523001.975:4407): pid=40107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391523001.985:4408): pid=40107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391523001.985:4409): login pid=40107 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=478 >type=USER_START msg=audit(1391523001.985:4410): pid=40107 uid=0 auid=0 ses=478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391523001.985:4411): pid=40107 uid=0 auid=0 ses=478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391523002.005:4412): pid=40107 uid=0 auid=0 ses=478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391523002.005:4413): pid=40107 uid=0 auid=0 ses=478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391523901.016:4414): pid=40479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391523901.016:4415): pid=40479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391523901.026:4416): login pid=40479 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=479 >type=USER_START msg=audit(1391523901.026:4417): pid=40479 uid=0 auid=0 ses=479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391523901.026:4418): pid=40479 uid=0 auid=0 ses=479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391523901.046:4419): pid=40479 uid=0 auid=0 ses=479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391523901.046:4420): pid=40479 uid=0 auid=0 ses=479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391524801.066:4421): pid=40851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391524801.066:4422): pid=40851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391524801.066:4423): login pid=40851 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=480 >type=USER_START msg=audit(1391524801.066:4424): pid=40851 uid=0 auid=0 ses=480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391524801.066:4425): pid=40851 uid=0 auid=0 ses=480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391524801.076:4426): pid=40851 uid=0 auid=0 ses=480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391524801.086:4427): pid=40851 uid=0 auid=0 ses=480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391525701.097:4428): pid=41224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391525701.097:4429): pid=41224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391525701.097:4430): login pid=41224 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=481 >type=USER_START msg=audit(1391525701.097:4431): pid=41224 uid=0 auid=0 ses=481 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391525701.097:4432): pid=41224 uid=0 auid=0 ses=481 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391525701.107:4433): pid=41224 uid=0 auid=0 ses=481 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391525701.107:4434): pid=41224 uid=0 auid=0 ses=481 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391526061.117:4435): pid=41373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391526061.117:4436): pid=41373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391526061.117:4437): login pid=41373 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=482 >type=USER_START msg=audit(1391526061.127:4438): pid=41373 uid=0 auid=0 ses=482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391526061.127:4439): pid=41373 uid=0 auid=0 ses=482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391526061.177:4440): pid=41373 uid=0 auid=0 ses=482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391526061.177:4441): pid=41373 uid=0 auid=0 ses=482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391526601.187:4442): pid=41621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391526601.187:4443): pid=41621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391526601.187:4444): login pid=41621 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=483 >type=USER_START msg=audit(1391526601.187:4445): pid=41621 uid=0 auid=0 ses=483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391526601.187:4446): pid=41621 uid=0 auid=0 ses=483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391526601.197:4447): pid=41621 uid=0 auid=0 ses=483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391526601.197:4448): pid=41621 uid=0 auid=0 ses=483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391527501.208:4449): pid=41990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391527501.208:4450): pid=41990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391527501.208:4451): login pid=41990 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=484 >type=USER_START msg=audit(1391527501.208:4452): pid=41990 uid=0 auid=0 ses=484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391527501.208:4453): pid=41990 uid=0 auid=0 ses=484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391527501.218:4454): pid=41990 uid=0 auid=0 ses=484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391527501.218:4455): pid=41990 uid=0 auid=0 ses=484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391528401.239:4456): pid=42362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391528401.239:4457): pid=42362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391528401.239:4458): login pid=42362 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=485 >type=USER_START msg=audit(1391528401.239:4459): pid=42362 uid=0 auid=0 ses=485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391528401.239:4460): pid=42362 uid=0 auid=0 ses=485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391528401.259:4461): pid=42362 uid=0 auid=0 ses=485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391528401.259:4462): pid=42362 uid=0 auid=0 ses=485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391529301.269:4463): pid=42732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391529301.269:4464): pid=42732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391529301.269:4465): login pid=42732 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=486 >type=USER_START msg=audit(1391529301.269:4466): pid=42732 uid=0 auid=0 ses=486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391529301.269:4467): pid=42732 uid=0 auid=0 ses=486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391529301.279:4468): pid=42732 uid=0 auid=0 ses=486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391529301.279:4469): pid=42732 uid=0 auid=0 ses=486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1391529490.289:4470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391529490.289:4471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391529661.289:4472): pid=42885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391529661.289:4473): pid=42885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391529661.289:4474): login pid=42885 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=487 >type=USER_START msg=audit(1391529661.299:4475): pid=42885 uid=0 auid=0 ses=487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391529661.299:4476): pid=42885 uid=0 auid=0 ses=487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391529661.329:4477): pid=42885 uid=0 auid=0 ses=487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391529661.329:4478): pid=42885 uid=0 auid=0 ses=487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391530201.340:4479): pid=43135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391530201.340:4480): pid=43135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391530201.340:4481): login pid=43135 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=488 >type=USER_START msg=audit(1391530201.340:4482): pid=43135 uid=0 auid=0 ses=488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391530201.340:4483): pid=43135 uid=0 auid=0 ses=488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391530201.350:4484): pid=43135 uid=0 auid=0 ses=488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391530201.350:4485): pid=43135 uid=0 auid=0 ses=488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391531101.360:4486): pid=43506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391531101.360:4487): pid=43506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391531101.360:4488): login pid=43506 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=489 >type=USER_START msg=audit(1391531101.360:4489): pid=43506 uid=0 auid=0 ses=489 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391531101.360:4490): pid=43506 uid=0 auid=0 ses=489 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391531101.370:4491): pid=43506 uid=0 auid=0 ses=489 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391531101.370:4492): pid=43506 uid=0 auid=0 ses=489 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391532001.381:4493): pid=43842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391532001.381:4494): pid=43842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391532001.381:4495): login pid=43842 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=490 >type=USER_START msg=audit(1391532001.391:4496): pid=43842 uid=0 auid=0 ses=490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391532001.391:4497): pid=43842 uid=0 auid=0 ses=490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391532001.391:4498): pid=43842 uid=0 auid=0 ses=490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391532001.401:4499): pid=43842 uid=0 auid=0 ses=490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391532901.401:4500): pid=44215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391532901.401:4501): pid=44215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391532901.411:4502): login pid=44215 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=491 >type=USER_START msg=audit(1391532901.411:4503): pid=44215 uid=0 auid=0 ses=491 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391532901.411:4504): pid=44215 uid=0 auid=0 ses=491 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391532901.411:4505): pid=44215 uid=0 auid=0 ses=491 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391532901.421:4506): pid=44215 uid=0 auid=0 ses=491 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391533261.421:4507): pid=44366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391533261.421:4508): pid=44366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391533261.421:4509): login pid=44366 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=492 >type=USER_START msg=audit(1391533261.431:4510): pid=44366 uid=0 auid=0 ses=492 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391533261.431:4511): pid=44366 uid=0 auid=0 ses=492 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391533261.441:4512): avc: denied { read } for pid=44382 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391533261.441:4512): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffcb6e5e20 a2=84800 a3=0 items=0 ppid=44380 pid=44382 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=492 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391533261.461:4513): pid=44366 uid=0 auid=0 ses=492 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391533261.461:4514): pid=44366 uid=0 auid=0 ses=492 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391533801.472:4515): pid=44614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391533801.472:4516): pid=44614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391533801.472:4517): login pid=44614 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=493 >type=USER_START msg=audit(1391533801.482:4518): pid=44614 uid=0 auid=0 ses=493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391533801.482:4519): pid=44614 uid=0 auid=0 ses=493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391533801.482:4520): pid=44614 uid=0 auid=0 ses=493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391533801.492:4521): pid=44614 uid=0 auid=0 ses=493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391534701.502:4522): pid=44985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391534701.502:4523): pid=44985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391534701.502:4524): login pid=44985 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=494 >type=USER_START msg=audit(1391534701.502:4525): pid=44985 uid=0 auid=0 ses=494 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391534701.502:4526): pid=44985 uid=0 auid=0 ses=494 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391534701.512:4527): pid=44985 uid=0 auid=0 ses=494 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391534701.512:4528): pid=44985 uid=0 auid=0 ses=494 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391535253.183:4529): pid=45220 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F756D6F756E74202D66202D6C202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391535253.183:4530): pid=45220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391535253.183:4531): pid=45220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391535253.253:4532): pid=45220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391535253.253:4533): pid=45220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391535253.263:4534): pid=45224 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391535253.263:4535): pid=45224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391535253.263:4536): pid=45224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391535253.263:4537): pid=45224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391535253.263:4538): pid=45224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391535253.273:4539): pid=45226 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391535253.273:4540): pid=45226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391535253.273:4541): pid=45226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391535253.303:4542): pid=45226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391535253.303:4543): pid=45226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391535601.523:4544): pid=45352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391535601.523:4545): pid=45352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391535601.523:4546): login pid=45352 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=495 >type=USER_START msg=audit(1391535601.533:4547): pid=45352 uid=0 auid=0 ses=495 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391535601.533:4548): pid=45352 uid=0 auid=0 ses=495 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391535601.543:4549): pid=45352 uid=0 auid=0 ses=495 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391535601.543:4550): pid=45352 uid=0 auid=0 ses=495 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391535720.703:4551): pid=45402 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D332031302E31302E32372E36383A2F73746F72616765202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391535720.703:4552): pid=45402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391535720.713:4553): pid=45402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391535720.723:4554): pid=45402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391535720.723:4555): pid=45402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391535720.813:4556): pid=45410 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391535720.813:4557): pid=45410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391535720.813:4558): pid=45410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391535720.813:4559): pid=45410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391535720.813:4560): pid=45410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391535720.823:4561): pid=45412 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391535720.823:4562): pid=45412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391535720.823:4563): pid=45412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391535720.863:4564): pid=45412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391535720.863:4565): pid=45412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391535720.963:4566): pid=45432 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391535720.963:4567): pid=45432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391535720.963:4568): pid=45432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391535720.983:4569): pid=45432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391535720.983:4570): pid=45432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391536307.963:4571): pid=46126 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/dev" cmd=756D6F756E74202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391536307.963:4572): pid=46126 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391536307.963:4573): pid=46126 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391536307.973:4574): pid=46126 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391536307.973:4575): pid=46126 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_ACCT msg=audit(1391536501.553:4576): pid=46370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391536501.553:4577): pid=46370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391536501.553:4578): login pid=46370 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=496 >type=USER_START msg=audit(1391536501.563:4579): pid=46370 uid=0 auid=0 ses=496 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391536501.563:4580): pid=46370 uid=0 auid=0 ses=496 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391536501.573:4581): pid=46370 uid=0 auid=0 ses=496 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391536501.573:4582): pid=46370 uid=0 auid=0 ses=496 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391536722.653:4583): pid=46654 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391536722.653:4584): pid=46654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391536722.653:4585): pid=46654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391536722.653:4586): pid=46654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391536722.653:4587): pid=46654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391536722.663:4588): pid=46656 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391536722.663:4589): pid=46656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391536722.663:4590): pid=46656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391536722.693:4591): pid=46656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391536722.693:4592): pid=46656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391536722.713:4593): pid=46684 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20707673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C73697A652C76675F6E616D652C76675F757569642C70655F73' >type=CRED_ACQ msg=audit(1391536722.713:4594): pid=46684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391536722.713:4595): pid=46684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391536722.723:4596): pid=46684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391536722.723:4597): pid=46684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391536722.753:4598): pid=46691 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207076637265617465202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D74657374202D2D6D6574616461746173697A65203132386D202D2D6D65746164617461636F706965732032202D2D6D6574616461746169676E6F72652079 terminal=? res=success' >type=CRED_ACQ msg=audit(1391536722.753:4599): pid=46691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391536722.753:4600): pid=46691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391536722.763:4601): pid=46691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391536722.763:4602): pid=46691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391536724.503:4603): pid=46699 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391536724.503:4604): pid=46699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391536724.503:4605): pid=46699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391536724.513:4606): pid=46699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391536724.513:4607): pid=46699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391536724.523:4608): pid=46701 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391536724.523:4609): pid=46701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391536724.523:4610): pid=46701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391536724.553:4611): pid=46701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391536724.553:4612): pid=46701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391536724.573:4613): pid=46726 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20707673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C73697A652C76675F6E616D652C76675F757569642C70655F73' >type=CRED_ACQ msg=audit(1391536724.573:4614): pid=46726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391536724.573:4615): pid=46726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391536724.583:4616): pid=46726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391536724.583:4617): pid=46726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391536724.603:4618): pid=46733 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391536724.603:4619): pid=46733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391536724.603:4620): pid=46733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391536724.633:4621): pid=46733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391536724.633:4622): pid=46733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391536760.024:4623): pid=46783 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391536760.024:4624): pid=46783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391536760.024:4625): pid=46783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391536760.024:4626): pid=46783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391536760.024:4627): pid=46783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391536760.034:4628): pid=46785 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391536760.034:4629): pid=46785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391536760.034:4630): pid=46785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391536760.074:4631): pid=46785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391536760.074:4632): pid=46785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391536760.094:4633): pid=46810 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391536760.094:4634): pid=46810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391536760.094:4635): pid=46810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391536760.104:4636): pid=46810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391536760.104:4637): pid=46810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391536760.134:4638): pid=46817 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_ACQ msg=audit(1391536760.134:4639): pid=46817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391536760.134:4640): pid=46817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391536760.134:4641): pid=46817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391536760.134:4642): pid=46817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1391536804.934:4643): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 vm-ctx=system_u:system_r:svirt_tcg_t:s0:c797,c869 img-ctx=system_u:object_r:svirt_image_t:s0:c797,c869 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1391536804.934:4644): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1391536805.104:4645): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1391536805.104:4645): arch=80000015 syscall=54 success=yes exit=0 a0=1a a1=89a2 a2=1ffff5bfd000 a3=0 items=0 ppid=1 pid=40070 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1391536805.174:4646): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=open vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 net=00:1a:4a:1d:90:7e path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391536805.474:4647): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=deny vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391536805.474:4648): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/rhev/data-center/mnt/10.10.27.68:_storage/9550cdb4-2d33-40e1-9a35-3ecb0a6efba0/images/7efab88b-d498-4e8f-b2bc-eca234dc684c/a7c717a2-5326-44dc-aa90-dc06c820d16c" rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391536805.474:4649): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391536805.474:4650): avc: denied { entrypoint } for pid=46994 comm="libvirtd" path="/usr/bin/qemu-system-ppc64" dev="dm-1" ino=2263190 scontext=system_u:system_r:svirt_tcg_t:s0:c797,c869 tcontext=unconfined_u:object_r:bin_t:s0 tclass=file >type=SYSCALL msg=audit(1391536805.474:4650): arch=80000015 syscall=11 success=yes exit=0 a0=1fffd8055360 a1=1fffd8002bb0 a2=1fffd8053610 a3=8 items=0 ppid=1 pid=46994 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 ses=4294967295 tty=(none) comm="qemu-system-ppc" exe="/usr/bin/qemu-system-ppc64" subj=system_u:system_r:svirt_tcg_t:s0:c797,c869 key=(null) >type=VIRT_RESOURCE msg=audit(1391536805.694:4651): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=disk reason=start vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 old-disk="?" new-disk="/rhev/data-center/mnt/10.10.27.68:_storage/9550cdb4-2d33-40e1-9a35-3ecb0a6efba0/images/7efab88b-d498-4e8f-b2bc-eca234dc684c/a7c717a2-5326-44dc-aa90-dc06c820d16c" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391536805.694:4652): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=disk reason=start vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 old-disk="?" new-disk="/dev/mapper/36005076300808040b000000000000002" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391536805.694:4653): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=start vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 old-net=? new-net=00:1a:4a:1d:90:7e exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391536805.694:4654): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=mem reason=start vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391536805.694:4655): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=vcpu reason=start vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1391536805.694:4656): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=start reason=booted vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 vm-pid=46994 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391536861.584:4657): pid=47091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391536861.584:4658): pid=47091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391536861.584:4659): login pid=47091 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=497 >type=USER_START msg=audit(1391536861.594:4660): pid=47091 uid=0 auid=0 ses=497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391536861.594:4661): pid=47091 uid=0 auid=0 ses=497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391536861.614:4662): avc: denied { read } for pid=47107 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391536861.614:4662): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffe8726c00 a2=84800 a3=0 items=0 ppid=47105 pid=47107 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=497 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391536861.624:4663): pid=47091 uid=0 auid=0 ses=497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391536861.624:4664): pid=47091 uid=0 auid=0 ses=497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391537401.634:4665): pid=47823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391537401.634:4666): pid=47823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391537401.644:4667): login pid=47823 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=498 >type=USER_START msg=audit(1391537401.644:4668): pid=47823 uid=0 auid=0 ses=498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391537401.644:4669): pid=47823 uid=0 auid=0 ses=498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391537401.654:4670): pid=47823 uid=0 auid=0 ses=498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391537401.654:4671): pid=47823 uid=0 auid=0 ses=498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391538301.664:4672): pid=48994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391538301.664:4673): pid=48994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391538301.664:4674): login pid=48994 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=499 >type=USER_START msg=audit(1391538301.664:4675): pid=48994 uid=0 auid=0 ses=499 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391538301.674:4676): pid=48994 uid=0 auid=0 ses=499 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391538301.674:4677): pid=48994 uid=0 auid=0 ses=499 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391538301.674:4678): pid=48994 uid=0 auid=0 ses=499 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391539201.685:4679): pid=50165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391539201.685:4680): pid=50165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391539201.685:4681): login pid=50165 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=500 >type=USER_START msg=audit(1391539201.695:4682): pid=50165 uid=0 auid=0 ses=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391539201.695:4683): pid=50165 uid=0 auid=0 ses=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391539201.695:4684): pid=50165 uid=0 auid=0 ses=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391539201.695:4685): pid=50165 uid=0 auid=0 ses=500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391540101.696:4686): pid=51338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391540101.696:4687): pid=51338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391540101.696:4688): login pid=51338 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=501 >type=USER_START msg=audit(1391540101.706:4689): pid=51338 uid=0 auid=0 ses=501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391540101.706:4690): pid=51338 uid=0 auid=0 ses=501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391540101.706:4691): pid=51338 uid=0 auid=0 ses=501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391540101.716:4692): pid=51338 uid=0 auid=0 ses=501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391540461.716:4693): pid=51809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391540461.716:4694): pid=51809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391540461.716:4695): login pid=51809 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=502 >type=USER_START msg=audit(1391540461.726:4696): pid=51809 uid=0 auid=0 ses=502 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391540461.726:4697): pid=51809 uid=0 auid=0 ses=502 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391540461.736:4698): avc: denied { read } for pid=51825 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391540461.736:4698): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffc3952150 a2=84800 a3=0 items=0 ppid=51823 pid=51825 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=502 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391540461.756:4699): pid=51809 uid=0 auid=0 ses=502 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391540461.756:4700): pid=51809 uid=0 auid=0 ses=502 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391541001.766:4701): pid=52540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391541001.766:4702): pid=52540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391541001.766:4703): login pid=52540 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=503 >type=USER_START msg=audit(1391541001.766:4704): pid=52540 uid=0 auid=0 ses=503 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391541001.766:4705): pid=52540 uid=0 auid=0 ses=503 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391541002.096:4706): pid=52540 uid=0 auid=0 ses=503 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391541002.096:4707): pid=52540 uid=0 auid=0 ses=503 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391541901.107:4708): pid=53713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391541901.107:4709): pid=53713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391541901.107:4710): login pid=53713 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=504 >type=USER_START msg=audit(1391541901.117:4711): pid=53713 uid=0 auid=0 ses=504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391541901.117:4712): pid=53713 uid=0 auid=0 ses=504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391541901.257:4713): pid=53713 uid=0 auid=0 ses=504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391541901.257:4714): pid=53713 uid=0 auid=0 ses=504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391542801.267:4715): pid=54895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391542801.267:4716): pid=54895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391542801.267:4717): login pid=54895 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=505 >type=USER_START msg=audit(1391542801.277:4718): pid=54895 uid=0 auid=0 ses=505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391542801.277:4719): pid=54895 uid=0 auid=0 ses=505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391542801.597:4720): pid=54895 uid=0 auid=0 ses=505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391542801.597:4721): pid=54895 uid=0 auid=0 ses=505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391543701.608:4722): pid=56102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391543701.608:4723): pid=56102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391543701.608:4724): login pid=56102 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=506 >type=USER_START msg=audit(1391543701.618:4725): pid=56102 uid=0 auid=0 ses=506 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391543701.618:4726): pid=56102 uid=0 auid=0 ses=506 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391543701.758:4727): pid=56102 uid=0 auid=0 ses=506 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391543701.758:4728): pid=56102 uid=0 auid=0 ses=506 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391544061.768:4729): pid=56577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391544061.768:4730): pid=56577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391544061.768:4731): login pid=56577 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=507 >type=USER_START msg=audit(1391544061.778:4732): pid=56577 uid=0 auid=0 ses=507 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391544061.778:4733): pid=56577 uid=0 auid=0 ses=507 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391544061.798:4734): avc: denied { read } for pid=56593 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391544061.798:4734): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffdd9c2b20 a2=84800 a3=0 items=0 ppid=56591 pid=56593 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=507 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391544061.808:4735): pid=56577 uid=0 auid=0 ses=507 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391544061.808:4736): pid=56577 uid=0 auid=0 ses=507 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391544601.818:4737): pid=57307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391544601.818:4738): pid=57307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391544601.818:4739): login pid=57307 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=508 >type=USER_START msg=audit(1391544601.828:4740): pid=57307 uid=0 auid=0 ses=508 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391544601.828:4741): pid=57307 uid=0 auid=0 ses=508 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391544602.208:4742): pid=57307 uid=0 auid=0 ses=508 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391544602.218:4743): pid=57307 uid=0 auid=0 ses=508 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391545501.229:4744): pid=58483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391545501.229:4745): pid=58483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391545501.229:4746): login pid=58483 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=509 >type=USER_START msg=audit(1391545501.229:4747): pid=58483 uid=0 auid=0 ses=509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391545501.229:4748): pid=58483 uid=0 auid=0 ses=509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391545501.379:4749): pid=58483 uid=0 auid=0 ses=509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391545501.379:4750): pid=58483 uid=0 auid=0 ses=509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391546401.389:4751): pid=59657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391546401.389:4752): pid=59657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391546401.389:4753): login pid=59657 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=510 >type=USER_START msg=audit(1391546401.399:4754): pid=59657 uid=0 auid=0 ses=510 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391546401.399:4755): pid=59657 uid=0 auid=0 ses=510 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391546401.749:4756): pid=59657 uid=0 auid=0 ses=510 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391546401.759:4757): pid=59657 uid=0 auid=0 ses=510 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391547301.770:4758): pid=60836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391547301.770:4759): pid=60836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391547301.770:4760): login pid=60836 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=511 >type=USER_START msg=audit(1391547301.770:4761): pid=60836 uid=0 auid=0 ses=511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391547301.770:4762): pid=60836 uid=0 auid=0 ses=511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391547301.910:4763): pid=60836 uid=0 auid=0 ses=511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391547301.910:4764): pid=60836 uid=0 auid=0 ses=511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391547661.920:4765): pid=61309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391547661.920:4766): pid=61309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391547661.920:4767): login pid=61309 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=512 >type=USER_START msg=audit(1391547661.930:4768): pid=61309 uid=0 auid=0 ses=512 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391547661.930:4769): pid=61309 uid=0 auid=0 ses=512 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391547661.940:4770): avc: denied { read } for pid=61325 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391547661.940:4770): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3ffffc5e3fb0 a2=84800 a3=0 items=0 ppid=61323 pid=61325 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=512 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391547661.960:4771): pid=61309 uid=0 auid=0 ses=512 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391547661.960:4772): pid=61309 uid=0 auid=0 ses=512 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391548201.970:4773): pid=62041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391548201.970:4774): pid=62041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391548201.970:4775): login pid=62041 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=513 >type=USER_START msg=audit(1391548201.980:4776): pid=62041 uid=0 auid=0 ses=513 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391548201.980:4777): pid=62041 uid=0 auid=0 ses=513 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391548202.310:4778): pid=62041 uid=0 auid=0 ses=513 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391548202.320:4779): pid=62041 uid=0 auid=0 ses=513 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391549101.331:4780): pid=63215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391549101.331:4781): pid=63215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391549101.331:4782): login pid=63215 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=514 >type=USER_START msg=audit(1391549101.331:4783): pid=63215 uid=0 auid=0 ses=514 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391549101.331:4784): pid=63215 uid=0 auid=0 ses=514 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391549101.451:4785): pid=63215 uid=0 auid=0 ses=514 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391549101.451:4786): pid=63215 uid=0 auid=0 ses=514 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391550001.461:4787): pid=64390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391550001.461:4788): pid=64390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391550001.461:4789): login pid=64390 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=515 >type=USER_START msg=audit(1391550001.461:4790): pid=64390 uid=0 auid=0 ses=515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391550001.461:4791): pid=64390 uid=0 auid=0 ses=515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391550001.771:4792): pid=64390 uid=0 auid=0 ses=515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391550001.771:4793): pid=64390 uid=0 auid=0 ses=515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391550901.782:4794): pid=340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391550901.782:4795): pid=340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391550901.782:4796): login pid=340 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=516 >type=USER_START msg=audit(1391550901.792:4797): pid=340 uid=0 auid=0 ses=516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391550901.792:4798): pid=340 uid=0 auid=0 ses=516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391550901.922:4799): pid=340 uid=0 auid=0 ses=516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391550901.922:4800): pid=340 uid=0 auid=0 ses=516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391551261.932:4801): pid=884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391551261.932:4802): pid=884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391551261.932:4803): login pid=884 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=517 >type=USER_START msg=audit(1391551261.932:4804): pid=884 uid=0 auid=0 ses=517 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391551261.932:4805): pid=884 uid=0 auid=0 ses=517 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391551261.952:4806): avc: denied { read } for pid=900 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391551261.952:4806): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffec32e020 a2=84800 a3=0 items=0 ppid=898 pid=900 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=517 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391551261.962:4807): pid=884 uid=0 auid=0 ses=517 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391551261.962:4808): pid=884 uid=0 auid=0 ses=517 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391551801.972:4809): pid=1642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391551801.972:4810): pid=1642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391551801.972:4811): login pid=1642 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=518 >type=USER_START msg=audit(1391551801.982:4812): pid=1642 uid=0 auid=0 ses=518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391551801.982:4813): pid=1642 uid=0 auid=0 ses=518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391551802.302:4814): pid=1642 uid=0 auid=0 ses=518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391551802.302:4815): pid=1642 uid=0 auid=0 ses=518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391552701.313:4816): pid=2832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391552701.313:4817): pid=2832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391552701.313:4818): login pid=2832 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=519 >type=USER_START msg=audit(1391552701.323:4819): pid=2832 uid=0 auid=0 ses=519 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391552701.323:4820): pid=2832 uid=0 auid=0 ses=519 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391552701.453:4821): pid=2832 uid=0 auid=0 ses=519 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391552701.453:4822): pid=2832 uid=0 auid=0 ses=519 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391553601.474:4823): pid=4006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391553601.474:4824): pid=4006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391553601.474:4825): login pid=4006 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=520 >type=USER_START msg=audit(1391553601.474:4826): pid=4006 uid=0 auid=0 ses=520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391553601.474:4827): pid=4006 uid=0 auid=0 ses=520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391553601.804:4828): pid=4006 uid=0 auid=0 ses=520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391553601.804:4829): pid=4006 uid=0 auid=0 ses=520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391554501.814:4830): pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391554501.814:4831): pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391554501.814:4832): login pid=5183 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=521 >type=USER_START msg=audit(1391554501.814:4833): pid=5183 uid=0 auid=0 ses=521 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391554501.824:4834): pid=5183 uid=0 auid=0 ses=521 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391554501.954:4835): pid=5183 uid=0 auid=0 ses=521 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391554501.964:4836): pid=5183 uid=0 auid=0 ses=521 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391554861.974:4837): pid=5657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391554861.974:4838): pid=5657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391554861.974:4839): login pid=5657 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=522 >type=USER_START msg=audit(1391554861.974:4840): pid=5657 uid=0 auid=0 ses=522 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391554861.974:4841): pid=5657 uid=0 auid=0 ses=522 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391554861.994:4842): avc: denied { read } for pid=5673 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391554861.994:4842): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffd6935e10 a2=84800 a3=0 items=0 ppid=5671 pid=5673 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=522 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391554862.004:4843): pid=5657 uid=0 auid=0 ses=522 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391554862.004:4844): pid=5657 uid=0 auid=0 ses=522 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391555401.015:4845): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391555401.015:4846): pid=6383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391555401.015:4847): login pid=6383 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=523 >type=USER_START msg=audit(1391555401.025:4848): pid=6383 uid=0 auid=0 ses=523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391555401.025:4849): pid=6383 uid=0 auid=0 ses=523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391555401.395:4850): pid=6383 uid=0 auid=0 ses=523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391555401.395:4851): pid=6383 uid=0 auid=0 ses=523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391556301.415:4852): pid=7560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391556301.415:4853): pid=7560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391556301.415:4854): login pid=7560 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=524 >type=USER_START msg=audit(1391556301.415:4855): pid=7560 uid=0 auid=0 ses=524 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391556301.415:4856): pid=7560 uid=0 auid=0 ses=524 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391556301.605:4857): pid=7560 uid=0 auid=0 ses=524 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391556301.605:4858): pid=7560 uid=0 auid=0 ses=524 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391557201.606:4859): pid=8735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391557201.616:4860): pid=8735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391557201.616:4861): login pid=8735 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=525 >type=USER_START msg=audit(1391557201.616:4862): pid=8735 uid=0 auid=0 ses=525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391557201.616:4863): pid=8735 uid=0 auid=0 ses=525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391557202.006:4864): pid=8735 uid=0 auid=0 ses=525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391557202.006:4865): pid=8735 uid=0 auid=0 ses=525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391558101.016:4866): pid=9911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391558101.016:4867): pid=9911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391558101.016:4868): login pid=9911 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=526 >type=USER_START msg=audit(1391558101.026:4869): pid=9911 uid=0 auid=0 ses=526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391558101.026:4870): pid=9911 uid=0 auid=0 ses=526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391558101.156:4871): pid=9911 uid=0 auid=0 ses=526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391558101.156:4872): pid=9911 uid=0 auid=0 ses=526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391558461.166:4873): pid=10385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391558461.166:4874): pid=10385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391558461.166:4875): login pid=10385 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=527 >type=USER_START msg=audit(1391558461.166:4876): pid=10385 uid=0 auid=0 ses=527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391558461.166:4877): pid=10385 uid=0 auid=0 ses=527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391558461.186:4878): avc: denied { read } for pid=10401 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391558461.186:4878): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffe9f42740 a2=84800 a3=0 items=0 ppid=10399 pid=10401 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=527 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391558461.196:4879): pid=10385 uid=0 auid=0 ses=527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391558461.206:4880): pid=10385 uid=0 auid=0 ses=527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391559001.217:4881): pid=11115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391559001.217:4882): pid=11115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391559001.217:4883): login pid=11115 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=528 >type=USER_START msg=audit(1391559001.217:4884): pid=11115 uid=0 auid=0 ses=528 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391559001.217:4885): pid=11115 uid=0 auid=0 ses=528 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391559001.537:4886): pid=11115 uid=0 auid=0 ses=528 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391559001.537:4887): pid=11115 uid=0 auid=0 ses=528 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391559901.547:4888): pid=12293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391559901.547:4889): pid=12293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391559901.547:4890): login pid=12293 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=529 >type=USER_START msg=audit(1391559901.547:4891): pid=12293 uid=0 auid=0 ses=529 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391559901.547:4892): pid=12293 uid=0 auid=0 ses=529 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391559901.667:4893): pid=12293 uid=0 auid=0 ses=529 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391559901.667:4894): pid=12293 uid=0 auid=0 ses=529 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391560801.678:4895): pid=13467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391560801.678:4896): pid=13467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391560801.678:4897): login pid=13467 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=530 >type=USER_START msg=audit(1391560801.688:4898): pid=13467 uid=0 auid=0 ses=530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391560801.688:4899): pid=13467 uid=0 auid=0 ses=530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391560802.198:4900): pid=13467 uid=0 auid=0 ses=530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391560802.208:4901): pid=13467 uid=0 auid=0 ses=530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391561701.218:4902): pid=14642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391561701.218:4903): pid=14642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391561701.218:4904): login pid=14642 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=531 >type=USER_START msg=audit(1391561701.218:4905): pid=14642 uid=0 auid=0 ses=531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391561701.218:4906): pid=14642 uid=0 auid=0 ses=531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391561701.348:4907): pid=14642 uid=0 auid=0 ses=531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391561701.348:4908): pid=14642 uid=0 auid=0 ses=531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391562061.359:4909): pid=15118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391562061.359:4910): pid=15118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391562061.369:4911): login pid=15118 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=532 >type=USER_START msg=audit(1391562061.369:4912): pid=15118 uid=0 auid=0 ses=532 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391562061.369:4913): pid=15118 uid=0 auid=0 ses=532 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391562061.389:4914): avc: denied { read } for pid=15134 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391562061.389:4914): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3ffffb072f50 a2=84800 a3=0 items=0 ppid=15132 pid=15134 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=532 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391562061.409:4915): pid=15118 uid=0 auid=0 ses=532 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391562061.409:4916): pid=15118 uid=0 auid=0 ses=532 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391562601.419:4917): pid=15847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391562601.419:4918): pid=15847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391562601.419:4919): login pid=15847 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=533 >type=USER_START msg=audit(1391562601.419:4920): pid=15847 uid=0 auid=0 ses=533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391562601.419:4921): pid=15847 uid=0 auid=0 ses=533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391562601.769:4922): pid=15847 uid=0 auid=0 ses=533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391562601.769:4923): pid=15847 uid=0 auid=0 ses=533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391563501.779:4924): pid=17025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391563501.779:4925): pid=17025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391563501.779:4926): login pid=17025 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=534 >type=USER_START msg=audit(1391563501.779:4927): pid=17025 uid=0 auid=0 ses=534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391563501.789:4928): pid=17025 uid=0 auid=0 ses=534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391563501.919:4929): pid=17025 uid=0 auid=0 ses=534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391563501.919:4930): pid=17025 uid=0 auid=0 ses=534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391564401.930:4931): pid=18200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391564401.930:4932): pid=18200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391564401.930:4933): login pid=18200 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=535 >type=USER_START msg=audit(1391564401.940:4934): pid=18200 uid=0 auid=0 ses=535 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391564401.940:4935): pid=18200 uid=0 auid=0 ses=535 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391564402.300:4936): pid=18200 uid=0 auid=0 ses=535 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391564402.300:4937): pid=18200 uid=0 auid=0 ses=535 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391565301.310:4938): pid=19375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391565301.310:4939): pid=19375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391565301.320:4940): login pid=19375 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=536 >type=USER_START msg=audit(1391565301.320:4941): pid=19375 uid=0 auid=0 ses=536 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391565301.320:4942): pid=19375 uid=0 auid=0 ses=536 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391565301.450:4943): pid=19375 uid=0 auid=0 ses=536 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391565301.450:4944): pid=19375 uid=0 auid=0 ses=536 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391565661.461:4945): pid=19848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391565661.461:4946): pid=19848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391565661.461:4947): login pid=19848 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=537 >type=USER_START msg=audit(1391565661.461:4948): pid=19848 uid=0 auid=0 ses=537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391565661.471:4949): pid=19848 uid=0 auid=0 ses=537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391565661.491:4950): avc: denied { read } for pid=19867 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391565661.491:4950): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffc8a099e0 a2=84800 a3=0 items=0 ppid=19865 pid=19867 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=537 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391565661.501:4951): pid=19848 uid=0 auid=0 ses=537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391565661.511:4952): pid=19848 uid=0 auid=0 ses=537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391566201.521:4953): pid=20583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391566201.521:4954): pid=20583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391566201.521:4955): login pid=20583 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=538 >type=USER_START msg=audit(1391566201.521:4956): pid=20583 uid=0 auid=0 ses=538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391566201.521:4957): pid=20583 uid=0 auid=0 ses=538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391566201.851:4958): pid=20583 uid=0 auid=0 ses=538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391566201.851:4959): pid=20583 uid=0 auid=0 ses=538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391567101.862:4960): pid=21760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391567101.862:4961): pid=21760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391567101.862:4962): login pid=21760 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=539 >type=USER_START msg=audit(1391567101.872:4963): pid=21760 uid=0 auid=0 ses=539 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391567101.872:4964): pid=21760 uid=0 auid=0 ses=539 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391567102.002:4965): pid=21760 uid=0 auid=0 ses=539 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391567102.002:4966): pid=21760 uid=0 auid=0 ses=539 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391568001.012:4967): pid=22933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391568001.012:4968): pid=22933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391568001.012:4969): login pid=22933 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=540 >type=USER_START msg=audit(1391568001.022:4970): pid=22933 uid=0 auid=0 ses=540 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391568001.022:4971): pid=22933 uid=0 auid=0 ses=540 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391568001.392:4972): pid=22933 uid=0 auid=0 ses=540 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391568001.392:4973): pid=22933 uid=0 auid=0 ses=540 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391568901.403:4974): pid=24110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391568901.403:4975): pid=24110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391568901.403:4976): login pid=24110 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=541 >type=USER_START msg=audit(1391568901.413:4977): pid=24110 uid=0 auid=0 ses=541 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391568901.413:4978): pid=24110 uid=0 auid=0 ses=541 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391568901.563:4979): pid=24110 uid=0 auid=0 ses=541 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391568901.563:4980): pid=24110 uid=0 auid=0 ses=541 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391569261.573:4981): pid=24584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391569261.573:4982): pid=24584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391569261.573:4983): login pid=24584 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=542 >type=USER_START msg=audit(1391569261.573:4984): pid=24584 uid=0 auid=0 ses=542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391569261.573:4985): pid=24584 uid=0 auid=0 ses=542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391569261.603:4986): avc: denied { read } for pid=24603 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391569261.603:4986): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3ffff8a79ed0 a2=84800 a3=0 items=0 ppid=24601 pid=24603 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=542 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391569261.613:4987): pid=24584 uid=0 auid=0 ses=542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391569261.613:4988): pid=24584 uid=0 auid=0 ses=542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391569801.623:4989): pid=25319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391569801.623:4990): pid=25319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391569801.623:4991): login pid=25319 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=543 >type=USER_START msg=audit(1391569801.633:4992): pid=25319 uid=0 auid=0 ses=543 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391569801.633:4993): pid=25319 uid=0 auid=0 ses=543 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391569801.943:4994): pid=25319 uid=0 auid=0 ses=543 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391569801.943:4995): pid=25319 uid=0 auid=0 ses=543 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391570701.954:4996): pid=26497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391570701.954:4997): pid=26497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391570701.964:4998): login pid=26497 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=544 >type=USER_START msg=audit(1391570701.964:4999): pid=26497 uid=0 auid=0 ses=544 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391570701.964:5000): pid=26497 uid=0 auid=0 ses=544 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391570702.104:5001): pid=26497 uid=0 auid=0 ses=544 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391570702.104:5002): pid=26497 uid=0 auid=0 ses=544 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391571601.114:5003): pid=27668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391571601.114:5004): pid=27668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391571601.114:5005): login pid=27668 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=545 >type=USER_START msg=audit(1391571601.124:5006): pid=27668 uid=0 auid=0 ses=545 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391571601.124:5007): pid=27668 uid=0 auid=0 ses=545 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391571601.644:5008): pid=27668 uid=0 auid=0 ses=545 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391571601.644:5009): pid=27668 uid=0 auid=0 ses=545 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391572501.655:5010): pid=28846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391572501.655:5011): pid=28846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391572501.655:5012): login pid=28846 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=546 >type=USER_START msg=audit(1391572501.665:5013): pid=28846 uid=0 auid=0 ses=546 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391572501.665:5014): pid=28846 uid=0 auid=0 ses=546 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391572501.795:5015): pid=28846 uid=0 auid=0 ses=546 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391572501.795:5016): pid=28846 uid=0 auid=0 ses=546 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391572861.805:5017): pid=29322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391572861.805:5018): pid=29322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391572861.805:5019): login pid=29322 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=547 >type=USER_START msg=audit(1391572861.805:5020): pid=29322 uid=0 auid=0 ses=547 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391572861.805:5021): pid=29322 uid=0 auid=0 ses=547 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391572861.825:5022): avc: denied { read } for pid=29341 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391572861.825:5022): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffc42b03f0 a2=84800 a3=0 items=0 ppid=29339 pid=29341 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=547 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391572861.835:5023): pid=29322 uid=0 auid=0 ses=547 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391572861.845:5024): pid=29322 uid=0 auid=0 ses=547 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391573401.845:5025): pid=30055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391573401.845:5026): pid=30055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391573401.845:5027): login pid=30055 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=548 >type=USER_START msg=audit(1391573401.845:5028): pid=30055 uid=0 auid=0 ses=548 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391573401.845:5029): pid=30055 uid=0 auid=0 ses=548 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391573402.175:5030): pid=30055 uid=0 auid=0 ses=548 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391573402.175:5031): pid=30055 uid=0 auid=0 ses=548 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391574301.186:5032): pid=31229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391574301.186:5033): pid=31229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391574301.186:5034): login pid=31229 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=549 >type=USER_START msg=audit(1391574301.196:5035): pid=31229 uid=0 auid=0 ses=549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391574301.196:5036): pid=31229 uid=0 auid=0 ses=549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391574301.326:5037): pid=31229 uid=0 auid=0 ses=549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391574301.326:5038): pid=31229 uid=0 auid=0 ses=549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391575201.346:5039): pid=32404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391575201.346:5040): pid=32404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391575201.346:5041): login pid=32404 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=550 >type=USER_START msg=audit(1391575201.346:5042): pid=32404 uid=0 auid=0 ses=550 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391575201.346:5043): pid=32404 uid=0 auid=0 ses=550 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391575201.666:5044): pid=32404 uid=0 auid=0 ses=550 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391575201.666:5045): pid=32404 uid=0 auid=0 ses=550 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391576101.677:5046): pid=33584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391576101.677:5047): pid=33584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391576101.677:5048): login pid=33584 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=551 >type=USER_START msg=audit(1391576101.687:5049): pid=33584 uid=0 auid=0 ses=551 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391576101.687:5050): pid=33584 uid=0 auid=0 ses=551 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391576101.817:5051): pid=33584 uid=0 auid=0 ses=551 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391576101.817:5052): pid=33584 uid=0 auid=0 ses=551 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391576461.827:5053): pid=34057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391576461.827:5054): pid=34057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391576461.827:5055): login pid=34057 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=552 >type=USER_START msg=audit(1391576461.827:5056): pid=34057 uid=0 auid=0 ses=552 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391576461.837:5057): pid=34057 uid=0 auid=0 ses=552 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391576461.857:5058): avc: denied { read } for pid=34076 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391576461.857:5058): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3ffff4b47e50 a2=84800 a3=0 items=0 ppid=34074 pid=34076 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=552 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391576461.867:5059): pid=34057 uid=0 auid=0 ses=552 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391576461.867:5060): pid=34057 uid=0 auid=0 ses=552 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391577001.877:5061): pid=34795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391577001.877:5062): pid=34795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391577001.877:5063): login pid=34795 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=553 >type=USER_START msg=audit(1391577001.887:5064): pid=34795 uid=0 auid=0 ses=553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391577001.887:5065): pid=34795 uid=0 auid=0 ses=553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391577002.207:5066): pid=34795 uid=0 auid=0 ses=553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391577002.207:5067): pid=34795 uid=0 auid=0 ses=553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391577901.218:5068): pid=36007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391577901.218:5069): pid=36007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391577901.218:5070): login pid=36007 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=554 >type=USER_START msg=audit(1391577901.228:5071): pid=36007 uid=0 auid=0 ses=554 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391577901.228:5072): pid=36007 uid=0 auid=0 ses=554 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391577901.238:5073): pid=36007 uid=0 auid=0 ses=554 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391577901.238:5074): pid=36007 uid=0 auid=0 ses=554 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391578801.249:5075): pid=37182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391578801.249:5076): pid=37182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391578801.249:5077): login pid=37182 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=555 >type=USER_START msg=audit(1391578801.249:5078): pid=37182 uid=0 auid=0 ses=555 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391578801.249:5079): pid=37182 uid=0 auid=0 ses=555 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391578801.259:5080): pid=37182 uid=0 auid=0 ses=555 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391578801.259:5081): pid=37182 uid=0 auid=0 ses=555 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391579701.269:5082): pid=38350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391579701.269:5083): pid=38350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391579701.269:5084): login pid=38350 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=556 >type=USER_START msg=audit(1391579701.279:5085): pid=38350 uid=0 auid=0 ses=556 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391579701.279:5086): pid=38350 uid=0 auid=0 ses=556 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391579701.279:5087): pid=38350 uid=0 auid=0 ses=556 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391579701.289:5088): pid=38350 uid=0 auid=0 ses=556 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391580061.289:5089): pid=38823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391580061.289:5090): pid=38823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391580061.289:5091): login pid=38823 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=557 >type=USER_START msg=audit(1391580061.299:5092): pid=38823 uid=0 auid=0 ses=557 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391580061.299:5093): pid=38823 uid=0 auid=0 ses=557 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391580061.309:5094): avc: denied { read } for pid=38839 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391580061.309:5094): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffd0e25f60 a2=84800 a3=0 items=0 ppid=38837 pid=38839 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=557 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391580061.329:5095): pid=38823 uid=0 auid=0 ses=557 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391580061.329:5096): pid=38823 uid=0 auid=0 ses=557 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391580601.340:5097): pid=39557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391580601.340:5098): pid=39557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391580601.340:5099): login pid=39557 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=558 >type=USER_START msg=audit(1391580601.350:5100): pid=39557 uid=0 auid=0 ses=558 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391580601.350:5101): pid=39557 uid=0 auid=0 ses=558 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391580601.350:5102): pid=39557 uid=0 auid=0 ses=558 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391580601.360:5103): pid=39557 uid=0 auid=0 ses=558 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391581501.370:5104): pid=40741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391581501.370:5105): pid=40741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391581501.370:5106): login pid=40741 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=559 >type=USER_START msg=audit(1391581501.370:5107): pid=40741 uid=0 auid=0 ses=559 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391581501.370:5108): pid=40741 uid=0 auid=0 ses=559 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391581501.380:5109): pid=40741 uid=0 auid=0 ses=559 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391581501.380:5110): pid=40741 uid=0 auid=0 ses=559 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391582401.391:5111): pid=41913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391582401.391:5112): pid=41913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391582401.391:5113): login pid=41913 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=560 >type=USER_START msg=audit(1391582401.391:5114): pid=41913 uid=0 auid=0 ses=560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391582401.391:5115): pid=41913 uid=0 auid=0 ses=560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391582401.401:5116): pid=41913 uid=0 auid=0 ses=560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391582401.401:5117): pid=41913 uid=0 auid=0 ses=560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391583301.411:5118): pid=43085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391583301.411:5119): pid=43085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391583301.411:5120): login pid=43085 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=561 >type=USER_START msg=audit(1391583301.421:5121): pid=43085 uid=0 auid=0 ses=561 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391583301.421:5122): pid=43085 uid=0 auid=0 ses=561 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391583301.421:5123): pid=43085 uid=0 auid=0 ses=561 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391583301.431:5124): pid=43085 uid=0 auid=0 ses=561 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391583661.431:5125): pid=43559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391583661.431:5126): pid=43559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391583661.431:5127): login pid=43559 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=562 >type=USER_START msg=audit(1391583661.441:5128): pid=43559 uid=0 auid=0 ses=562 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391583661.441:5129): pid=43559 uid=0 auid=0 ses=562 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391583661.471:5130): pid=43559 uid=0 auid=0 ses=562 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391583661.471:5131): pid=43559 uid=0 auid=0 ses=562 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391584201.482:5132): pid=44288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391584201.482:5133): pid=44288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391584201.482:5134): login pid=44288 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=563 >type=USER_START msg=audit(1391584201.482:5135): pid=44288 uid=0 auid=0 ses=563 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391584201.482:5136): pid=44288 uid=0 auid=0 ses=563 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391584201.492:5137): pid=44288 uid=0 auid=0 ses=563 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391584201.492:5138): pid=44288 uid=0 auid=0 ses=563 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391585101.502:5139): pid=45463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391585101.502:5140): pid=45463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391585101.502:5141): login pid=45463 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=564 >type=USER_START msg=audit(1391585101.502:5142): pid=45463 uid=0 auid=0 ses=564 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391585101.502:5143): pid=45463 uid=0 auid=0 ses=564 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391585101.512:5144): pid=45463 uid=0 auid=0 ses=564 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391585101.512:5145): pid=45463 uid=0 auid=0 ses=564 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391586001.523:5146): pid=46642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391586001.523:5147): pid=46642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391586001.523:5148): login pid=46642 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=565 >type=USER_START msg=audit(1391586001.533:5149): pid=46642 uid=0 auid=0 ses=565 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391586001.533:5150): pid=46642 uid=0 auid=0 ses=565 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391586001.533:5151): pid=46642 uid=0 auid=0 ses=565 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391586001.533:5152): pid=46642 uid=0 auid=0 ses=565 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391586901.543:5153): pid=47828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391586901.543:5154): pid=47828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391586901.553:5155): login pid=47828 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=566 >type=USER_START msg=audit(1391586901.553:5156): pid=47828 uid=0 auid=0 ses=566 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391586901.553:5157): pid=47828 uid=0 auid=0 ses=566 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391586901.563:5158): pid=47828 uid=0 auid=0 ses=566 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391586901.563:5159): pid=47828 uid=0 auid=0 ses=566 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391587261.564:5160): pid=48299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391587261.564:5161): pid=48299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391587261.574:5162): login pid=48299 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=567 >type=USER_START msg=audit(1391587261.574:5163): pid=48299 uid=0 auid=0 ses=567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391587261.574:5164): pid=48299 uid=0 auid=0 ses=567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391587261.594:5165): avc: denied { read } for pid=48315 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391587261.594:5165): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffc9964230 a2=84800 a3=0 items=0 ppid=48313 pid=48315 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=567 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391587261.614:5166): pid=48299 uid=0 auid=0 ses=567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391587261.614:5167): pid=48299 uid=0 auid=0 ses=567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391587801.624:5168): pid=49029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391587801.624:5169): pid=49029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391587801.624:5170): login pid=49029 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=568 >type=USER_START msg=audit(1391587801.634:5171): pid=49029 uid=0 auid=0 ses=568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391587801.634:5172): pid=49029 uid=0 auid=0 ses=568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391587801.634:5173): pid=49029 uid=0 auid=0 ses=568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391587801.644:5174): pid=49029 uid=0 auid=0 ses=568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391588701.654:5175): pid=50199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391588701.654:5176): pid=50199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391588701.654:5177): login pid=50199 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=569 >type=USER_START msg=audit(1391588701.654:5178): pid=50199 uid=0 auid=0 ses=569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391588701.654:5179): pid=50199 uid=0 auid=0 ses=569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391588701.664:5180): pid=50199 uid=0 auid=0 ses=569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391588701.664:5181): pid=50199 uid=0 auid=0 ses=569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391589601.675:5182): pid=51372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391589601.675:5183): pid=51372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391589601.675:5184): login pid=51372 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=570 >type=USER_START msg=audit(1391589601.675:5185): pid=51372 uid=0 auid=0 ses=570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391589601.675:5186): pid=51372 uid=0 auid=0 ses=570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391589601.685:5187): pid=51372 uid=0 auid=0 ses=570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391589601.685:5188): pid=51372 uid=0 auid=0 ses=570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391590501.685:5189): pid=52543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391590501.685:5190): pid=52543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391590501.685:5191): login pid=52543 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=571 >type=USER_START msg=audit(1391590501.685:5192): pid=52543 uid=0 auid=0 ses=571 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391590501.685:5193): pid=52543 uid=0 auid=0 ses=571 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391590501.695:5194): pid=52543 uid=0 auid=0 ses=571 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391590501.695:5195): pid=52543 uid=0 auid=0 ses=571 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391590861.706:5196): pid=53014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391590861.706:5197): pid=53014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391590861.706:5198): login pid=53014 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=572 >type=USER_START msg=audit(1391590861.706:5199): pid=53014 uid=0 auid=0 ses=572 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391590861.706:5200): pid=53014 uid=0 auid=0 ses=572 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391590861.736:5201): pid=53014 uid=0 auid=0 ses=572 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391590861.736:5202): pid=53014 uid=0 auid=0 ses=572 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391591401.746:5203): pid=53740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391591401.746:5204): pid=53740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391591401.746:5205): login pid=53740 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=573 >type=USER_START msg=audit(1391591401.746:5206): pid=53740 uid=0 auid=0 ses=573 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391591401.746:5207): pid=53740 uid=0 auid=0 ses=573 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391591401.756:5208): pid=53740 uid=0 auid=0 ses=573 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391591401.756:5209): pid=53740 uid=0 auid=0 ses=573 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391592301.767:5210): pid=54918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391592301.767:5211): pid=54918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391592301.767:5212): login pid=54918 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=574 >type=USER_START msg=audit(1391592301.767:5213): pid=54918 uid=0 auid=0 ses=574 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391592301.767:5214): pid=54918 uid=0 auid=0 ses=574 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391592302.177:5215): pid=54918 uid=0 auid=0 ses=574 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391592302.177:5216): pid=54918 uid=0 auid=0 ses=574 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391593201.187:5217): pid=56122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391593201.187:5218): pid=56122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391593201.187:5219): login pid=56122 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=575 >type=USER_START msg=audit(1391593201.187:5220): pid=56122 uid=0 auid=0 ses=575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391593201.197:5221): pid=56122 uid=0 auid=0 ses=575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391593201.327:5222): pid=56122 uid=0 auid=0 ses=575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391593201.327:5223): pid=56122 uid=0 auid=0 ses=575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391594101.338:5224): pid=57299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391594101.338:5225): pid=57299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391594101.338:5226): login pid=57299 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=576 >type=USER_START msg=audit(1391594101.338:5227): pid=57299 uid=0 auid=0 ses=576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391594101.338:5228): pid=57299 uid=0 auid=0 ses=576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391594101.668:5229): pid=57299 uid=0 auid=0 ses=576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391594101.668:5230): pid=57299 uid=0 auid=0 ses=576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391594461.678:5231): pid=57774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391594461.678:5232): pid=57774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391594461.678:5233): login pid=57774 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=577 >type=USER_START msg=audit(1391594461.688:5234): pid=57774 uid=0 auid=0 ses=577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391594461.688:5235): pid=57774 uid=0 auid=0 ses=577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391594461.698:5236): avc: denied { read } for pid=57790 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391594461.698:5236): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffea0d8e10 a2=84800 a3=0 items=0 ppid=57788 pid=57790 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=577 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391594465.508:5237): pid=57774 uid=0 auid=0 ses=577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391594465.508:5238): pid=57774 uid=0 auid=0 ses=577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391595001.518:5239): pid=58504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391595001.518:5240): pid=58504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391595001.518:5241): login pid=58504 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=578 >type=USER_START msg=audit(1391595001.518:5242): pid=58504 uid=0 auid=0 ses=578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391595001.518:5243): pid=58504 uid=0 auid=0 ses=578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391595001.648:5244): pid=58504 uid=0 auid=0 ses=578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391595001.648:5245): pid=58504 uid=0 auid=0 ses=578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391595901.669:5246): pid=59679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391595901.669:5247): pid=59679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391595901.669:5248): login pid=59679 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=579 >type=USER_START msg=audit(1391595901.669:5249): pid=59679 uid=0 auid=0 ses=579 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391595901.669:5250): pid=59679 uid=0 auid=0 ses=579 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391595902.049:5251): pid=59679 uid=0 auid=0 ses=579 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391595902.049:5252): pid=59679 uid=0 auid=0 ses=579 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391596801.059:5253): pid=60853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391596801.059:5254): pid=60853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391596801.059:5255): login pid=60853 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=580 >type=USER_START msg=audit(1391596801.069:5256): pid=60853 uid=0 auid=0 ses=580 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391596801.069:5257): pid=60853 uid=0 auid=0 ses=580 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391596801.199:5258): pid=60853 uid=0 auid=0 ses=580 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391596801.209:5259): pid=60853 uid=0 auid=0 ses=580 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391597701.220:5260): pid=62030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391597701.220:5261): pid=62030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391597701.220:5262): login pid=62030 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=581 >type=USER_START msg=audit(1391597701.220:5263): pid=62030 uid=0 auid=0 ses=581 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391597701.220:5264): pid=62030 uid=0 auid=0 ses=581 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391597701.600:5265): pid=62030 uid=0 auid=0 ses=581 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391597701.600:5266): pid=62030 uid=0 auid=0 ses=581 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391598061.610:5267): pid=62506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391598061.610:5268): pid=62506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391598061.610:5269): login pid=62506 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=582 >type=USER_START msg=audit(1391598061.610:5270): pid=62506 uid=0 auid=0 ses=582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391598061.610:5271): pid=62506 uid=0 auid=0 ses=582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391598061.630:5272): avc: denied { read } for pid=62522 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391598061.630:5272): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffe00234c0 a2=84800 a3=0 items=0 ppid=62520 pid=62522 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=582 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391598061.650:5273): pid=62506 uid=0 auid=0 ses=582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391598061.650:5274): pid=62506 uid=0 auid=0 ses=582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391598601.660:5275): pid=63235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391598601.660:5276): pid=63235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391598601.660:5277): login pid=63235 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=583 >type=USER_START msg=audit(1391598601.670:5278): pid=63235 uid=0 auid=0 ses=583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391598601.670:5279): pid=63235 uid=0 auid=0 ses=583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391598601.800:5280): pid=63235 uid=0 auid=0 ses=583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391598601.800:5281): pid=63235 uid=0 auid=0 ses=583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391599501.811:5282): pid=64084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391599501.811:5283): pid=64084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391599501.811:5284): login pid=64084 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=584 >type=USER_START msg=audit(1391599501.821:5285): pid=64084 uid=0 auid=0 ses=584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391599501.821:5286): pid=64084 uid=0 auid=0 ses=584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391599502.131:5287): pid=64084 uid=0 auid=0 ses=584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391599502.131:5288): pid=64084 uid=0 auid=0 ses=584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391600401.141:5289): pid=64728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391600401.141:5290): pid=64728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391600401.141:5291): login pid=64728 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=585 >type=USER_START msg=audit(1391600401.151:5292): pid=64728 uid=0 auid=0 ses=585 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391600401.151:5293): pid=64728 uid=0 auid=0 ses=585 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391600401.331:5294): pid=64728 uid=0 auid=0 ses=585 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391600401.331:5295): pid=64728 uid=0 auid=0 ses=585 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391601301.352:5296): pid=396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391601301.352:5297): pid=396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391601301.352:5298): login pid=396 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=586 >type=USER_START msg=audit(1391601301.352:5299): pid=396 uid=0 auid=0 ses=586 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391601301.352:5300): pid=396 uid=0 auid=0 ses=586 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391601301.672:5301): pid=396 uid=0 auid=0 ses=586 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391601301.682:5302): pid=396 uid=0 auid=0 ses=586 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391601661.692:5303): pid=694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391601661.692:5304): pid=694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391601661.692:5305): login pid=694 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=587 >type=USER_START msg=audit(1391601661.692:5306): pid=694 uid=0 auid=0 ses=587 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391601661.692:5307): pid=694 uid=0 auid=0 ses=587 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391601661.712:5308): avc: denied { read } for pid=710 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391601661.712:5308): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffeb5980a0 a2=84800 a3=0 items=0 ppid=708 pid=710 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=587 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391601661.732:5309): pid=694 uid=0 auid=0 ses=587 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391601661.732:5310): pid=694 uid=0 auid=0 ses=587 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391602201.742:5311): pid=1146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391602201.742:5312): pid=1146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391602201.742:5313): login pid=1146 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=588 >type=USER_START msg=audit(1391602201.752:5314): pid=1146 uid=0 auid=0 ses=588 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391602201.752:5315): pid=1146 uid=0 auid=0 ses=588 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391602201.882:5316): pid=1146 uid=0 auid=0 ses=588 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391602201.882:5317): pid=1146 uid=0 auid=0 ses=588 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391603101.903:5318): pid=1801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391603101.903:5319): pid=1801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391603101.903:5320): login pid=1801 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=589 >type=USER_START msg=audit(1391603101.903:5321): pid=1801 uid=0 auid=0 ses=589 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391603101.903:5322): pid=1801 uid=0 auid=0 ses=589 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391603102.223:5323): pid=1801 uid=0 auid=0 ses=589 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391603102.223:5324): pid=1801 uid=0 auid=0 ses=589 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391604001.233:5325): pid=2460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391604001.233:5326): pid=2460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391604001.233:5327): login pid=2460 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=590 >type=USER_START msg=audit(1391604001.243:5328): pid=2460 uid=0 auid=0 ses=590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391604001.243:5329): pid=2460 uid=0 auid=0 ses=590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391604001.433:5330): pid=2460 uid=0 auid=0 ses=590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391604001.433:5331): pid=2460 uid=0 auid=0 ses=590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391604901.444:5332): pid=3102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391604901.444:5333): pid=3102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391604901.444:5334): login pid=3102 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=591 >type=USER_START msg=audit(1391604901.454:5335): pid=3102 uid=0 auid=0 ses=591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391604901.454:5336): pid=3102 uid=0 auid=0 ses=591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391604901.874:5337): pid=3102 uid=0 auid=0 ses=591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391604901.874:5338): pid=3102 uid=0 auid=0 ses=591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=MAC_POLICY_LOAD msg=audit(1391605120.864:5339): policy loaded auid=0 ses=2 >type=SYSCALL msg=audit(1391605120.864:5339): arch=80000015 syscall=4 success=yes exit=6373906 a0=4 a1=1ffff86c0010 a2=614212 a3=10 items=0 ppid=3323 pid=3346 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=2 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_CMD msg=audit(1391605259.474:5340): pid=4097 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/var/lib/iscsi/send_targets" cmd=726D202D722031302E31302E32372E36382C333236302F terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391605259.484:5341): pid=4097 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391605259.484:5342): pid=4097 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391605259.484:5343): pid=4097 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391605259.484:5344): pid=4097 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_ACCT msg=audit(1391605261.894:5345): pid=4100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391605261.894:5346): pid=4100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391605261.894:5347): login pid=4100 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=592 >type=USER_START msg=audit(1391605261.894:5348): pid=4100 uid=0 auid=0 ses=592 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391605261.894:5349): pid=4100 uid=0 auid=0 ses=592 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391605261.914:5350): avc: denied { read } for pid=4116 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391605261.914:5350): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffdf812ce0 a2=84800 a3=0 items=0 ppid=4114 pid=4116 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=592 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391605261.934:5351): pid=4100 uid=0 auid=0 ses=592 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391605261.934:5352): pid=4100 uid=0 auid=0 ses=592 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391605262.634:5353): pid=4136 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/var/lib/iscsi/send_targets" cmd=726D202D722031302E31302E32372E3135322C333236302F terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391605262.634:5354): pid=4136 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391605262.644:5355): pid=4136 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391605262.644:5356): pid=4136 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391605262.644:5357): pid=4136 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_ACCT msg=audit(1391605801.945:5358): pid=4519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391605801.945:5359): pid=4519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391605801.945:5360): login pid=4519 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=593 >type=USER_START msg=audit(1391605801.955:5361): pid=4519 uid=0 auid=0 ses=593 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391605801.955:5362): pid=4519 uid=0 auid=0 ses=593 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391605802.085:5363): pid=4519 uid=0 auid=0 ses=593 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391605802.085:5364): pid=4519 uid=0 auid=0 ses=593 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391606701.095:5365): pid=5162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391606701.095:5366): pid=5162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391606701.105:5367): login pid=5162 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=594 >type=USER_START msg=audit(1391606701.105:5368): pid=5162 uid=0 auid=0 ses=594 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391606701.105:5369): pid=5162 uid=0 auid=0 ses=594 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391606701.445:5370): pid=5162 uid=0 auid=0 ses=594 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391606701.445:5371): pid=5162 uid=0 auid=0 ses=594 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391607601.446:5372): pid=5805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391607601.446:5373): pid=5805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391607601.446:5374): login pid=5805 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=595 >type=USER_START msg=audit(1391607601.456:5375): pid=5805 uid=0 auid=0 ses=595 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391607601.456:5376): pid=5805 uid=0 auid=0 ses=595 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391607601.646:5377): pid=5805 uid=0 auid=0 ses=595 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391607601.646:5378): pid=5805 uid=0 auid=0 ses=595 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391608501.666:5379): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391608501.666:5380): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391608501.666:5381): login pid=6449 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=596 >type=USER_START msg=audit(1391608501.666:5382): pid=6449 uid=0 auid=0 ses=596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391608501.666:5383): pid=6449 uid=0 auid=0 ses=596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391608501.986:5384): pid=6449 uid=0 auid=0 ses=596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391608501.986:5385): pid=6449 uid=0 auid=0 ses=596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391608861.996:5386): pid=6711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391608861.996:5387): pid=6711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391608861.996:5388): login pid=6711 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=597 >type=USER_START msg=audit(1391608861.996:5389): pid=6711 uid=0 auid=0 ses=597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391608861.996:5390): pid=6711 uid=0 auid=0 ses=597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391608862.016:5391): avc: denied { read } for pid=6727 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391608862.016:5391): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffdb76fd90 a2=84800 a3=0 items=0 ppid=6725 pid=6727 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=597 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391608862.036:5392): pid=6711 uid=0 auid=0 ses=597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391608862.036:5393): pid=6711 uid=0 auid=0 ses=597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391609401.047:5394): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391609401.047:5395): pid=7122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391609401.047:5396): login pid=7122 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=598 >type=USER_START msg=audit(1391609401.047:5397): pid=7122 uid=0 auid=0 ses=598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391609401.047:5398): pid=7122 uid=0 auid=0 ses=598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391609401.237:5399): pid=7122 uid=0 auid=0 ses=598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391609401.247:5400): pid=7122 uid=0 auid=0 ses=598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391610301.257:5401): pid=7764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391610301.257:5402): pid=7764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391610301.257:5403): login pid=7764 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=599 >type=USER_START msg=audit(1391610301.257:5404): pid=7764 uid=0 auid=0 ses=599 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391610301.257:5405): pid=7764 uid=0 auid=0 ses=599 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391610301.647:5406): pid=7764 uid=0 auid=0 ses=599 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391610301.647:5407): pid=7764 uid=0 auid=0 ses=599 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_STOP msg=audit(1391610945.348:5408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1391610945.448:5409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391610945.448:5410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391610947.158:5411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610947.398:5412): pid=8420 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D70695435314F49 terminal=? res=success' >type=CRED_ACQ msg=audit(1391610947.398:5413): pid=8420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610947.398:5414): pid=8420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610947.398:5415): pid=8420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610947.398:5416): pid=8420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610947.858:5417): pid=8440 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1391610947.858:5418): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610947.858:5419): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610947.868:5420): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610947.868:5421): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610947.928:5422): pid=8444 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391610947.928:5423): pid=8444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610947.928:5424): pid=8444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610947.928:5425): pid=8444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610947.928:5426): pid=8444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610947.948:5427): pid=8451 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391610947.948:5428): pid=8451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610947.948:5429): pid=8451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610947.988:5430): pid=8451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610947.988:5431): pid=8451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610948.178:5432): pid=8488 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20707673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C73697A652C76675F6E616D652C76675F757569642C70655F73' >type=CRED_ACQ msg=audit(1391610948.178:5433): pid=8488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610948.178:5434): pid=8488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610948.198:5435): pid=8488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610948.198:5436): pid=8488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610948.238:5437): pid=8491 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391610948.238:5438): pid=8491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610948.238:5439): pid=8491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610948.248:5440): pid=8491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610948.248:5441): pid=8491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610948.278:5442): pid=8494 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391610948.278:5443): pid=8494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610948.278:5444): pid=8494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610948.288:5445): pid=8494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610948.288:5446): pid=8494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610948.308:5447): pid=8497 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391610948.308:5448): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610948.308:5449): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610948.318:5450): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610948.318:5451): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610949.278:5452): pid=8511 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391610949.278:5453): pid=8511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610949.278:5454): pid=8511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610949.288:5455): pid=8511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610949.288:5456): pid=8511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610949.298:5457): pid=8513 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391610949.298:5458): pid=8513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610949.298:5459): pid=8513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610949.328:5460): pid=8513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610949.328:5461): pid=8513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610949.348:5462): pid=8535 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391610949.348:5463): pid=8535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610949.348:5464): pid=8535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610949.358:5465): pid=8535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610949.358:5466): pid=8535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610954.828:5467): pid=8549 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391610954.828:5468): pid=8549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610954.828:5469): pid=8549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610954.828:5470): pid=8549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610954.828:5471): pid=8549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610954.848:5472): pid=8551 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391610954.848:5473): pid=8551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610954.848:5474): pid=8551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610954.868:5475): pid=8551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610954.868:5476): pid=8551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610954.888:5477): pid=8576 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391610954.888:5478): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610954.888:5479): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610954.898:5480): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610954.898:5481): pid=8576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610965.028:5482): pid=8597 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391610965.028:5483): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610965.028:5484): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610965.028:5485): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610965.028:5486): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610965.038:5487): pid=8599 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391610965.038:5488): pid=8599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610965.038:5489): pid=8599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610965.068:5490): pid=8599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610965.068:5491): pid=8599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610965.088:5492): pid=8625 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391610965.088:5493): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610965.088:5494): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610965.098:5495): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610965.098:5496): pid=8625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610975.238:5497): pid=8644 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391610975.238:5498): pid=8644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610975.238:5499): pid=8644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610975.238:5500): pid=8644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610975.238:5501): pid=8644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610975.248:5502): pid=8646 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391610975.248:5503): pid=8646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610975.248:5504): pid=8646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610975.288:5505): pid=8646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610975.288:5506): pid=8646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610975.308:5507): pid=8671 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391610975.308:5508): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610975.308:5509): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610975.308:5510): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610975.308:5511): pid=8671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610985.448:5512): pid=8689 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391610985.448:5513): pid=8689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610985.448:5514): pid=8689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610985.448:5515): pid=8689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610985.448:5516): pid=8689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610985.458:5517): pid=8691 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391610985.458:5518): pid=8691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610985.458:5519): pid=8691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610985.488:5520): pid=8691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610985.488:5521): pid=8691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610985.508:5522): pid=8717 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391610985.508:5523): pid=8717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610985.508:5524): pid=8717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610985.518:5525): pid=8717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610985.518:5526): pid=8717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610995.638:5527): pid=8735 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391610995.638:5528): pid=8735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610995.638:5529): pid=8735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610995.638:5530): pid=8735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610995.638:5531): pid=8735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610995.648:5532): pid=8737 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391610995.648:5533): pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610995.648:5534): pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610995.678:5535): pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610995.678:5536): pid=8737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391610995.698:5537): pid=8761 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391610995.698:5538): pid=8761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391610995.698:5539): pid=8761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391610995.708:5540): pid=8761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391610995.708:5541): pid=8761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611085.588:5542): pid=8823 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=7669727368206C697374 terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391611085.588:5543): pid=8823 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391611085.588:5544): pid=8823 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391611085.608:5545): pid=8823 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391611085.608:5546): pid=8823 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=ANOM_PROMISCUOUS msg=audit(1391611089.448:5547): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1391611089.748:5548): pid=40066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=stop reason=destroyed vm="ppcvm" uuid=588834f2-8674-433a-a934-4064192c99d8 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611094.318:5549): pid=8967 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=756D6F756E74202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391611094.318:5550): pid=8967 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391611094.318:5551): pid=8967 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391611094.328:5552): pid=8967 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391611094.328:5553): pid=8967 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1391611098.358:5554): pid=8970 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F70207664736D64 terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391611098.358:5555): pid=8970 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391611098.358:5556): pid=8970 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_AVC msg=audit(1391611098.368:5557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=2) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=SERVICE_STOP msg=audit(1391611103.688:5558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611103.688:5559): pid=8970 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391611103.688:5560): pid=8970 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1391611106.778:5561): pid=8980 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F702073616E6C6F636B terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391611106.778:5562): pid=8980 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391611106.778:5563): pid=8980 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391611117.228:5564): pid=8980 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391611117.228:5565): pid=8980 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_STOP msg=audit(1391611128.138:5566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sanlock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_CMD msg=audit(1391611129.338:5567): pid=9007 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F702073616E6C6F636B terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391611129.338:5568): pid=9007 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391611129.338:5569): pid=9007 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391611129.338:5570): pid=9007 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391611129.338:5571): pid=9007 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1391611132.008:5572): pid=9010 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=756D6F756E74202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391611132.008:5573): pid=9010 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391611132.008:5574): pid=9010 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391611132.068:5575): pid=9010 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391611132.068:5576): pid=9010 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1391611137.128:5577): pid=9015 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746172742073616E6C6F636B terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391611137.128:5578): pid=9015 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391611137.128:5579): pid=9015 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1391611137.178:5580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sanlock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611137.178:5581): pid=9015 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391611137.178:5582): pid=9015 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1391611140.648:5583): pid=9031 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C207374617274207664736D64 terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391611140.648:5584): pid=9031 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391611140.648:5585): pid=9031 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1391611142.298:5586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611142.308:5587): pid=9031 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391611142.308:5588): pid=9031 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1391611142.558:5589): pid=9104 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D70506E4E4F7730 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611142.558:5590): pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611142.558:5591): pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611142.568:5592): pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611142.568:5593): pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611143.408:5594): pid=9125 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611143.408:5595): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611143.408:5596): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611143.408:5597): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611143.408:5598): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611143.468:5599): pid=9129 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611143.468:5600): pid=9129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611143.468:5601): pid=9129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611143.468:5602): pid=9129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611143.468:5603): pid=9129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611143.498:5604): pid=9139 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611143.498:5605): pid=9139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611143.508:5606): pid=9139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611143.538:5607): pid=9139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611143.538:5608): pid=9139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611143.898:5609): pid=9173 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391611143.898:5610): pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611143.898:5611): pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611143.918:5612): pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611143.918:5613): pid=9173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611143.928:5614): pid=9176 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391611143.928:5615): pid=9176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611143.928:5616): pid=9176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611143.938:5617): pid=9176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611143.938:5618): pid=9176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611143.948:5619): pid=9179 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391611143.948:5620): pid=9179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611143.948:5621): pid=9179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611143.958:5622): pid=9179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611143.958:5623): pid=9179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611143.968:5624): pid=9182 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391611143.968:5625): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611143.968:5626): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611143.978:5627): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611143.978:5628): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391611201.658:5629): pid=9209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391611201.658:5630): pid=9209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391611201.668:5631): login pid=9209 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=600 >type=USER_START msg=audit(1391611201.668:5632): pid=9209 uid=0 auid=0 ses=600 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391611201.668:5633): pid=9209 uid=0 auid=0 ses=600 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391611201.798:5634): pid=9209 uid=0 auid=0 ses=600 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391611201.798:5635): pid=9209 uid=0 auid=0 ses=600 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391611321.588:5636): pid=9282 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D332031302E31302E32372E36383A2F73746F72616765202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611321.588:5637): pid=9282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611321.588:5638): pid=9282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611321.628:5639): pid=9282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611321.628:5640): pid=9282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611322.238:5641): pid=9296 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611322.238:5642): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611322.238:5643): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611322.238:5644): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611322.238:5645): pid=9296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611322.258:5646): pid=9298 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611322.258:5647): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611322.258:5648): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611322.288:5649): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611322.288:5650): pid=9298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611322.308:5651): pid=9323 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391611322.308:5652): pid=9323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611322.308:5653): pid=9323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611322.318:5654): pid=9323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611322.318:5655): pid=9323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611323.258:5656): pid=9335 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F756D6F756E74202D66202D6C202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611323.268:5657): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611323.268:5658): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611323.328:5659): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611323.328:5660): pid=9335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611323.338:5661): pid=9338 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611323.338:5662): pid=9338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611323.338:5663): pid=9338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611323.338:5664): pid=9338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611323.338:5665): pid=9338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611323.348:5666): pid=9340 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611323.348:5667): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611323.348:5668): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611323.378:5669): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611323.378:5670): pid=9340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611324.218:5671): pid=9362 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D332031302E31302E32372E36383A2F73746F72616765202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611324.218:5672): pid=9362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611324.218:5673): pid=9362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611324.228:5674): pid=9362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611324.228:5675): pid=9362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611324.278:5676): pid=9369 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611324.278:5677): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611324.278:5678): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611324.278:5679): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611324.278:5680): pid=9369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611324.288:5681): pid=9371 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611324.288:5682): pid=9371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611324.288:5683): pid=9371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611324.338:5684): pid=9371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611324.338:5685): pid=9371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611345.548:5686): pid=9414 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391611345.548:5687): pid=9414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611345.548:5688): pid=9414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611345.558:5689): pid=9414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611345.558:5690): pid=9414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611349.548:5691): pid=9424 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611349.548:5692): pid=9424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611349.558:5693): pid=9424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611349.558:5694): pid=9424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611349.558:5695): pid=9424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611349.568:5696): pid=9426 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611349.568:5697): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611349.568:5698): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611349.598:5699): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611349.598:5700): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611349.708:5701): pid=9454 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A' >type=CRED_ACQ msg=audit(1391611349.708:5702): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611349.708:5703): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611349.718:5704): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611349.718:5705): pid=9454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611371.228:5706): pid=9508 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611371.228:5707): pid=9508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611371.228:5708): pid=9508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611371.238:5709): pid=9508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611371.238:5710): pid=9508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611371.248:5711): pid=9510 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611371.248:5712): pid=9510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611371.248:5713): pid=9510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611371.288:5714): pid=9510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611371.288:5715): pid=9510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611371.328:5716): pid=9535 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391611371.328:5717): pid=9535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611371.328:5718): pid=9535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611371.338:5719): pid=9535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611371.338:5720): pid=9535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611773.518:5721): pid=9980 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611773.518:5722): pid=9980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611773.518:5723): pid=9980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611773.528:5724): pid=9980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611773.528:5725): pid=9980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611773.538:5726): pid=9982 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611773.538:5727): pid=9982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611773.538:5728): pid=9982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611773.568:5729): pid=9982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611773.568:5730): pid=9982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611773.578:5731): pid=10009 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391611773.578:5732): pid=10009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611773.578:5733): pid=10009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611773.588:5734): pid=10009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611773.588:5735): pid=10009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611773.618:5736): pid=10016 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_ACQ msg=audit(1391611773.618:5737): pid=10016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611773.618:5738): pid=10016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611773.638:5739): pid=10016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611773.638:5740): pid=10016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611792.808:5741): pid=10044 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D6E6577 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611792.808:5742): pid=10044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611792.808:5743): pid=10044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391611792.808:5744): avc: denied { write } for pid=10045 comm="iscsiadm" name="send_targets" dev="dm-1" ino=2628798 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391611792.808:5744): avc: denied { add_name } for pid=10045 comm="iscsiadm" name="10.10.27.68,3260" scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391611792.808:5744): avc: denied { create } for pid=10045 comm="iscsiadm" name="10.10.27.68,3260" scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=SYSCALL msg=audit(1391611792.808:5744): arch=80000015 syscall=39 success=yes exit=0 a0=10026e92450 a1=1b0 a2=3fffcbc57f30 a3=0 items=0 ppid=10044 pid=10045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=AVC msg=audit(1391611792.808:5745): avc: denied { create } for pid=10045 comm="iscsiadm" name="st_config" scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=AVC msg=audit(1391611792.808:5745): avc: denied { write } for pid=10045 comm="iscsiadm" path="/var/lib/iscsi/send_targets/10.10.27.68,3260/st_config" dev="dm-1" ino=2628863 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=SYSCALL msg=audit(1391611792.808:5745): arch=80000015 syscall=5 success=yes exit=3 a0=10026e92450 a1=241 a2=1b6 a3=1 items=0 ppid=10044 pid=10045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1391611792.808:5746): pid=10044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611792.808:5747): pid=10044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611792.828:5748): pid=10046 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E617574686D6574686F64202D762043484150202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611792.828:5749): pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611792.828:5750): pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611792.828:5751): pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611792.828:5752): pid=10046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611792.848:5753): pid=10050 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E757365726E616D65202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611792.848:5754): pid=10050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611792.848:5755): pid=10050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611792.848:5756): pid=10050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611792.848:5757): pid=10050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611792.858:5758): pid=10052 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E70617373776F7264202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611792.858:5759): pid=10052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611792.858:5760): pid=10052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611792.858:5761): pid=10052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611792.858:5762): pid=10052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611792.868:5763): pid=10054 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D646973636F766572 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611792.878:5764): pid=10054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611792.878:5765): pid=10054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611797.878:5766): pid=10054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611797.878:5767): pid=10054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611797.898:5768): pid=10070 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611797.898:5769): pid=10070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611797.898:5770): pid=10070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611797.898:5771): pid=10070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611797.898:5772): pid=10070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611797.908:5773): pid=10072 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D64656C657465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611797.908:5774): pid=10072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611797.918:5775): pid=10072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391611797.918:5776): avc: denied { remove_name } for pid=10073 comm="iscsiadm" name="st_config" dev="dm-1" ino=2628863 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391611797.918:5776): avc: denied { unlink } for pid=10073 comm="iscsiadm" name="st_config" dev="dm-1" ino=2628863 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=SYSCALL msg=audit(1391611797.918:5776): arch=80000015 syscall=10 success=yes exit=0 a0=10016632450 a1=44eddd4b a2=1000 a3=0 items=0 ppid=10072 pid=10073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=AVC msg=audit(1391611797.918:5777): avc: denied { rmdir } for pid=10073 comm="iscsiadm" name="10.10.27.68,3260" dev="dm-1" ino=2623370 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=SYSCALL msg=audit(1391611797.918:5777): arch=80000015 syscall=40 success=yes exit=0 a0=10016632450 a1=44edde78 a2=0 a3=0 items=0 ppid=10072 pid=10073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1391611797.918:5778): pid=10072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611797.918:5779): pid=10072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611930.758:5780): pid=10251 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D6E6577 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611930.758:5781): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611930.758:5782): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611930.758:5783): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611930.758:5784): pid=10251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611930.778:5785): pid=10253 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E617574686D6574686F64202D762043484150202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611930.778:5786): pid=10253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611930.778:5787): pid=10253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611930.778:5788): pid=10253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611930.778:5789): pid=10253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611930.788:5790): pid=10255 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E757365726E616D65202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611930.788:5791): pid=10255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611930.788:5792): pid=10255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611930.788:5793): pid=10255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611930.788:5794): pid=10255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611930.808:5795): pid=10257 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E70617373776F7264202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611930.808:5796): pid=10257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611930.808:5797): pid=10257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611930.808:5798): pid=10257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611930.808:5799): pid=10257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611930.818:5800): pid=10259 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D646973636F766572 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611930.818:5801): pid=10259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611930.818:5802): pid=10259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611935.828:5803): pid=10259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611935.828:5804): pid=10259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611935.838:5805): pid=10269 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611935.838:5806): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611935.838:5807): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611935.848:5808): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611935.848:5809): pid=10269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611935.858:5810): pid=10271 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D64656C657465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611935.858:5811): pid=10271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611935.858:5812): pid=10271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611935.858:5813): pid=10271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611935.858:5814): pid=10271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611993.738:5815): pid=10337 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D6E6577 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611993.738:5816): pid=10337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611993.738:5817): pid=10337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611993.738:5818): pid=10337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611993.738:5819): pid=10337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611993.748:5820): pid=10339 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E617574686D6574686F64202D762043484150202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611993.748:5821): pid=10339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611993.748:5822): pid=10339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611993.748:5823): pid=10339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611993.748:5824): pid=10339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611993.768:5825): pid=10341 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E757365726E616D65202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611993.768:5826): pid=10341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611993.768:5827): pid=10341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611993.768:5828): pid=10341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611993.768:5829): pid=10341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611993.778:5830): pid=10343 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E70617373776F7264202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611993.778:5831): pid=10343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611993.778:5832): pid=10343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611993.778:5833): pid=10343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611993.778:5834): pid=10343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611993.798:5835): pid=10345 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D646973636F766572 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611993.798:5836): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611993.798:5837): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611998.798:5838): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611998.798:5839): pid=10345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611998.818:5840): pid=10353 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611998.818:5841): pid=10353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611998.818:5842): pid=10353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611998.818:5843): pid=10353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611998.818:5844): pid=10353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391611998.828:5845): pid=10355 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D64656C657465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391611998.828:5846): pid=10355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391611998.828:5847): pid=10355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391611998.838:5848): pid=10355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391611998.838:5849): pid=10355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391612101.808:5850): pid=10469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391612101.808:5851): pid=10469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391612101.808:5852): login pid=10469 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=601 >type=USER_START msg=audit(1391612101.818:5853): pid=10469 uid=0 auid=0 ses=601 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391612101.818:5854): pid=10469 uid=0 auid=0 ses=601 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391612102.118:5855): pid=10469 uid=0 auid=0 ses=601 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391612102.118:5856): pid=10469 uid=0 auid=0 ses=601 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391612179.418:5857): pid=10568 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D6E6577 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612179.418:5858): pid=10568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612179.418:5859): pid=10568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391612179.418:5860): avc: denied { write } for pid=10569 comm="iscsiadm" name="st_config" dev="dm-1" ino=2628863 scontext=system_u:system_r:iscsid_t:s0 tcontext=unconfined_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=SYSCALL msg=audit(1391612179.418:5860): arch=80000015 syscall=5 success=yes exit=3 a0=1002bde2450 a1=241 a2=1b6 a3=1 items=0 ppid=10568 pid=10569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1391612179.428:5861): pid=10568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612179.428:5862): pid=10568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612179.438:5863): pid=10571 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E617574686D6574686F64202D762043484150202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612179.438:5864): pid=10571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612179.438:5865): pid=10571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612179.438:5866): pid=10571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612179.438:5867): pid=10571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612179.448:5868): pid=10574 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E757365726E616D65202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612179.448:5869): pid=10574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612179.448:5870): pid=10574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612179.458:5871): pid=10574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612179.458:5872): pid=10574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612179.468:5873): pid=10576 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E70617373776F7264202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612179.468:5874): pid=10576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612179.468:5875): pid=10576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612179.468:5876): pid=10576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612179.468:5877): pid=10576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612179.478:5878): pid=10578 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D646973636F766572 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612179.478:5879): pid=10578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612179.478:5880): pid=10578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612184.488:5881): pid=10578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612184.488:5882): pid=10578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612184.498:5883): pid=10585 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612184.498:5884): pid=10585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612184.498:5885): pid=10585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612184.508:5886): pid=10585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612184.508:5887): pid=10585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612184.518:5888): pid=10587 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D64656C657465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612184.518:5889): pid=10587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612184.518:5890): pid=10587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391612184.518:5891): avc: denied { write } for pid=10588 comm="iscsiadm" name="10.10.27.68,3260" dev="dm-1" ino=2623370 scontext=system_u:system_r:iscsid_t:s0 tcontext=unconfined_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391612184.518:5891): avc: denied { remove_name } for pid=10588 comm="iscsiadm" name="st_config" dev="dm-1" ino=2628863 scontext=system_u:system_r:iscsid_t:s0 tcontext=unconfined_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391612184.518:5891): avc: denied { unlink } for pid=10588 comm="iscsiadm" name="st_config" dev="dm-1" ino=2628863 scontext=system_u:system_r:iscsid_t:s0 tcontext=unconfined_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=SYSCALL msg=audit(1391612184.518:5891): arch=80000015 syscall=10 success=yes exit=0 a0=100343d2450 a1=2d0fdd4b a2=1000 a3=0 items=0 ppid=10587 pid=10588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=AVC msg=audit(1391612184.518:5892): avc: denied { unlink } for pid=10588 comm="iscsiadm" name="iqn.2014-01.org.eldorado.testtarget:disk1,10.10.27.68,3260,1,default" dev="dm-1" ino=2637517 scontext=system_u:system_r:iscsid_t:s0 tcontext=unconfined_u:object_r:iscsi_var_lib_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1391612184.518:5892): arch=80000015 syscall=10 success=yes exit=0 a0=100343de6d0 a1=3fffd5ba89f0 a2=3fffd5ba89f0 a3=38 items=0 ppid=10587 pid=10588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=AVC msg=audit(1391612184.518:5893): avc: denied { rmdir } for pid=10588 comm="iscsiadm" name="10.10.27.68,3260,1" dev="dm-1" ino=2628872 scontext=system_u:system_r:iscsid_t:s0 tcontext=unconfined_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=SYSCALL msg=audit(1391612184.518:5893): arch=80000015 syscall=40 success=yes exit=0 a0=100343de6d0 a1=1ffffff10538 a2=1ffffff10d58 a3=1ffffff15d78 items=0 ppid=10587 pid=10588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=AVC msg=audit(1391612184.518:5894): avc: denied { write } for pid=10588 comm="iscsiadm" name="nodes" dev="dm-1" ino=2628797 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391612184.518:5894): avc: denied { remove_name } for pid=10588 comm="iscsiadm" name="iqn.2014-01.org.eldorado.testtarget:disk1" dev="dm-1" ino=2628864 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=SYSCALL msg=audit(1391612184.518:5894): arch=80000015 syscall=40 success=yes exit=0 a0=100343de6d0 a1=2d0fd3c5 a2=0 a3=28 items=0 ppid=10587 pid=10588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1391612184.518:5895): pid=10587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612184.518:5896): pid=10587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612232.088:5897): pid=10660 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D6E6577 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612232.088:5898): pid=10660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612232.088:5899): pid=10660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612232.088:5900): pid=10660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612232.088:5901): pid=10660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612232.098:5902): pid=10662 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E617574686D6574686F64202D762043484150202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612232.098:5903): pid=10662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612232.098:5904): pid=10662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612232.098:5905): pid=10662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612232.098:5906): pid=10662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612232.118:5907): pid=10664 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E757365726E616D65202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612232.118:5908): pid=10664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612232.118:5909): pid=10664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612232.118:5910): pid=10664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612232.118:5911): pid=10664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612232.128:5912): pid=10666 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E70617373776F7264202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612232.128:5913): pid=10666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612232.128:5914): pid=10666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612232.128:5915): pid=10666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612232.128:5916): pid=10666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612232.148:5917): pid=10668 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D646973636F766572 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612232.148:5918): pid=10668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612232.148:5919): pid=10668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612237.148:5920): pid=10668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612237.148:5921): pid=10668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612237.168:5922): pid=10679 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612237.168:5923): pid=10679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612237.168:5924): pid=10679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612237.168:5925): pid=10679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612237.168:5926): pid=10679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612237.178:5927): pid=10681 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D64656C657465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612237.178:5928): pid=10681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612237.178:5929): pid=10681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612237.178:5930): pid=10681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612237.178:5931): pid=10681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612322.958:5932): pid=10790 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D6E6577 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612322.968:5933): pid=10790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612322.968:5934): pid=10790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391612322.968:5935): avc: denied { add_name } for pid=10792 comm="iscsiadm" name="10.10.27.68,3260" scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391612322.968:5935): avc: denied { create } for pid=10792 comm="iscsiadm" name="10.10.27.68,3260" scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=SYSCALL msg=audit(1391612322.968:5935): arch=80000015 syscall=39 success=yes exit=0 a0=1002edb2450 a1=1b0 a2=3ffffa501c50 a3=0 items=0 ppid=10790 pid=10792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=AVC msg=audit(1391612322.968:5936): avc: denied { create } for pid=10792 comm="iscsiadm" name="st_config" scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=AVC msg=audit(1391612322.968:5936): avc: denied { write } for pid=10792 comm="iscsiadm" path="/var/lib/iscsi/send_targets/10.10.27.68,3260/st_config" dev="dm-1" ino=2628863 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=SYSCALL msg=audit(1391612322.968:5936): arch=80000015 syscall=5 success=yes exit=3 a0=1002edb2450 a1=241 a2=1b6 a3=1 items=0 ppid=10790 pid=10792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1391612322.968:5937): pid=10790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612322.968:5938): pid=10790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612322.988:5939): pid=10795 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E617574686D6574686F64202D762043484150202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612322.988:5940): pid=10795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612322.988:5941): pid=10795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612322.998:5942): pid=10795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612322.998:5943): pid=10795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612323.018:5944): pid=10797 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E757365726E616D65202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612323.018:5945): pid=10797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612323.018:5946): pid=10797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612323.018:5947): pid=10797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612323.018:5948): pid=10797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612323.038:5949): pid=10799 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E70617373776F7264202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612323.038:5950): pid=10799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612323.038:5951): pid=10799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612323.048:5952): pid=10799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612323.048:5953): pid=10799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612323.068:5954): pid=10801 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D646973636F766572 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612323.068:5955): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612323.068:5956): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612328.068:5957): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612328.068:5958): pid=10801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612328.098:5959): pid=10818 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612328.098:5960): pid=10818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612328.098:5961): pid=10818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612328.098:5962): pid=10818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612328.098:5963): pid=10818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612328.118:5964): pid=10820 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D64656C657465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612328.118:5965): pid=10820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612328.118:5966): pid=10820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391612328.118:5967): avc: denied { unlink } for pid=10821 comm="iscsiadm" name="st_config" dev="dm-1" ino=2628863 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=SYSCALL msg=audit(1391612328.118:5967): arch=80000015 syscall=10 success=yes exit=0 a0=100336a2450 a1=5843dd4b a2=1000 a3=0 items=0 ppid=10820 pid=10821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=AVC msg=audit(1391612328.118:5968): avc: denied { rmdir } for pid=10821 comm="iscsiadm" name="10.10.27.68,3260" dev="dm-1" ino=2623370 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=SYSCALL msg=audit(1391612328.118:5968): arch=80000015 syscall=40 success=yes exit=0 a0=100336a2450 a1=5843de78 a2=0 a3=0 items=0 ppid=10820 pid=10821 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1391612328.128:5969): pid=10820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612328.128:5970): pid=10820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612335.768:5971): pid=10835 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612335.768:5972): pid=10835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612335.768:5973): pid=10835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612335.768:5974): pid=10835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612335.768:5975): pid=10835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612335.788:5976): pid=10837 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612335.788:5977): pid=10837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612335.788:5978): pid=10837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612335.848:5979): pid=10837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612335.848:5980): pid=10837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612335.878:5981): pid=10864 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391612335.878:5982): pid=10864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612335.878:5983): pid=10864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612335.908:5984): pid=10864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612335.908:5985): pid=10864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612335.958:5986): pid=10871 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_ACQ msg=audit(1391612335.958:5987): pid=10871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612335.958:5988): pid=10871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612335.968:5989): pid=10871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612335.968:5990): pid=10871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612347.518:5991): pid=10889 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D6E6577 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612347.518:5992): pid=10889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612347.518:5993): pid=10889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391612347.518:5994): avc: denied { write } for pid=10890 comm="iscsiadm" name="send_targets" dev="dm-1" ino=2628798 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391612347.518:5994): avc: denied { add_name } for pid=10890 comm="iscsiadm" name="10.10.27.68,3260" scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391612347.518:5994): avc: denied { create } for pid=10890 comm="iscsiadm" name="10.10.27.68,3260" scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=SYSCALL msg=audit(1391612347.518:5994): arch=80000015 syscall=39 success=yes exit=0 a0=1002c082450 a1=1b0 a2=3fffed4c8590 a3=0 items=0 ppid=10889 pid=10890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=AVC msg=audit(1391612347.518:5995): avc: denied { create } for pid=10890 comm="iscsiadm" name="st_config" scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=AVC msg=audit(1391612347.518:5995): avc: denied { write } for pid=10890 comm="iscsiadm" path="/var/lib/iscsi/send_targets/10.10.27.68,3260/st_config" dev="dm-1" ino=2628863 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=SYSCALL msg=audit(1391612347.518:5995): arch=80000015 syscall=5 success=yes exit=3 a0=1002c082450 a1=241 a2=1b6 a3=1 items=0 ppid=10889 pid=10890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1391612347.518:5996): pid=10889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612347.518:5997): pid=10889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612347.528:5998): pid=10892 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E617574686D6574686F64202D762043484150202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612347.528:5999): pid=10892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612347.528:6000): pid=10892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612347.538:6001): pid=10892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612347.538:6002): pid=10892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612347.548:6003): pid=10895 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E757365726E616D65202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612347.548:6004): pid=10895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612347.548:6005): pid=10895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612347.548:6006): pid=10895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612347.548:6007): pid=10895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612347.558:6008): pid=10897 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E70617373776F7264202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612347.558:6009): pid=10897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612347.558:6010): pid=10897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612347.558:6011): pid=10897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612347.558:6012): pid=10897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612347.578:6013): pid=10899 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D646973636F766572 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612347.578:6014): pid=10899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612347.578:6015): pid=10899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612352.578:6016): pid=10899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612352.578:6017): pid=10899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612352.598:6018): pid=10912 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612352.598:6019): pid=10912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612352.598:6020): pid=10912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612352.598:6021): pid=10912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612352.598:6022): pid=10912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612352.618:6023): pid=10914 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D64656C657465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612352.618:6024): pid=10914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612352.618:6025): pid=10914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391612352.618:6026): avc: denied { remove_name } for pid=10915 comm="iscsiadm" name="st_config" dev="dm-1" ino=2628863 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391612352.618:6026): avc: denied { unlink } for pid=10915 comm="iscsiadm" name="st_config" dev="dm-1" ino=2628863 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=SYSCALL msg=audit(1391612352.618:6026): arch=80000015 syscall=10 success=yes exit=0 a0=1000c9d2450 a1=42e5dd4b a2=1000 a3=0 items=0 ppid=10914 pid=10915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=AVC msg=audit(1391612352.618:6027): avc: denied { rmdir } for pid=10915 comm="iscsiadm" name="10.10.27.68,3260" dev="dm-1" ino=2623370 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=SYSCALL msg=audit(1391612352.618:6027): arch=80000015 syscall=40 success=yes exit=0 a0=1000c9d2450 a1=42e5de78 a2=0 a3=0 items=0 ppid=10914 pid=10915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1391612352.618:6028): pid=10914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612352.618:6029): pid=10914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391612461.129:6030): pid=11045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391612461.129:6031): pid=11045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391612461.129:6032): login pid=11045 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=602 >type=USER_START msg=audit(1391612461.139:6033): pid=11045 uid=0 auid=0 ses=602 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391612461.139:6034): pid=11045 uid=0 auid=0 ses=602 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391612461.159:6035): avc: denied { read } for pid=11061 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391612461.159:6035): arch=80000015 syscall=286 success=yes exit=4 a0=ffffffffffffff9c a1=3fffcd9c18c0 a2=84800 a3=0 items=0 ppid=11059 pid=11061 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=602 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391612461.169:6036): pid=11045 uid=0 auid=0 ses=602 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391612461.169:6037): pid=11045 uid=0 auid=0 ses=602 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391612518.559:6038): pid=11150 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/var/lib" cmd=726D202D722069736373692F terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391612518.559:6039): pid=11150 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391612518.559:6040): pid=11150 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391612518.569:6041): pid=11150 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391612518.569:6042): pid=11150 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1391612607.209:6043): pid=11296 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D6E6577 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612607.209:6044): pid=11296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612607.209:6045): pid=11296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391612607.219:6046): avc: denied { write } for pid=11297 comm="iscsiadm" name="st_config" dev="dm-1" ino=2515282 scontext=system_u:system_r:iscsid_t:s0 tcontext=unconfined_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=SYSCALL msg=audit(1391612607.219:6046): arch=80000015 syscall=5 success=yes exit=3 a0=1002a9a2450 a1=241 a2=1b6 a3=1 items=0 ppid=11296 pid=11297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1391612607.219:6047): pid=11296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612607.219:6048): pid=11296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612607.229:6049): pid=11299 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E617574686D6574686F64202D762043484150202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612607.229:6050): pid=11299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612607.229:6051): pid=11299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612607.229:6052): pid=11299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612607.229:6053): pid=11299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612607.239:6054): pid=11302 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E757365726E616D65202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612607.249:6055): pid=11302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612607.249:6056): pid=11302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612607.249:6057): pid=11302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612607.249:6058): pid=11302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612607.259:6059): pid=11304 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E70617373776F7264202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612607.259:6060): pid=11304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612607.259:6061): pid=11304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612607.259:6062): pid=11304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612607.259:6063): pid=11304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612607.269:6064): pid=11306 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D646973636F766572 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612607.269:6065): pid=11306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612607.279:6066): pid=11306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612612.279:6067): pid=11306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612612.279:6068): pid=11306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612612.289:6069): pid=11315 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612612.289:6070): pid=11315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612612.289:6071): pid=11315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612612.289:6072): pid=11315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612612.289:6073): pid=11315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612612.309:6074): pid=11317 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D64656C657465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612612.309:6075): pid=11317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612612.309:6076): pid=11317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391612612.309:6077): avc: denied { write } for pid=11318 comm="iscsiadm" name="10.10.27.68,3260" dev="dm-1" ino=2514955 scontext=system_u:system_r:iscsid_t:s0 tcontext=unconfined_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391612612.309:6077): avc: denied { remove_name } for pid=11318 comm="iscsiadm" name="st_config" dev="dm-1" ino=2515282 scontext=system_u:system_r:iscsid_t:s0 tcontext=unconfined_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391612612.309:6077): avc: denied { unlink } for pid=11318 comm="iscsiadm" name="st_config" dev="dm-1" ino=2515282 scontext=system_u:system_r:iscsid_t:s0 tcontext=unconfined_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=SYSCALL msg=audit(1391612612.309:6077): arch=80000015 syscall=10 success=yes exit=0 a0=100363e2450 a1=23da3753 a2=1000 a3=0 items=0 ppid=11317 pid=11318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=AVC msg=audit(1391612612.309:6078): avc: denied { unlink } for pid=11318 comm="iscsiadm" name="iqn.2014-01.org.eldorado.testtarget:disk1,10.10.27.68,3260,1,default" dev="dm-1" ino=2515286 scontext=system_u:system_r:iscsid_t:s0 tcontext=unconfined_u:object_r:iscsi_var_lib_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1391612612.309:6078): arch=80000015 syscall=10 success=yes exit=0 a0=100363ee9d0 a1=3fffd3908680 a2=3fffd3908680 a3=38 items=0 ppid=11317 pid=11318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=AVC msg=audit(1391612612.309:6079): avc: denied { rmdir } for pid=11318 comm="iscsiadm" name="10.10.27.68,3260,1" dev="dm-1" ino=2515284 scontext=system_u:system_r:iscsid_t:s0 tcontext=unconfined_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=SYSCALL msg=audit(1391612612.309:6079): arch=80000015 syscall=40 success=yes exit=0 a0=100363ee9d0 a1=1ffffff10538 a2=1ffffff10d58 a3=1ffffff15d78 items=0 ppid=11317 pid=11318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=AVC msg=audit(1391612612.309:6080): avc: denied { write } for pid=11318 comm="iscsiadm" name="nodes" dev="dm-1" ino=2515268 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391612612.309:6080): avc: denied { remove_name } for pid=11318 comm="iscsiadm" name="iqn.2014-01.org.eldorado.testtarget:disk1" dev="dm-1" ino=2515283 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=SYSCALL msg=audit(1391612612.309:6080): arch=80000015 syscall=40 success=yes exit=0 a0=100363ee9d0 a1=23da2dcd a2=0 a3=28 items=0 ppid=11317 pid=11318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1391612612.309:6081): pid=11317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612612.309:6082): pid=11317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612839.569:6083): pid=11602 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D6E6577 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612839.569:6084): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612839.569:6085): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391612839.569:6086): avc: denied { add_name } for pid=11603 comm="iscsiadm" name="10.10.27.68,3260" scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391612839.569:6086): avc: denied { create } for pid=11603 comm="iscsiadm" name="10.10.27.68,3260" scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=SYSCALL msg=audit(1391612839.569:6086): arch=80000015 syscall=39 success=yes exit=0 a0=10021732450 a1=1b0 a2=3ffff76ced00 a3=0 items=0 ppid=11602 pid=11603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=AVC msg=audit(1391612839.569:6087): avc: denied { create } for pid=11603 comm="iscsiadm" name="st_config" scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=AVC msg=audit(1391612839.569:6087): avc: denied { write } for pid=11603 comm="iscsiadm" path="/var/lib/iscsi/send_targets/10.10.27.68,3260/st_config" dev="dm-1" ino=2515282 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=SYSCALL msg=audit(1391612839.569:6087): arch=80000015 syscall=5 success=yes exit=3 a0=10021732450 a1=241 a2=1b6 a3=1 items=0 ppid=11602 pid=11603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1391612839.569:6088): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612839.569:6089): pid=11602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612839.579:6090): pid=11605 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E617574686D6574686F64202D762043484150202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612839.579:6091): pid=11605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612839.579:6092): pid=11605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391612839.579:6093): avc: denied { write } for pid=11607 comm="iscsiadm" name="st_config" dev="dm-1" ino=2515282 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=SYSCALL msg=audit(1391612839.579:6093): arch=80000015 syscall=5 success=yes exit=3 a0=100130f04e0 a1=241 a2=1b6 a3=1 items=0 ppid=11605 pid=11607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1391612839.589:6094): pid=11605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612839.589:6095): pid=11605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612839.599:6096): pid=11608 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E757365726E616D65202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612839.599:6097): pid=11608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612839.599:6098): pid=11608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612839.599:6099): pid=11608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612839.599:6100): pid=11608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612839.619:6101): pid=11610 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E70617373776F7264202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612839.619:6102): pid=11610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612839.619:6103): pid=11610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612839.629:6104): pid=11610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612839.629:6105): pid=11610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612839.639:6106): pid=11613 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D646973636F766572 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612839.639:6107): pid=11613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612839.639:6108): pid=11613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612844.639:6109): pid=11613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612844.639:6110): pid=11613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612844.659:6111): pid=11631 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612844.659:6112): pid=11631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612844.659:6113): pid=11631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391612844.659:6114): pid=11631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612844.659:6115): pid=11631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391612844.669:6116): pid=11633 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D64656C657465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391612844.669:6117): pid=11633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391612844.669:6118): pid=11633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391612844.669:6119): avc: denied { write } for pid=11634 comm="iscsiadm" name="10.10.27.68,3260" dev="dm-1" ino=2514955 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391612844.669:6119): avc: denied { remove_name } for pid=11634 comm="iscsiadm" name="st_config" dev="dm-1" ino=2515282 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391612844.669:6119): avc: denied { unlink } for pid=11634 comm="iscsiadm" name="st_config" dev="dm-1" ino=2515282 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=SYSCALL msg=audit(1391612844.669:6119): arch=80000015 syscall=10 success=yes exit=0 a0=10000532450 a1=44253753 a2=1000 a3=0 items=0 ppid=11633 pid=11634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=AVC msg=audit(1391612844.669:6120): avc: denied { rmdir } for pid=11634 comm="iscsiadm" name="10.10.27.68,3260" dev="dm-1" ino=2514955 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=SYSCALL msg=audit(1391612844.669:6120): arch=80000015 syscall=40 success=yes exit=0 a0=10000532450 a1=44253880 a2=0 a3=0 items=0 ppid=11633 pid=11634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1391612844.669:6121): pid=11633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391612844.669:6122): pid=11633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391613001.189:6123): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391613001.189:6124): pid=11824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391613001.189:6125): login pid=11824 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=603 >type=USER_START msg=audit(1391613001.189:6126): pid=11824 uid=0 auid=0 ses=603 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391613001.189:6127): pid=11824 uid=0 auid=0 ses=603 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391613001.329:6128): pid=11824 uid=0 auid=0 ses=603 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391613001.329:6129): pid=11824 uid=0 auid=0 ses=603 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391613445.609:6130): pid=12324 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/var/lib/iscsi" cmd=697363736961646D202D6D206E6F6465202D2D7461726765746E616D653D69716E2E323031342D30312E6F72672E656C646F7261646F2E746573747461726765743A6469736B31202D2D6C6F67696E terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391613445.609:6131): pid=12324 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391613445.609:6132): pid=12324 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391613445.619:6133): pid=12324 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391613445.619:6134): pid=12324 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1391613462.649:6135): pid=12346 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/var/lib/iscsi" cmd=697363736961646D202D6D206E6F6465202D2D7461726765746E616D653D69716E2E323031342D30312E6F72672E656C646F7261646F2E746573747461726765743A6469736B31202D2D6C6F67696E terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391613462.649:6136): pid=12346 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391613462.649:6137): pid=12346 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391613462.659:6138): pid=12346 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391613462.659:6139): pid=12346 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1391613492.909:6140): pid=12384 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/var/lib/iscsi" cmd=697363736961646D202D76202D64203130202D6D206E6F6465202D2D7461726765746E616D653D69716E2E323031342D30312E6F72672E656C646F7261646F2E746573747461726765743A6469736B31202D2D6C6F67696E terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391613492.909:6141): pid=12384 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391613492.909:6142): pid=12384 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391613492.909:6143): pid=12384 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391613492.909:6144): pid=12384 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1391613496.889:6145): pid=12390 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/var/lib/iscsi" cmd=697363736961646D202D76202D642031202D6D206E6F6465202D2D7461726765746E616D653D69716E2E323031342D30312E6F72672E656C646F7261646F2E746573747461726765743A6469736B31202D2D6C6F67696E terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391613496.889:6146): pid=12390 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391613496.889:6147): pid=12390 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391613496.889:6148): pid=12390 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391613496.889:6149): pid=12390 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1391613807.549:6150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsid" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391613807.549:6151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsid" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391613807.559:6152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsiuio" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391613807.569:6153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsid" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391613810.469:6154): pid=12807 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/var/lib/iscsi" cmd=697363736961646D202D76202D642031202D6D206E6F6465202D2D7461726765746E616D653D69716E2E323031342D30312E6F72672E656C646F7261646F2E746573747461726765743A6469736B31202D2D6C6F67696E terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391613810.469:6155): pid=12807 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391613810.469:6156): pid=12807 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391613810.979:6157): pid=12807 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391613810.979:6158): pid=12807 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1391613813.149:6159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391613813.149:6160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391613814.809:6161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391613815.049:6162): pid=12891 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D704F6837686E41 terminal=? res=success' >type=CRED_ACQ msg=audit(1391613815.049:6163): pid=12891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391613815.049:6164): pid=12891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391613815.049:6165): pid=12891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391613815.049:6166): pid=12891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391613815.809:6167): pid=12911 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1391613815.809:6168): pid=12911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391613815.809:6169): pid=12911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391613815.819:6170): pid=12911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391613815.819:6171): pid=12911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391613815.879:6172): pid=12915 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391613815.879:6173): pid=12915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391613815.879:6174): pid=12915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391613815.879:6175): pid=12915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391613815.879:6176): pid=12915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391613815.909:6177): pid=12924 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391613815.909:6178): pid=12924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391613815.909:6179): pid=12924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391613815.959:6180): pid=12924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391613815.959:6181): pid=12924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391613816.299:6182): pid=12961 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391613816.299:6183): pid=12961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391613816.299:6184): pid=12961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391613816.309:6185): pid=12961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391613816.309:6186): pid=12961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391613816.319:6187): pid=12964 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391613816.319:6188): pid=12964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391613816.319:6189): pid=12964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391613816.329:6190): pid=12964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391613816.329:6191): pid=12964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391613816.349:6192): pid=12967 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391613816.349:6193): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391613816.349:6194): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391613816.359:6195): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391613816.359:6196): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391613816.369:6197): pid=12970 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391613816.369:6198): pid=12970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391613816.369:6199): pid=12970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391613816.379:6200): pid=12970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391613816.379:6201): pid=12970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391613818.939:6202): pid=12982 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391613818.939:6203): pid=12982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391613818.939:6204): pid=12982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391613818.939:6205): pid=12982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391613818.939:6206): pid=12982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391613818.949:6207): pid=12984 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391613818.949:6208): pid=12984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391613818.949:6209): pid=12984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391613818.979:6210): pid=12984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391613818.979:6211): pid=12984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391613819.389:6212): pid=13017 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391613819.389:6213): pid=13017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391613819.389:6214): pid=13017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391613819.399:6215): pid=13017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391613819.399:6216): pid=13017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391613901.349:6217): pid=13122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391613901.349:6218): pid=13122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391613901.349:6219): login pid=13122 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=604 >type=USER_START msg=audit(1391613901.349:6220): pid=13122 uid=0 auid=0 ses=604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391613901.349:6221): pid=13122 uid=0 auid=0 ses=604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391613901.669:6222): pid=13122 uid=0 auid=0 ses=604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391613901.679:6223): pid=13122 uid=0 auid=0 ses=604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391614017.339:6224): pid=13257 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/var/lib/iscsi" cmd=697363736961646D202D6D206E6F6465202D2D7461726765746E616D653D69716E2E323031342D30312E6F72672E656C646F7261646F2E746573747461726765743A6469736B31202D702031302E31302E32372E3638202D2D6F703D757064617465202D2D6E616D65206E6F64652E73657373696F6E2E617574682E617574686D6574686F64202D2D76616C75653D43484150 terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391614017.349:6225): pid=13257 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391614017.349:6226): pid=13257 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391614017.349:6227): pid=13257 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391614017.349:6228): pid=13257 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1391614039.899:6229): pid=13285 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/var/lib/iscsi" cmd=697363736961646D202D6D206E6F6465202D2D7461726765746E616D653D69716E2E323031342D30312E6F72672E656C646F7261646F2E746573747461726765743A6469736B31202D702031302E31302E32372E3638202D2D6F703D757064617465202D2D6E616D65206E6F64652E73657373696F6E2E617574682E757365726E616D65202D2D76616C75653D6973637369 terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391614039.899:6230): pid=13285 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391614039.899:6231): pid=13285 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391614039.909:6232): pid=13285 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391614039.909:6233): pid=13285 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1391614071.659:6234): pid=13322 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/var/lib/iscsi" cmd=697363736961646D202D6D206E6F6465202D2D7461726765746E616D653D69716E2E323031342D30312E6F72672E656C646F7261646F2E746573747461726765743A6469736B31202D702031302E31302E32372E3638202D2D6F703D757064617465202D2D6E616D65206E6F64652E73657373696F6E2E617574682E70617373776F7264202D2D76616C75653D6973637369 terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391614071.659:6235): pid=13322 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391614071.659:6236): pid=13322 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391614071.659:6237): pid=13322 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391614071.659:6238): pid=13322 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1391614079.039:6239): pid=13333 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/var/lib/iscsi" cmd=697363736961646D202D6D206E6F6465202D2D7461726765746E616D653D69716E2E323031342D30312E6F72672E656C646F7261646F2E746573747461726765743A6469736B31202D702031302E31302E32372E3638202D2D6C6F67696E terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391614079.049:6240): pid=13333 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391614079.049:6241): pid=13333 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391614080.309:6242): pid=13333 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391614080.309:6243): pid=13333 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1391614117.139:6244): pid=13398 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/var/lib/iscsi" cmd=697363736961646D202D6D206E6F6465202D2D7461726765746E616D653D69716E2E323031342D30312E6F72672E656C646F7261646F2E746573747461726765743A6469736B31202D702031302E31302E32372E3638202D2D6C6F676F7574 terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1391614117.139:6245): pid=13398 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1391614117.139:6246): pid=13398 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1391614117.649:6247): pid=13398 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1391614117.649:6248): pid=13398 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1391614223.800:6249): pid=13527 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391614223.800:6250): pid=13527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391614223.800:6251): pid=13527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391614223.800:6252): pid=13527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391614223.800:6253): pid=13527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391614223.820:6254): pid=13529 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391614223.820:6255): pid=13529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391614223.820:6256): pid=13529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391614223.850:6257): pid=13529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391614223.850:6258): pid=13529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391614223.860:6259): pid=13558 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391614223.860:6260): pid=13558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391614223.860:6261): pid=13558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391614223.880:6262): pid=13558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391614223.880:6263): pid=13558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391614223.910:6264): pid=13565 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_ACQ msg=audit(1391614223.910:6265): pid=13565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391614223.910:6266): pid=13565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391614223.910:6267): pid=13565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391614223.910:6268): pid=13565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391614234.800:6269): pid=13582 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D6E6577 terminal=? res=success' >type=CRED_ACQ msg=audit(1391614234.800:6270): pid=13582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391614234.800:6271): pid=13582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391614234.800:6272): avc: denied { write } for pid=13583 comm="iscsiadm" name="st_config" dev="dm-1" ino=2515282 scontext=system_u:system_r:iscsid_t:s0 tcontext=unconfined_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=SYSCALL msg=audit(1391614234.800:6272): arch=80000015 syscall=5 success=yes exit=3 a0=10002422450 a1=241 a2=1b6 a3=1 items=0 ppid=13582 pid=13583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1391614234.800:6273): pid=13582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391614234.800:6274): pid=13582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391614234.820:6275): pid=13585 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E617574686D6574686F64202D762043484150202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391614234.820:6276): pid=13585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391614234.820:6277): pid=13585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391614234.820:6278): pid=13585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391614234.820:6279): pid=13585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391614234.830:6280): pid=13588 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E757365726E616D65202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391614234.830:6281): pid=13588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391614234.830:6282): pid=13588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391614234.840:6283): pid=13588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391614234.840:6284): pid=13588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391614234.850:6285): pid=13590 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E70617373776F7264202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391614234.850:6286): pid=13590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391614234.850:6287): pid=13590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391614234.850:6288): pid=13590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391614234.850:6289): pid=13590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391614234.860:6290): pid=13592 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D646973636F766572 terminal=? res=success' >type=CRED_ACQ msg=audit(1391614234.860:6291): pid=13592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391614234.860:6292): pid=13592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391614239.870:6293): pid=13592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391614239.870:6294): pid=13592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391614239.880:6295): pid=13599 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=CRED_ACQ msg=audit(1391614239.880:6296): pid=13599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391614239.880:6297): pid=13599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391614239.880:6298): pid=13599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391614239.880:6299): pid=13599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391614239.900:6300): pid=13601 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D64656C657465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391614239.900:6301): pid=13601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391614239.900:6302): pid=13601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391614239.900:6303): avc: denied { write } for pid=13602 comm="iscsiadm" name="10.10.27.68,3260" dev="dm-1" ino=2514955 scontext=system_u:system_r:iscsid_t:s0 tcontext=unconfined_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391614239.900:6303): avc: denied { remove_name } for pid=13602 comm="iscsiadm" name="st_config" dev="dm-1" ino=2515282 scontext=system_u:system_r:iscsid_t:s0 tcontext=unconfined_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391614239.900:6303): avc: denied { unlink } for pid=13602 comm="iscsiadm" name="st_config" dev="dm-1" ino=2515282 scontext=system_u:system_r:iscsid_t:s0 tcontext=unconfined_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=SYSCALL msg=audit(1391614239.900:6303): arch=80000015 syscall=10 success=yes exit=0 a0=10007152450 a1=567f3753 a2=1000 a3=0 items=0 ppid=13601 pid=13602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=AVC msg=audit(1391614239.900:6304): avc: denied { unlink } for pid=13602 comm="iscsiadm" name="iqn.2014-01.org.eldorado.testtarget:disk1,10.10.27.68,3260,1,default" dev="dm-1" ino=2515286 scontext=system_u:system_r:iscsid_t:s0 tcontext=unconfined_u:object_r:iscsi_var_lib_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1391614239.900:6304): arch=80000015 syscall=10 success=yes exit=0 a0=1000715e9d0 a1=3fffde5ca620 a2=3fffde5ca620 a3=38 items=0 ppid=13601 pid=13602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=AVC msg=audit(1391614239.900:6305): avc: denied { rmdir } for pid=13602 comm="iscsiadm" name="10.10.27.68,3260,1" dev="dm-1" ino=2515284 scontext=system_u:system_r:iscsid_t:s0 tcontext=unconfined_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=SYSCALL msg=audit(1391614239.900:6305): arch=80000015 syscall=40 success=yes exit=0 a0=1000715e9d0 a1=1ffffff10538 a2=1ffffff10d58 a3=1ffffff15d78 items=0 ppid=13601 pid=13602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=AVC msg=audit(1391614239.900:6306): avc: denied { write } for pid=13602 comm="iscsiadm" name="nodes" dev="dm-1" ino=2515268 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391614239.900:6306): avc: denied { remove_name } for pid=13602 comm="iscsiadm" name="iqn.2014-01.org.eldorado.testtarget:disk1" dev="dm-1" ino=2515283 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=SYSCALL msg=audit(1391614239.900:6306): arch=80000015 syscall=40 success=yes exit=0 a0=1000715e9d0 a1=567f2dcd a2=0 a3=28 items=0 ppid=13601 pid=13602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1391614239.900:6307): pid=13601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391614239.900:6308): pid=13601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391614801.690:6309): pid=14241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391614801.700:6310): pid=14241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391614801.700:6311): login pid=14241 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=605 >type=USER_START msg=audit(1391614801.710:6312): pid=14241 uid=0 auid=0 ses=605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391614801.710:6313): pid=14241 uid=0 auid=0 ses=605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391614801.860:6314): pid=14241 uid=0 auid=0 ses=605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391614801.870:6315): pid=14241 uid=0 auid=0 ses=605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1391615080.250:6316): pid=14561 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D6E6577 terminal=? res=success' >type=CRED_ACQ msg=audit(1391615080.250:6317): pid=14561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615080.250:6318): pid=14561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391615080.260:6319): avc: denied { write } for pid=14562 comm="iscsiadm" name="send_targets" dev="dm-1" ino=2515270 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391615080.260:6319): avc: denied { add_name } for pid=14562 comm="iscsiadm" name="10.10.27.68,3260" scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391615080.260:6319): avc: denied { create } for pid=14562 comm="iscsiadm" name="10.10.27.68,3260" scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=SYSCALL msg=audit(1391615080.260:6319): arch=80000015 syscall=39 success=yes exit=0 a0=1003b942450 a1=1b0 a2=3ffff86feee0 a3=0 items=0 ppid=14561 pid=14562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=AVC msg=audit(1391615080.260:6320): avc: denied { create } for pid=14562 comm="iscsiadm" name="st_config" scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=AVC msg=audit(1391615080.260:6320): avc: denied { write } for pid=14562 comm="iscsiadm" path="/var/lib/iscsi/send_targets/10.10.27.68,3260/st_config" dev="dm-1" ino=2515282 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=SYSCALL msg=audit(1391615080.260:6320): arch=80000015 syscall=5 success=yes exit=3 a0=1003b942450 a1=241 a2=1b6 a3=1 items=0 ppid=14561 pid=14562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1391615080.260:6321): pid=14561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615080.260:6322): pid=14561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615080.270:6323): pid=14564 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E617574686D6574686F64202D762043484150202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391615080.270:6324): pid=14564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615080.270:6325): pid=14564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391615080.270:6326): pid=14564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615080.270:6327): pid=14564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615080.280:6328): pid=14567 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E757365726E616D65202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391615080.280:6329): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615080.280:6330): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391615080.290:6331): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615080.290:6332): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615080.300:6333): pid=14569 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E70617373776F7264202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391615080.300:6334): pid=14569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615080.300:6335): pid=14569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391615080.300:6336): pid=14569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615080.300:6337): pid=14569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615080.310:6338): pid=14571 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D646973636F766572 terminal=? res=success' >type=CRED_ACQ msg=audit(1391615080.310:6339): pid=14571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615080.310:6340): pid=14571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391615085.320:6341): pid=14571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615085.320:6342): pid=14571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615085.340:6343): pid=14590 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=CRED_ACQ msg=audit(1391615085.340:6344): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615085.340:6345): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391615085.350:6346): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615085.350:6347): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615085.370:6348): pid=14592 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D64656C657465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391615085.370:6349): pid=14592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615085.370:6350): pid=14592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391615085.370:6351): avc: denied { remove_name } for pid=14593 comm="iscsiadm" name="st_config" dev="dm-1" ino=2515282 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391615085.370:6351): avc: denied { unlink } for pid=14593 comm="iscsiadm" name="st_config" dev="dm-1" ino=2515282 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=SYSCALL msg=audit(1391615085.370:6351): arch=80000015 syscall=10 success=yes exit=0 a0=10024402450 a1=2d5f3753 a2=1000 a3=0 items=0 ppid=14592 pid=14593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=AVC msg=audit(1391615085.370:6352): avc: denied { rmdir } for pid=14593 comm="iscsiadm" name="10.10.27.68,3260" dev="dm-1" ino=2514955 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=SYSCALL msg=audit(1391615085.370:6352): arch=80000015 syscall=40 success=yes exit=0 a0=10024402450 a1=2d5f3880 a2=0 a3=0 items=0 ppid=14592 pid=14593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1391615085.370:6353): pid=14592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615085.370:6354): pid=14592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615090.520:6355): pid=14606 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391615090.520:6356): pid=14606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615090.520:6357): pid=14606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391615090.520:6358): pid=14606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615090.520:6359): pid=14606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615090.540:6360): pid=14608 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391615090.540:6361): pid=14608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615090.540:6362): pid=14608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391615090.600:6363): pid=14608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615090.600:6364): pid=14608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615090.630:6365): pid=14636 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391615090.630:6366): pid=14636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615090.630:6367): pid=14636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391615090.650:6368): pid=14636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615090.650:6369): pid=14636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615090.700:6370): pid=14643 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_ACQ msg=audit(1391615090.700:6371): pid=14643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615090.700:6372): pid=14643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391615090.710:6373): pid=14643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615090.710:6374): pid=14643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615102.980:6375): pid=14659 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D6E6577 terminal=? res=success' >type=CRED_ACQ msg=audit(1391615102.980:6376): pid=14659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615102.980:6377): pid=14659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391615102.990:6378): pid=14659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615102.990:6379): pid=14659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615103.000:6380): pid=14661 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E617574686D6574686F64202D762043484150202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391615103.000:6381): pid=14661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615103.000:6382): pid=14661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391615103.000:6383): avc: denied { write } for pid=14662 comm="iscsiadm" name="st_config" dev="dm-1" ino=2515282 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=SYSCALL msg=audit(1391615103.000:6383): arch=80000015 syscall=5 success=yes exit=3 a0=1003b6604e0 a1=241 a2=1b6 a3=1 items=0 ppid=14661 pid=14662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1391615103.000:6384): pid=14661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615103.000:6385): pid=14661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615103.020:6386): pid=14664 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E757365726E616D65202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391615103.020:6387): pid=14664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615103.020:6388): pid=14664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391615103.020:6389): pid=14664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615103.020:6390): pid=14664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615103.040:6391): pid=14667 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D6E20646973636F766572792E73656E64746172676574732E617574682E70617373776F7264202D76206973637369202D2D6F703D757064617465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391615103.040:6392): pid=14667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615103.040:6393): pid=14667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391615103.040:6394): pid=14667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615103.040:6395): pid=14667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615103.050:6396): pid=14669 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D646973636F766572 terminal=? res=success' >type=CRED_ACQ msg=audit(1391615103.050:6397): pid=14669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615103.050:6398): pid=14669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391615108.060:6399): pid=14669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615108.060:6400): pid=14669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615108.070:6401): pid=14680 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=CRED_ACQ msg=audit(1391615108.070:6402): pid=14680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615108.070:6403): pid=14680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391615108.070:6404): pid=14680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615108.070:6405): pid=14680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615108.100:6406): pid=14682 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D64656C657465 terminal=? res=success' >type=CRED_ACQ msg=audit(1391615108.100:6407): pid=14682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615108.100:6408): pid=14682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391615108.110:6409): avc: denied { write } for pid=14683 comm="iscsiadm" name="10.10.27.68,3260" dev="dm-1" ino=2514955 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391615108.110:6409): avc: denied { remove_name } for pid=14683 comm="iscsiadm" name="st_config" dev="dm-1" ino=2515282 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=AVC msg=audit(1391615108.110:6409): avc: denied { unlink } for pid=14683 comm="iscsiadm" name="st_config" dev="dm-1" ino=2515282 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=SYSCALL msg=audit(1391615108.110:6409): arch=80000015 syscall=10 success=yes exit=0 a0=10002632450 a1=230f3753 a2=1000 a3=0 items=0 ppid=14682 pid=14683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=AVC msg=audit(1391615108.110:6410): avc: denied { rmdir } for pid=14683 comm="iscsiadm" name="10.10.27.68,3260" dev="dm-1" ino=2514955 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=SYSCALL msg=audit(1391615108.110:6410): arch=80000015 syscall=40 success=yes exit=0 a0=10002632450 a1=230f3880 a2=0 a3=0 items=0 ppid=14682 pid=14683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1391615108.110:6411): pid=14682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615108.110:6412): pid=14682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391615701.880:6413): pid=15344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391615701.880:6414): pid=15344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391615701.880:6415): login pid=15344 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=606 >type=USER_START msg=audit(1391615701.890:6416): pid=15344 uid=0 auid=0 ses=606 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391615701.890:6417): pid=15344 uid=0 auid=0 ses=606 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391615702.210:6418): pid=15344 uid=0 auid=0 ses=606 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391615702.210:6419): pid=15344 uid=0 auid=0 ses=606 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=MAC_STATUS msg=audit(1391615708.810:6420): enforcing=1 old_enforcing=0 auid=0 ses=2 >type=SYSCALL msg=audit(1391615708.810:6420): arch=80000015 syscall=4 success=yes exit=1 a0=3 a1=3fffc59b1030 a2=1 a3=0 items=0 ppid=1614 pid=15361 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=2 tty=pts0 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_CMD msg=audit(1391615721.940:6421): pid=15375 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391615721.940:6422): pid=15375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615721.940:6423): pid=15375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391615721.940:6424): pid=15375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615721.940:6425): pid=15375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615721.950:6426): pid=15377 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391615721.950:6427): pid=15377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615721.950:6428): pid=15377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391615721.990:6429): pid=15377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615721.990:6430): pid=15377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615722.000:6431): pid=15404 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20707673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C73697A652C76675F6E616D652C76675F757569642C70655F73' >type=CRED_ACQ msg=audit(1391615722.000:6432): pid=15404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615722.000:6433): pid=15404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391615722.020:6434): pid=15404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615722.020:6435): pid=15404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615722.050:6436): pid=15411 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_ACQ msg=audit(1391615722.050:6437): pid=15411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615722.050:6438): pid=15411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391615722.050:6439): pid=15411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615722.050:6440): pid=15411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615736.920:6441): pid=15433 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36343A33323630202D2D6F703D6E6577 terminal=? res=success' >type=CRED_ACQ msg=audit(1391615736.920:6442): pid=15433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615736.920:6443): pid=15433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391615736.930:6444): avc: denied { write } for pid=15434 comm="iscsiadm" name="send_targets" dev="dm-1" ino=2515270 scontext=system_u:system_r:iscsid_t:s0 tcontext=system_u:object_r:iscsi_var_lib_t:s0 tclass=dir >type=SYSCALL msg=audit(1391615736.930:6444): arch=80000015 syscall=39 success=no exit=-13 a0=10013542450 a1=1b0 a2=3fffc08ec110 a3=0 items=0 ppid=15433 pid=15434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1391615736.930:6445): pid=15433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615736.930:6446): pid=15433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391615736.940:6447): pid=15436 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=CRED_ACQ msg=audit(1391615736.940:6448): pid=15436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391615736.940:6449): pid=15436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391615736.940:6450): pid=15436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391615736.940:6451): pid=15436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391615890.301:6452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391615890.301:6453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391616061.221:6454): pid=15817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391616061.221:6455): pid=15817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391616061.221:6456): login pid=15817 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=607 >type=USER_START msg=audit(1391616061.231:6457): pid=15817 uid=0 auid=0 ses=607 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391616061.231:6458): pid=15817 uid=0 auid=0 ses=607 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391616061.251:6459): avc: denied { read } for pid=15833 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391616061.251:6459): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe4aa9c50 a2=84800 a3=0 items=0 ppid=15831 pid=15833 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=607 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391616061.261:6460): pid=15817 uid=0 auid=0 ses=607 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391616061.261:6461): pid=15817 uid=0 auid=0 ses=607 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391616601.271:6462): pid=16327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391616601.271:6463): pid=16327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391616601.271:6464): login pid=16327 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=608 >type=USER_START msg=audit(1391616601.281:6465): pid=16327 uid=0 auid=0 ses=608 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391616601.281:6466): pid=16327 uid=0 auid=0 ses=608 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391616601.421:6467): pid=16327 uid=0 auid=0 ses=608 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391616601.431:6468): pid=16327 uid=0 auid=0 ses=608 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391617501.442:6469): pid=16791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391617501.442:6470): pid=16791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391617501.442:6471): login pid=16791 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=609 >type=USER_START msg=audit(1391617501.442:6472): pid=16791 uid=0 auid=0 ses=609 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391617501.442:6473): pid=16791 uid=0 auid=0 ses=609 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391617501.822:6474): pid=16791 uid=0 auid=0 ses=609 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391617501.822:6475): pid=16791 uid=0 auid=0 ses=609 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391618401.832:6476): pid=17417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391618401.832:6477): pid=17417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391618401.832:6478): login pid=17417 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=610 >type=USER_START msg=audit(1391618401.842:6479): pid=17417 uid=0 auid=0 ses=610 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391618401.842:6480): pid=17417 uid=0 auid=0 ses=610 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391618401.982:6481): pid=17417 uid=0 auid=0 ses=610 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391618401.982:6482): pid=17417 uid=0 auid=0 ses=610 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391619301.993:6483): pid=17934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391619301.993:6484): pid=17934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391619301.993:6485): login pid=17934 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=611 >type=USER_START msg=audit(1391619302.003:6486): pid=17934 uid=0 auid=0 ses=611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391619302.003:6487): pid=17934 uid=0 auid=0 ses=611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391619302.403:6488): pid=17934 uid=0 auid=0 ses=611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391619302.403:6489): pid=17934 uid=0 auid=0 ses=611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391619661.413:6490): pid=18125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391619661.413:6491): pid=18125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391619661.413:6492): login pid=18125 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=612 >type=USER_START msg=audit(1391619661.413:6493): pid=18125 uid=0 auid=0 ses=612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391619661.413:6494): pid=18125 uid=0 auid=0 ses=612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391619661.433:6495): avc: denied { read } for pid=18141 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391619661.433:6495): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc9924de0 a2=84800 a3=0 items=0 ppid=18139 pid=18141 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=612 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391619661.443:6496): pid=18125 uid=0 auid=0 ses=612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391619661.443:6497): pid=18125 uid=0 auid=0 ses=612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391620201.453:6498): pid=18455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391620201.453:6499): pid=18455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391620201.453:6500): login pid=18455 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=613 >type=USER_START msg=audit(1391620201.463:6501): pid=18455 uid=0 auid=0 ses=613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391620201.463:6502): pid=18455 uid=0 auid=0 ses=613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391620201.593:6503): pid=18455 uid=0 auid=0 ses=613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391620201.593:6504): pid=18455 uid=0 auid=0 ses=613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391621101.604:6505): pid=18919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391621101.604:6506): pid=18919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391621101.604:6507): login pid=18919 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=614 >type=USER_START msg=audit(1391621101.604:6508): pid=18919 uid=0 auid=0 ses=614 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391621101.614:6509): pid=18919 uid=0 auid=0 ses=614 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391621101.954:6510): pid=18919 uid=0 auid=0 ses=614 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391621101.954:6511): pid=18919 uid=0 auid=0 ses=614 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391622001.974:6512): pid=19401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391622001.974:6513): pid=19401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391622001.974:6514): login pid=19401 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=615 >type=USER_START msg=audit(1391622001.974:6515): pid=19401 uid=0 auid=0 ses=615 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391622001.974:6516): pid=19401 uid=0 auid=0 ses=615 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391622002.134:6517): pid=19401 uid=0 auid=0 ses=615 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391622002.134:6518): pid=19401 uid=0 auid=0 ses=615 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391622901.145:6519): pid=19866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391622901.145:6520): pid=19866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391622901.145:6521): login pid=19866 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=616 >type=USER_START msg=audit(1391622901.145:6522): pid=19866 uid=0 auid=0 ses=616 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391622901.145:6523): pid=19866 uid=0 auid=0 ses=616 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391622901.515:6524): pid=19866 uid=0 auid=0 ses=616 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391622901.515:6525): pid=19866 uid=0 auid=0 ses=616 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391623261.525:6526): pid=20059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391623261.525:6527): pid=20059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391623261.525:6528): login pid=20059 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=617 >type=USER_START msg=audit(1391623261.535:6529): pid=20059 uid=0 auid=0 ses=617 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391623261.535:6530): pid=20059 uid=0 auid=0 ses=617 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391623261.545:6531): avc: denied { read } for pid=20075 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391623261.545:6531): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffb67bfe0 a2=84800 a3=0 items=0 ppid=20073 pid=20075 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=617 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391623261.575:6532): pid=20059 uid=0 auid=0 ses=617 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391623261.575:6533): pid=20059 uid=0 auid=0 ses=617 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391623801.575:6534): pid=20364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391623801.575:6535): pid=20364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391623801.575:6536): login pid=20364 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=618 >type=USER_START msg=audit(1391623801.585:6537): pid=20364 uid=0 auid=0 ses=618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391623801.585:6538): pid=20364 uid=0 auid=0 ses=618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391623801.725:6539): pid=20364 uid=0 auid=0 ses=618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391623801.725:6540): pid=20364 uid=0 auid=0 ses=618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391624701.746:6541): pid=21044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391624701.746:6542): pid=21044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391624701.746:6543): login pid=21044 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=619 >type=USER_START msg=audit(1391624701.746:6544): pid=21044 uid=0 auid=0 ses=619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391624701.746:6545): pid=21044 uid=0 auid=0 ses=619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391624702.116:6546): pid=21044 uid=0 auid=0 ses=619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391624702.116:6547): pid=21044 uid=0 auid=0 ses=619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_AVC msg=audit(1391625116.886:6548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received setenforce notice (enforcing=1) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=SERVICE_START msg=audit(1391625116.976:6549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625116.976:6550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625116.976:6551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625147.876:6552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-udevd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625147.876:6553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-udevd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625149.346:6554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-udevd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1391625149.666:6555): pid=21611 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="dbus" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' >type=ADD_USER msg=audit(1391625149.666:6556): pid=21611 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="dbus" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' >type=ADD_GROUP msg=audit(1391625168.766:6557): pid=21692 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1391625168.796:6558): pid=21692 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1391625168.796:6559): pid=21692 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=987 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625184.846:6560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-binfmt" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625184.846:6561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-binfmt" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625184.856:6562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-binfmt" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1391625306.016:6563): pid=32767 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="rpcuser" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' >type=ADD_USER msg=audit(1391625306.016:6564): pid=32767 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="rpcuser" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' >type=USER_ACCT msg=audit(1391625306.046:6565): pid=32772 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=changing /etc/group; group nfsnobody/65534 acct="nfsnobody" exe="/usr/sbin/groupmod" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391625306.056:6566): pid=32772 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=modifying group acct="nfsnobody" exe="/usr/sbin/groupmod" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1391625338.576:6567): pid=32883 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="tcpdump" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' >type=ADD_USER msg=audit(1391625338.576:6568): pid=32883 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="tcpdump" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1391625367.356:6569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-ccpp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625367.356:6570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-ccpp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625367.366:6571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-ccpp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625381.406:6572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-xorg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625381.406:6573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-xorg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625381.406:6574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-xorg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625381.866:6575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cups" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625381.866:6576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cups" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625381.866:6577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cups" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391625386.096:6578): pid=1135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=1135 suid=0 exe=2F7573722F7362696E2F73736864202864656C6574656429 hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391625386.096:6579): pid=1135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=1135 suid=0 exe=2F7573722F7362696E2F73736864202864656C6574656429 hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625386.096:6580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625386.096:6581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625386.126:6582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625392.216:6583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-oops" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625392.216:6584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-oops" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625392.216:6585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-oops" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625393.896:6586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1391625393.896:6587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625394.396:6588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-binfmt" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625394.396:6589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-binfmt" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625394.406:6590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-binfmt" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625401.126:6591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625401.126:6592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625402.986:6593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391625403.236:6594): pid=33354 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D70746577497767 terminal=? res=success' >type=CRED_ACQ msg=audit(1391625403.236:6595): pid=33354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391625403.236:6596): pid=33354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391625403.236:6597): pid=33354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391625403.236:6598): pid=33354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391625403.856:6599): pid=33374 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1391625403.856:6600): pid=33374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391625403.856:6601): pid=33374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391625403.866:6602): pid=33374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391625403.866:6603): pid=33374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391625403.916:6604): pid=33378 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391625403.916:6605): pid=33378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391625403.916:6606): pid=33378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391625403.916:6607): pid=33378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391625403.916:6608): pid=33378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391625403.956:6609): pid=33386 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391625403.956:6610): pid=33386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391625403.956:6611): pid=33386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391625404.736:6612): pid=33386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391625404.736:6613): pid=33386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391625404.756:6614): pid=33427 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391625404.756:6615): pid=33427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391625404.756:6616): pid=33427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391625404.766:6617): pid=33427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391625404.766:6618): pid=33427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391625404.776:6619): pid=33430 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A' >type=CRED_ACQ msg=audit(1391625404.776:6620): pid=33430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391625404.776:6621): pid=33430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391625404.786:6622): pid=33430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391625404.786:6623): pid=33430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391625404.806:6624): pid=33433 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C7673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C76675F6E616D652C617474722C73697A652C7365675F737461' >type=CRED_ACQ msg=audit(1391625404.806:6625): pid=33433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391625404.806:6626): pid=33433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391625404.816:6627): pid=33433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391625404.816:6628): pid=33433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391625404.826:6629): pid=33436 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391625404.826:6630): pid=33436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391625404.826:6631): pid=33436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391625404.836:6632): pid=33436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391625404.836:6633): pid=33436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625407.986:6634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-xorg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625407.986:6635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-xorg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625407.986:6636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-oops" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625407.986:6637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-oops" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625407.986:6638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-ccpp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625407.986:6639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-ccpp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625407.996:6640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625407.996:6641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625407.996:6642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625407.996:6643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-oops" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625407.996:6644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-xorg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625408.016:6645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-ccpp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625434.606:6646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625434.606:6647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625434.606:6648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625468.926:6649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625468.926:6650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625468.936:6651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1391625468.946:6652): avc: denied { entrypoint } for pid=33736 comm="gdm" path="/usr/libexec/gdm-simple-slave" dev="dm-1" ino=2246143 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=file >type=SYSCALL msg=audit(1391625468.946:6652): arch=80000015 syscall=11 success=no exit=-13 a0=1001a8b74d0 a1=1001a8c2470 a2=3ffff2e4aa38 a3=0 items=0 ppid=768 pid=33736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="gdm" exe="/usr/sbin/gdm" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_START msg=audit(1391625483.566:6653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-oops" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625483.566:6654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-oops" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625483.566:6655): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-xorg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625483.566:6656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-xorg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625483.576:6657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-ccpp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625483.576:6658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-ccpp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625483.586:6659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625483.586:6660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625483.586:6661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625483.586:6662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-oops" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625483.586:6663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-xorg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625483.606:6664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-ccpp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625484.746:6665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-ccpp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625484.766:6666): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-ccpp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625484.866:6667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-xorg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625484.866:6668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-xorg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625484.896:6669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-oops" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625484.906:6670): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-oops" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391625601.256:6671): pid=42232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391625601.256:6672): pid=42232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391625601.256:6673): login pid=42232 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=620 >type=USER_START msg=audit(1391625601.256:6674): pid=42232 uid=0 auid=0 ses=620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391625601.256:6675): pid=42232 uid=0 auid=0 ses=620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391625601.406:6676): pid=42232 uid=0 auid=0 ses=620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391625601.406:6677): pid=42232 uid=0 auid=0 ses=620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1391625805.266:6678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625805.266:6679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625805.296:6680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625805.296:6681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391625809.826:6682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391625809.826:6683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1391626203.587:6684): pid=42608 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/group id=65 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1391626203.617:6685): pid=42608 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op=adding group to /etc/gshadow id=65 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_GROUP msg=audit(1391626203.617:6686): pid=42608 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 msg='op= id=65 exe="/usr/sbin/groupadd" hostname=? addr=? terminal=? res=success' >type=ADD_USER msg=audit(1391626203.637:6687): pid=42612 uid=0 auid=0 ses=2 subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user id=66 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391626478.417:6688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1391626480.827:6689): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1391626480.827:6689): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1391626480.827:6689): arch=80000015 syscall=120 success=yes exit=44125 a0=6c020011 a1=1fffe8128410 a2=1fffe80d2da0 a3=1 items=0 ppid=1 pid=43999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_MACHINE_ID msg=audit(1391626483.267:6690): pid=43988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 vm-ctx=system_u:system_r:svirt_tcg_t:s0:c39,c864 img-ctx=system_u:object_r:svirt_image_t:s0:c39,c864 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1391626483.267:6691): pid=43988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391626483.267:6692): pid=43988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=deny vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391626483.267:6693): pid=43988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391626483.267:6694): pid=43988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391626483.267:6695): pid=43988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391626483.267:6696): pid=43988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391626483.267:6697): pid=43988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391626483.267:6698): pid=43988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391626483.267:6699): pid=43988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391626483.267:6700): pid=43988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/rtc" rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391626483.487:6701): pid=43988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=mem reason=start vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 old-mem=0 new-mem=524288 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391626483.487:6702): pid=43988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=vcpu reason=start vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1391626483.487:6703): pid=43988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=start reason=booted vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 vm-pid=44131 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391626861.427:6704): pid=44213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391626861.427:6705): pid=44213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391626861.427:6706): login pid=44213 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=621 >type=USER_START msg=audit(1391626861.437:6707): pid=44213 uid=0 auid=0 ses=621 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391626861.437:6708): pid=44213 uid=0 auid=0 ses=621 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391626861.447:6709): pid=44213 uid=0 auid=0 ses=621 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391626861.447:6710): pid=44213 uid=0 auid=0 ses=621 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391630461.469:6711): pid=44965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391630461.469:6712): pid=44965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391630461.469:6713): login pid=44965 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=622 >type=USER_START msg=audit(1391630461.469:6714): pid=44965 uid=0 auid=0 ses=622 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391630461.479:6715): pid=44965 uid=0 auid=0 ses=622 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391630461.489:6716): pid=44965 uid=0 auid=0 ses=622 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391630461.489:6717): pid=44965 uid=0 auid=0 ses=622 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391634061.511:6718): pid=45715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391634061.511:6719): pid=45715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391634061.511:6720): login pid=45715 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=623 >type=USER_START msg=audit(1391634061.511:6721): pid=45715 uid=0 auid=0 ses=623 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391634061.511:6722): pid=45715 uid=0 auid=0 ses=623 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391634061.521:6723): pid=45715 uid=0 auid=0 ses=623 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391634061.531:6724): pid=45715 uid=0 auid=0 ses=623 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391637661.543:6725): pid=46468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391637661.543:6726): pid=46468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391637661.543:6727): login pid=46468 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=624 >type=USER_START msg=audit(1391637661.543:6728): pid=46468 uid=0 auid=0 ses=624 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391637661.543:6729): pid=46468 uid=0 auid=0 ses=624 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391637661.563:6730): pid=46468 uid=0 auid=0 ses=624 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391637661.563:6731): pid=46468 uid=0 auid=0 ses=624 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391641261.566:6732): pid=47225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391641261.576:6733): pid=47225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391641261.576:6734): login pid=47225 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=625 >type=USER_START msg=audit(1391641261.576:6735): pid=47225 uid=0 auid=0 ses=625 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391641261.576:6736): pid=47225 uid=0 auid=0 ses=625 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391641261.586:6737): pid=47225 uid=0 auid=0 ses=625 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391641261.586:6738): pid=47225 uid=0 auid=0 ses=625 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391644861.608:6739): pid=47976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391644861.608:6740): pid=47976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391644861.608:6741): login pid=47976 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=626 >type=USER_START msg=audit(1391644861.608:6742): pid=47976 uid=0 auid=0 ses=626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391644861.608:6743): pid=47976 uid=0 auid=0 ses=626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391644861.628:6744): pid=47976 uid=0 auid=0 ses=626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391644861.628:6745): pid=47976 uid=0 auid=0 ses=626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391648461.640:6746): pid=48728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391648461.640:6747): pid=48728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391648461.640:6748): login pid=48728 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=627 >type=USER_START msg=audit(1391648461.650:6749): pid=48728 uid=0 auid=0 ses=627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391648461.650:6750): pid=48728 uid=0 auid=0 ses=627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391648461.660:6751): pid=48728 uid=0 auid=0 ses=627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391648461.660:6752): pid=48728 uid=0 auid=0 ses=627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391652061.682:6753): pid=49480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391652061.682:6754): pid=49480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391652061.682:6755): login pid=49480 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=628 >type=USER_START msg=audit(1391652061.682:6756): pid=49480 uid=0 auid=0 ses=628 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391652061.682:6757): pid=49480 uid=0 auid=0 ses=628 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391652061.702:6758): pid=49480 uid=0 auid=0 ses=628 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391652061.702:6759): pid=49480 uid=0 auid=0 ses=628 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391655661.714:6760): pid=50234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391655661.714:6761): pid=50234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391655661.714:6762): login pid=50234 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=629 >type=USER_START msg=audit(1391655661.724:6763): pid=50234 uid=0 auid=0 ses=629 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391655661.724:6764): pid=50234 uid=0 auid=0 ses=629 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391655661.734:6765): pid=50234 uid=0 auid=0 ses=629 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391655661.744:6766): pid=50234 uid=0 auid=0 ses=629 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391659261.746:6767): pid=50988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391659261.746:6768): pid=50988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391659261.746:6769): login pid=50988 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=630 >type=USER_START msg=audit(1391659261.746:6770): pid=50988 uid=0 auid=0 ses=630 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391659261.746:6771): pid=50988 uid=0 auid=0 ses=630 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391659261.766:6772): pid=50988 uid=0 auid=0 ses=630 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391659261.766:6773): pid=50988 uid=0 auid=0 ses=630 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391662861.788:6774): pid=51743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391662861.788:6775): pid=51743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391662861.788:6776): login pid=51743 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=631 >type=USER_START msg=audit(1391662861.788:6777): pid=51743 uid=0 auid=0 ses=631 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391662861.788:6778): pid=51743 uid=0 auid=0 ses=631 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391662861.808:6779): pid=51743 uid=0 auid=0 ses=631 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391662861.808:6780): pid=51743 uid=0 auid=0 ses=631 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391666461.831:6781): pid=11286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391666461.831:6782): pid=11286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391666461.831:6783): login pid=11286 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=632 >type=USER_START msg=audit(1391666461.831:6784): pid=11286 uid=0 auid=0 ses=632 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391666461.831:6785): pid=11286 uid=0 auid=0 ses=632 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391666461.851:6786): pid=11286 uid=0 auid=0 ses=632 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391666461.851:6787): pid=11286 uid=0 auid=0 ses=632 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391670061.873:6788): pid=12038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391670061.873:6789): pid=12038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391670061.873:6790): login pid=12038 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=633 >type=USER_START msg=audit(1391670061.873:6791): pid=12038 uid=0 auid=0 ses=633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391670061.873:6792): pid=12038 uid=0 auid=0 ses=633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391670061.883:6793): pid=12038 uid=0 auid=0 ses=633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391670061.883:6794): pid=12038 uid=0 auid=0 ses=633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391673661.905:6795): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391673661.905:6796): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391673661.905:6797): login pid=12790 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=634 >type=USER_START msg=audit(1391673661.905:6798): pid=12790 uid=0 auid=0 ses=634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391673661.905:6799): pid=12790 uid=0 auid=0 ses=634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391673661.925:6800): pid=12790 uid=0 auid=0 ses=634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391673661.925:6801): pid=12790 uid=0 auid=0 ses=634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391677261.937:6802): pid=13551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391677261.937:6803): pid=13551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391677261.937:6804): login pid=13551 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=635 >type=USER_START msg=audit(1391677261.937:6805): pid=13551 uid=0 auid=0 ses=635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391677261.937:6806): pid=13551 uid=0 auid=0 ses=635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391677261.947:6807): pid=13551 uid=0 auid=0 ses=635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391677261.947:6808): pid=13551 uid=0 auid=0 ses=635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391680861.969:6809): pid=14302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391680861.969:6810): pid=14302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391680861.969:6811): login pid=14302 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=636 >type=USER_START msg=audit(1391680861.969:6812): pid=14302 uid=0 auid=0 ses=636 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391680861.969:6813): pid=14302 uid=0 auid=0 ses=636 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391680861.989:6814): pid=14302 uid=0 auid=0 ses=636 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391680861.989:6815): pid=14302 uid=0 auid=0 ses=636 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391684461.001:6816): pid=15056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391684461.001:6817): pid=15056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391684461.001:6818): login pid=15056 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=637 >type=USER_START msg=audit(1391684461.011:6819): pid=15056 uid=0 auid=0 ses=637 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391684461.011:6820): pid=15056 uid=0 auid=0 ses=637 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391684461.021:6821): pid=15056 uid=0 auid=0 ses=637 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391684461.021:6822): pid=15056 uid=0 auid=0 ses=637 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1391685922.202:6823): pid=15369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=15369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391685922.202:6824): pid=15369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=15369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391685922.202:6825): pid=15369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=15369 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1391685922.202:6826): pid=15368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 spid=15369 suid=74 rport=47829 laddr=10.10.27.64 lport= exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1391685922.202:6827): pid=15368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 spid=15369 suid=74 rport=47829 laddr=10.10.27.64 lport= exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=USER_AUTH msg=audit(1391685923.622:6828): pid=15368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=ssh res=failed' >type=CRYPTO_KEY_USER msg=audit(1391685923.692:6829): pid=15368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15369 suid=74 rport=47829 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=USER_ERR msg=audit(1391685923.692:6830): pid=15368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident acct="?" exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=failed' >type=CRYPTO_KEY_USER msg=audit(1391685923.692:6831): pid=15368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=15368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391685923.692:6832): pid=15368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=15368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391685923.692:6833): pid=15368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=15368 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=USER_LOGIN msg=audit(1391685923.692:6834): pid=15368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=ssh res=failed' >type=USER_ACCT msg=audit(1391688061.043:6835): pid=15811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391688061.043:6836): pid=15811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391688061.043:6837): login pid=15811 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=638 >type=USER_START msg=audit(1391688061.043:6838): pid=15811 uid=0 auid=0 ses=638 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391688061.043:6839): pid=15811 uid=0 auid=0 ses=638 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391688061.063:6840): pid=15811 uid=0 auid=0 ses=638 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391688061.063:6841): pid=15811 uid=0 auid=0 ses=638 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1391689151.194:6842): pid=16047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=16047 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391689151.194:6843): pid=16047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=16047 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391689151.194:6844): pid=16047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=16047 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1391689151.194:6845): pid=16046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-cbc ksize=128 mac=hmac-md5 spid=16047 suid=74 rport=48153 laddr=10.10.27.64 lport= exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1391689151.194:6846): pid=16046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-cbc ksize=128 mac=hmac-md5 spid=16047 suid=74 rport=48153 laddr=10.10.27.64 lport= exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=USER_AUTH msg=audit(1391689152.244:6847): pid=16046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=ssh res=failed' >type=CRYPTO_KEY_USER msg=audit(1391689152.374:6848): pid=16046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16047 suid=74 rport=48153 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=USER_ERR msg=audit(1391689152.384:6849): pid=16046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident acct="?" exe="/usr/sbin/sshd" hostname=dsb068.corp.eldorado.org.br addr=10.10.27.68 terminal=ssh res=failed' >type=CRYPTO_KEY_USER msg=audit(1391689152.384:6850): pid=16046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=16046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391689152.384:6851): pid=16046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=16046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391689152.384:6852): pid=16046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=16046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=? res=success' >type=USER_LOGIN msg=audit(1391689152.384:6853): pid=16046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.68 terminal=ssh res=failed' >type=MAC_POLICY_LOAD msg=audit(1391689479.874:6854): policy loaded auid=0 ses=2 >type=SYSCALL msg=audit(1391689479.874:6854): arch=80000015 syscall=4 success=yes exit=6373906 a0=4 a1=1ffffef60010 a2=614212 a3=10 items=0 ppid=16172 pid=16173 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=2 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1391689481.254:6855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=3) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=SERVICE_START msg=audit(1391689481.254:6856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-modules-load" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391689481.254:6857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-modules-load" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391689481.274:6858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-modules-load" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391689501.144:6859): pid=16238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391689501.144:6860): pid=16238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391689501.144:6861): login pid=16238 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=639 >type=USER_START msg=audit(1391689501.154:6862): pid=16238 uid=0 auid=0 ses=639 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391689501.154:6863): pid=16238 uid=0 auid=0 ses=639 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391689501.164:6864): pid=16238 uid=0 auid=0 ses=639 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391689501.164:6865): pid=16238 uid=0 auid=0 ses=639 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1391689521.314:6866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391689521.314:6867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391690401.185:6868): pid=17761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391690401.185:6869): pid=17761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391690401.185:6870): login pid=17761 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=640 >type=USER_START msg=audit(1391690401.185:6871): pid=17761 uid=0 auid=0 ses=640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391690401.185:6872): pid=17761 uid=0 auid=0 ses=640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391690401.195:6873): pid=17761 uid=0 auid=0 ses=640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391690401.195:6874): pid=17761 uid=0 auid=0 ses=640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1391690911.975:6875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1391690914.585:6876): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1391690914.585:6876): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1391690914.585:6876): arch=80000015 syscall=120 success=yes exit=18138 a0=6c020011 a1=1fffe81274b0 a2=1fffe80d3330 a3=5 items=0 ppid=1 pid=18014 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_START msg=audit(1391690915.285:6877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391690917.035:6878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391690917.285:6879): pid=18225 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D707A67494F5432 terminal=? res=success' >type=CRED_ACQ msg=audit(1391690917.285:6880): pid=18225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391690917.285:6881): pid=18225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391690917.295:6882): pid=18225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391690917.295:6883): pid=18225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391690918.045:6884): pid=18246 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1391690918.045:6885): pid=18246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391690918.045:6886): pid=18246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391690918.055:6887): pid=18246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391690918.055:6888): pid=18246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391690918.115:6889): pid=18250 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391690918.115:6890): pid=18250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391690918.115:6891): pid=18250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391690918.115:6892): pid=18250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391690918.115:6893): pid=18250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391690918.145:6894): pid=18258 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391690918.145:6895): pid=18258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391690918.145:6896): pid=18258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391690918.195:6897): pid=18258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391690918.195:6898): pid=18258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391690918.525:6899): pid=18294 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391690918.525:6900): pid=18294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391690918.525:6901): pid=18294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391690918.535:6902): pid=18294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391690918.535:6903): pid=18294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391690918.555:6904): pid=18301 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A' >type=CRED_ACQ msg=audit(1391690918.555:6905): pid=18301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391690918.555:6906): pid=18301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391690918.565:6907): pid=18301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391690918.565:6908): pid=18301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391690918.575:6909): pid=18304 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391690918.585:6910): pid=18304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391690918.585:6911): pid=18304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391690918.585:6912): pid=18304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391690918.585:6913): pid=18304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391690918.605:6914): pid=18307 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A' >type=CRED_ACQ msg=audit(1391690918.605:6915): pid=18307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391690918.605:6916): pid=18307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391690918.615:6917): pid=18307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391690918.615:6918): pid=18307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391690920.695:6919): pid=18319 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391690920.695:6920): pid=18319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391690920.695:6921): pid=18319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391690920.695:6922): pid=18319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391690920.695:6923): pid=18319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391690920.705:6924): pid=18321 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391690920.705:6925): pid=18321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391690920.705:6926): pid=18321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391690920.745:6927): pid=18321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391690920.745:6928): pid=18321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391690921.225:6929): pid=18350 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1391690921.225:6930): pid=18350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391690921.225:6931): pid=18350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391690921.235:6932): pid=18350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391690921.235:6933): pid=18350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391690945.055:6934): pid=18382 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F756D6F756E74202D66202D6C202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1391690945.055:6935): pid=18382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391690945.055:6936): pid=18382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391690945.135:6937): pid=18382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391690945.135:6938): pid=18382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391690945.145:6939): pid=18386 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1391690945.145:6940): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391690945.145:6941): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391690945.145:6942): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391690945.145:6943): pid=18386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1391690945.155:6944): pid=18388 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1391690945.155:6945): pid=18388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1391690945.155:6946): pid=18388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1391690945.195:6947): pid=18388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1391690945.195:6948): pid=18388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391691301.205:6949): pid=18627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391691301.205:6950): pid=18627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391691301.205:6951): login pid=18627 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=641 >type=USER_START msg=audit(1391691301.205:6952): pid=18627 uid=0 auid=0 ses=641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391691301.205:6953): pid=18627 uid=0 auid=0 ses=641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391691301.505:6954): pid=18627 uid=0 auid=0 ses=641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391691301.505:6955): pid=18627 uid=0 auid=0 ses=641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391691661.516:6956): pid=18851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391691661.516:6957): pid=18851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391691661.516:6958): login pid=18851 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=642 >type=USER_START msg=audit(1391691661.516:6959): pid=18851 uid=0 auid=0 ses=642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391691661.516:6960): pid=18851 uid=0 auid=0 ses=642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391691661.536:6961): avc: denied { read } for pid=18867 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391691661.536:6961): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd657a470 a2=84800 a3=0 items=0 ppid=18865 pid=18867 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=642 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391691661.586:6962): pid=18851 uid=0 auid=0 ses=642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391691661.596:6963): pid=18851 uid=0 auid=0 ses=642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391692201.606:6964): pid=19207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391692201.606:6965): pid=19207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391692201.606:6966): login pid=19207 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=643 >type=USER_START msg=audit(1391692201.606:6967): pid=19207 uid=0 auid=0 ses=643 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391692201.606:6968): pid=19207 uid=0 auid=0 ses=643 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391692201.946:6969): pid=19207 uid=0 auid=0 ses=643 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391692201.946:6970): pid=19207 uid=0 auid=0 ses=643 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391693101.956:6971): pid=19758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391693101.956:6972): pid=19758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391693101.956:6973): login pid=19758 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=644 >type=USER_START msg=audit(1391693101.966:6974): pid=19758 uid=0 auid=0 ses=644 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391693101.966:6975): pid=19758 uid=0 auid=0 ses=644 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391693102.336:6976): pid=19758 uid=0 auid=0 ses=644 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391693102.336:6977): pid=19758 uid=0 auid=0 ses=644 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391694001.347:6978): pid=20311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391694001.347:6979): pid=20311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391694001.347:6980): login pid=20311 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=645 >type=USER_START msg=audit(1391694001.357:6981): pid=20311 uid=0 auid=0 ses=645 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391694001.357:6982): pid=20311 uid=0 auid=0 ses=645 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391694001.477:6983): pid=20311 uid=0 auid=0 ses=645 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391694001.477:6984): pid=20311 uid=0 auid=0 ses=645 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391694901.498:6985): pid=20862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391694901.498:6986): pid=20862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391694901.498:6987): login pid=20862 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=646 >type=USER_START msg=audit(1391694901.498:6988): pid=20862 uid=0 auid=0 ses=646 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391694901.498:6989): pid=20862 uid=0 auid=0 ses=646 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391694901.868:6990): pid=20862 uid=0 auid=0 ses=646 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391694901.878:6991): pid=20862 uid=0 auid=0 ses=646 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391695261.888:6992): pid=21086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391695261.888:6993): pid=21086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391695261.888:6994): login pid=21086 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=647 >type=USER_START msg=audit(1391695261.888:6995): pid=21086 uid=0 auid=0 ses=647 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391695261.888:6996): pid=21086 uid=0 auid=0 ses=647 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391695261.908:6997): avc: denied { read } for pid=21102 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391695261.908:6997): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdda1cdf0 a2=84800 a3=0 items=0 ppid=21100 pid=21102 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=647 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391695261.928:6998): pid=21086 uid=0 auid=0 ses=647 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391695261.928:6999): pid=21086 uid=0 auid=0 ses=647 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391695801.938:7000): pid=21443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391695801.938:7001): pid=21443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391695801.938:7002): login pid=21443 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=648 >type=USER_START msg=audit(1391695801.938:7003): pid=21443 uid=0 auid=0 ses=648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391695801.938:7004): pid=21443 uid=0 auid=0 ses=648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391695802.078:7005): pid=21443 uid=0 auid=0 ses=648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391695802.078:7006): pid=21443 uid=0 auid=0 ses=648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391696701.089:7007): pid=21991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391696701.089:7008): pid=21991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391696701.089:7009): login pid=21991 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=649 >type=USER_START msg=audit(1391696701.099:7010): pid=21991 uid=0 auid=0 ses=649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391696701.099:7011): pid=21991 uid=0 auid=0 ses=649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391696701.409:7012): pid=21991 uid=0 auid=0 ses=649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391696701.409:7013): pid=21991 uid=0 auid=0 ses=649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391697601.419:7014): pid=22543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391697601.419:7015): pid=22543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391697601.419:7016): login pid=22543 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=650 >type=USER_START msg=audit(1391697601.429:7017): pid=22543 uid=0 auid=0 ses=650 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391697601.429:7018): pid=22543 uid=0 auid=0 ses=650 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391697601.559:7019): pid=22543 uid=0 auid=0 ses=650 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391697601.569:7020): pid=22543 uid=0 auid=0 ses=650 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391698501.580:7021): pid=23095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391698501.580:7022): pid=23095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391698501.580:7023): login pid=23095 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=651 >type=USER_START msg=audit(1391698501.580:7024): pid=23095 uid=0 auid=0 ses=651 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391698501.580:7025): pid=23095 uid=0 auid=0 ses=651 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391698501.900:7026): pid=23095 uid=0 auid=0 ses=651 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391698501.900:7027): pid=23095 uid=0 auid=0 ses=651 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391698861.910:7028): pid=23319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391698861.910:7029): pid=23319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391698861.910:7030): login pid=23319 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=652 >type=USER_START msg=audit(1391698861.920:7031): pid=23319 uid=0 auid=0 ses=652 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391698861.920:7032): pid=23319 uid=0 auid=0 ses=652 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391698861.930:7033): avc: denied { read } for pid=23335 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391698861.930:7033): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdf9ccde0 a2=84800 a3=0 items=0 ppid=23333 pid=23335 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=652 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391698861.950:7034): pid=23319 uid=0 auid=0 ses=652 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391698861.950:7035): pid=23319 uid=0 auid=0 ses=652 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391699401.960:7036): pid=23676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391699401.960:7037): pid=23676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391699401.960:7038): login pid=23676 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=653 >type=USER_START msg=audit(1391699401.970:7039): pid=23676 uid=0 auid=0 ses=653 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391699401.970:7040): pid=23676 uid=0 auid=0 ses=653 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391699402.100:7041): pid=23676 uid=0 auid=0 ses=653 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391699402.100:7042): pid=23676 uid=0 auid=0 ses=653 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391700301.121:7043): pid=24223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391700301.121:7044): pid=24223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391700301.121:7045): login pid=24223 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=654 >type=USER_START msg=audit(1391700301.121:7046): pid=24223 uid=0 auid=0 ses=654 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391700301.121:7047): pid=24223 uid=0 auid=0 ses=654 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391700301.441:7048): pid=24223 uid=0 auid=0 ses=654 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391700301.441:7049): pid=24223 uid=0 auid=0 ses=654 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391701201.461:7050): pid=24774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391701201.461:7051): pid=24774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391701201.461:7052): login pid=24774 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=655 >type=USER_START msg=audit(1391701201.461:7053): pid=24774 uid=0 auid=0 ses=655 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391701201.461:7054): pid=24774 uid=0 auid=0 ses=655 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391701201.591:7055): pid=24774 uid=0 auid=0 ses=655 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391701201.591:7056): pid=24774 uid=0 auid=0 ses=655 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=VIRT_CONTROL msg=audit(1391701736.402:7057): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=stop reason=destroyed vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1391701755.672:7058): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 vm-ctx=system_u:system_r:svirt_tcg_t:s0:c58,c67 img-ctx=system_u:object_r:svirt_image_t:s0:c58,c67 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1391701755.672:7059): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391701755.672:7060): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=deny vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391701755.672:7061): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391701755.672:7062): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391701755.672:7063): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391701755.672:7064): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391701755.672:7065): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391701755.672:7066): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391701755.682:7067): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391701755.682:7068): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/rtc" rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391701755.902:7069): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=mem reason=start vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 old-mem=0 new-mem=524288 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391701755.902:7070): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=vcpu reason=start vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1391701755.902:7071): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=start reason=booted vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 vm-pid=25153 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1391701803.472:7072): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=stop reason=migrated vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391702101.612:7073): pid=25318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391702101.612:7074): pid=25318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391702101.612:7075): login pid=25318 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=656 >type=USER_START msg=audit(1391702101.622:7076): pid=25318 uid=0 auid=0 ses=656 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391702101.622:7077): pid=25318 uid=0 auid=0 ses=656 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391702101.972:7078): pid=25318 uid=0 auid=0 ses=656 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391702101.972:7079): pid=25318 uid=0 auid=0 ses=656 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=VIRT_MACHINE_ID msg=audit(1391702144.502:7080): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 vm-ctx=system_u:system_r:svirt_tcg_t:s0:c115,c352 img-ctx=system_u:object_r:svirt_image_t:s0:c115,c352 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1391702144.502:7081): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702144.512:7082): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=deny vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702144.512:7083): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702144.512:7084): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702144.512:7085): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702144.512:7086): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702144.512:7087): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702144.512:7088): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702144.512:7089): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702144.512:7090): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/rtc" rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702144.762:7091): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=mem reason=start vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 old-mem=0 new-mem=524288 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702144.762:7092): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=vcpu reason=start vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1391702144.762:7093): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=start reason=booted vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 vm-pid=25358 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1391702163.762:7094): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=stop reason=migrated vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1391702219.352:7095): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 vm-ctx=system_u:system_r:svirt_tcg_t:s0:c826,c984 img-ctx=system_u:object_r:svirt_image_t:s0:c826,c984 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1391702219.352:7096): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702219.352:7097): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=deny vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702219.352:7098): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702219.352:7099): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702219.352:7100): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702219.352:7101): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702219.352:7102): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702219.352:7103): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702219.352:7104): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702219.352:7105): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/rtc" rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702219.582:7106): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=mem reason=start vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 old-mem=0 new-mem=524288 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702219.582:7107): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=vcpu reason=start vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1391702219.582:7108): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=start reason=booted vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 vm-pid=25415 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1391702222.162:7109): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=stop reason=migrated vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1391702242.032:7110): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 vm-ctx=system_u:system_r:svirt_tcg_t:s0:c689,c698 img-ctx=system_u:object_r:svirt_image_t:s0:c689,c698 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1391702242.032:7111): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702242.032:7112): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=deny vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702242.032:7113): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702242.032:7114): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/null" rdev=01:03 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702242.032:7115): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/full" rdev=01:07 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702242.032:7116): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/zero" rdev=01:05 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702242.032:7117): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/random" rdev=01:08 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702242.032:7118): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/urandom" rdev=01:09 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702242.032:7119): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/ptmx" rdev=05:02 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702242.032:7120): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 cgroup="/sys/fs/cgroup/devices/machine/ppcvm.libvirt-qemu/" class=path path="/dev/rtc" rdev=FE:00 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702242.262:7121): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=mem reason=start vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 old-mem=0 new-mem=524288 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1391702242.262:7122): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=vcpu reason=start vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1391702242.262:7123): pid=18003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=start reason=booted vm="ppcvm" uuid=1ccfd97d-5eb4-478a-bbe6-88d254c16db7 vm-pid=25438 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1391702290.322:7124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391702290.322:7125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391702461.982:7126): pid=25578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391702461.982:7127): pid=25578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391702461.992:7128): login pid=25578 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=657 >type=USER_START msg=audit(1391702461.992:7129): pid=25578 uid=0 auid=0 ses=657 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391702461.992:7130): pid=25578 uid=0 auid=0 ses=657 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391702462.012:7131): avc: denied { read } for pid=25594 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391702462.012:7131): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd8f69120 a2=84800 a3=0 items=0 ppid=25592 pid=25594 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=657 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391702462.072:7132): pid=25578 uid=0 auid=0 ses=657 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391702462.072:7133): pid=25578 uid=0 auid=0 ses=657 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391703001.082:7134): pid=25935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391703001.082:7135): pid=25935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391703001.082:7136): login pid=25935 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=658 >type=USER_START msg=audit(1391703001.082:7137): pid=25935 uid=0 auid=0 ses=658 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391703001.082:7138): pid=25935 uid=0 auid=0 ses=658 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391703001.222:7139): pid=25935 uid=0 auid=0 ses=658 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391703001.222:7140): pid=25935 uid=0 auid=0 ses=658 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391703901.233:7141): pid=26484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391703901.233:7142): pid=26484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391703901.233:7143): login pid=26484 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=659 >type=USER_START msg=audit(1391703901.243:7144): pid=26484 uid=0 auid=0 ses=659 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391703901.243:7145): pid=26484 uid=0 auid=0 ses=659 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391703901.583:7146): pid=26484 uid=0 auid=0 ses=659 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391703901.583:7147): pid=26484 uid=0 auid=0 ses=659 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391704801.593:7148): pid=27035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391704801.593:7149): pid=27035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391704801.593:7150): login pid=27035 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=660 >type=USER_START msg=audit(1391704801.593:7151): pid=27035 uid=0 auid=0 ses=660 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391704801.593:7152): pid=27035 uid=0 auid=0 ses=660 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391704801.713:7153): pid=27035 uid=0 auid=0 ses=660 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391704801.723:7154): pid=27035 uid=0 auid=0 ses=660 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391704869.723:7155): pid=1596 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRED_DISP msg=audit(1391704869.733:7156): pid=1596 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_END msg=audit(1391704869.733:7157): pid=1596 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1391704869.733:7158): pid=1596 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1391704869.733:7159): pid=1596 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=1596 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391704869.733:7160): pid=1596 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=1596 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391704869.733:7161): pid=1596 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1596 suid=0 rport=50595 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_END msg=audit(1391704870.213:7162): pid=1600 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1391704870.213:7163): pid=1600 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_END msg=audit(1391704870.213:7164): pid=1600 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRED_DISP msg=audit(1391704870.213:7165): pid=1600 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1391704870.213:7166): pid=1600 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1600 suid=0 rport=50596 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391704870.213:7167): pid=1600 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=1600 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1391704870.213:7168): pid=1600 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=1600 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_ACCT msg=audit(1391705701.734:7169): pid=27592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391705701.734:7170): pid=27592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391705701.734:7171): login pid=27592 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=661 >type=USER_START msg=audit(1391705701.734:7172): pid=27592 uid=0 auid=0 ses=661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391705701.734:7173): pid=27592 uid=0 auid=0 ses=661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391705702.054:7174): pid=27592 uid=0 auid=0 ses=661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391705702.054:7175): pid=27592 uid=0 auid=0 ses=661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391706061.064:7176): pid=27817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391706061.064:7177): pid=27817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391706061.064:7178): login pid=27817 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=662 >type=USER_START msg=audit(1391706061.064:7179): pid=27817 uid=0 auid=0 ses=662 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391706061.074:7180): pid=27817 uid=0 auid=0 ses=662 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391706061.084:7181): avc: denied { read } for pid=27833 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391706061.084:7181): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe4007610 a2=84800 a3=0 items=0 ppid=27831 pid=27833 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=662 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391706061.104:7182): pid=27817 uid=0 auid=0 ses=662 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391706061.104:7183): pid=27817 uid=0 auid=0 ses=662 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391706601.114:7184): pid=28174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391706601.114:7185): pid=28174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391706601.114:7186): login pid=28174 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=663 >type=USER_START msg=audit(1391706601.114:7187): pid=28174 uid=0 auid=0 ses=663 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391706601.114:7188): pid=28174 uid=0 auid=0 ses=663 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391706601.294:7189): pid=28174 uid=0 auid=0 ses=663 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391706601.294:7190): pid=28174 uid=0 auid=0 ses=663 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391707501.305:7191): pid=28725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391707501.305:7192): pid=28725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391707501.305:7193): login pid=28725 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=664 >type=USER_START msg=audit(1391707501.315:7194): pid=28725 uid=0 auid=0 ses=664 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391707501.315:7195): pid=28725 uid=0 auid=0 ses=664 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391707501.695:7196): pid=28725 uid=0 auid=0 ses=664 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391707501.695:7197): pid=28725 uid=0 auid=0 ses=664 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391708401.696:7198): pid=29279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391708401.696:7199): pid=29279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391708401.696:7200): login pid=29279 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=665 >type=USER_START msg=audit(1391708401.706:7201): pid=29279 uid=0 auid=0 ses=665 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391708401.706:7202): pid=29279 uid=0 auid=0 ses=665 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391708401.836:7203): pid=29279 uid=0 auid=0 ses=665 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391708401.836:7204): pid=29279 uid=0 auid=0 ses=665 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391709301.846:7205): pid=29833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391709301.846:7206): pid=29833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391709301.846:7207): login pid=29833 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=666 >type=USER_START msg=audit(1391709301.846:7208): pid=29833 uid=0 auid=0 ses=666 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391709301.846:7209): pid=29833 uid=0 auid=0 ses=666 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391709302.156:7210): pid=29833 uid=0 auid=0 ses=666 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391709302.156:7211): pid=29833 uid=0 auid=0 ses=666 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391709661.166:7212): pid=30058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391709661.166:7213): pid=30058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391709661.166:7214): login pid=30058 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=667 >type=USER_START msg=audit(1391709661.176:7215): pid=30058 uid=0 auid=0 ses=667 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391709661.176:7216): pid=30058 uid=0 auid=0 ses=667 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391709661.196:7217): avc: denied { read } for pid=30074 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391709661.196:7217): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc47dadd0 a2=84800 a3=0 items=0 ppid=30072 pid=30074 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=667 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391709661.206:7218): pid=30058 uid=0 auid=0 ses=667 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391709661.206:7219): pid=30058 uid=0 auid=0 ses=667 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391710201.217:7220): pid=30415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391710201.217:7221): pid=30415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391710201.217:7222): login pid=30415 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=668 >type=USER_START msg=audit(1391710201.227:7223): pid=30415 uid=0 auid=0 ses=668 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391710201.227:7224): pid=30415 uid=0 auid=0 ses=668 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391710201.357:7225): pid=30415 uid=0 auid=0 ses=668 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391710201.357:7226): pid=30415 uid=0 auid=0 ses=668 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391711101.367:7227): pid=30968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391711101.367:7228): pid=30968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391711101.367:7229): login pid=30968 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=669 >type=USER_START msg=audit(1391711101.367:7230): pid=30968 uid=0 auid=0 ses=669 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391711101.377:7231): pid=30968 uid=0 auid=0 ses=669 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391711101.687:7232): pid=30968 uid=0 auid=0 ses=669 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391711101.697:7233): pid=30968 uid=0 auid=0 ses=669 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391712001.708:7234): pid=31520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391712001.708:7235): pid=31520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391712001.708:7236): login pid=31520 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=670 >type=USER_START msg=audit(1391712001.708:7237): pid=31520 uid=0 auid=0 ses=670 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391712001.708:7238): pid=31520 uid=0 auid=0 ses=670 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391712001.838:7239): pid=31520 uid=0 auid=0 ses=670 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391712001.848:7240): pid=31520 uid=0 auid=0 ses=670 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391712901.858:7241): pid=32072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391712901.858:7242): pid=32072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391712901.858:7243): login pid=32072 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=671 >type=USER_START msg=audit(1391712901.858:7244): pid=32072 uid=0 auid=0 ses=671 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391712901.858:7245): pid=32072 uid=0 auid=0 ses=671 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391712902.178:7246): pid=32072 uid=0 auid=0 ses=671 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391712902.178:7247): pid=32072 uid=0 auid=0 ses=671 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391713261.188:7248): pid=32300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391713261.188:7249): pid=32300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391713261.188:7250): login pid=32300 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=672 >type=USER_START msg=audit(1391713261.188:7251): pid=32300 uid=0 auid=0 ses=672 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391713261.188:7252): pid=32300 uid=0 auid=0 ses=672 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391713261.208:7253): avc: denied { read } for pid=32316 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391713261.208:7253): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff4885410 a2=84800 a3=0 items=0 ppid=32314 pid=32316 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=672 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391713261.228:7254): pid=32300 uid=0 auid=0 ses=672 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391713261.228:7255): pid=32300 uid=0 auid=0 ses=672 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391713801.239:7256): pid=32658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391713801.239:7257): pid=32658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391713801.239:7258): login pid=32658 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=673 >type=USER_START msg=audit(1391713801.239:7259): pid=32658 uid=0 auid=0 ses=673 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391713801.239:7260): pid=32658 uid=0 auid=0 ses=673 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391713801.369:7261): pid=32658 uid=0 auid=0 ses=673 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391713801.369:7262): pid=32658 uid=0 auid=0 ses=673 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391714701.379:7263): pid=33213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391714701.379:7264): pid=33213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391714701.379:7265): login pid=33213 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=674 >type=USER_START msg=audit(1391714701.389:7266): pid=33213 uid=0 auid=0 ses=674 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391714701.389:7267): pid=33213 uid=0 auid=0 ses=674 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391714701.699:7268): pid=33213 uid=0 auid=0 ses=674 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391714701.699:7269): pid=33213 uid=0 auid=0 ses=674 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391715601.710:7270): pid=33771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391715601.710:7271): pid=33771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391715601.710:7272): login pid=33771 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=675 >type=USER_START msg=audit(1391715601.720:7273): pid=33771 uid=0 auid=0 ses=675 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391715601.720:7274): pid=33771 uid=0 auid=0 ses=675 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391715601.910:7275): pid=33771 uid=0 auid=0 ses=675 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391715601.910:7276): pid=33771 uid=0 auid=0 ses=675 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391716501.920:7277): pid=34327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391716501.920:7278): pid=34327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391716501.920:7279): login pid=34327 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=676 >type=USER_START msg=audit(1391716501.930:7280): pid=34327 uid=0 auid=0 ses=676 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391716501.930:7281): pid=34327 uid=0 auid=0 ses=676 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391716502.360:7282): pid=34327 uid=0 auid=0 ses=676 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391716502.360:7283): pid=34327 uid=0 auid=0 ses=676 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391716861.371:7284): pid=34554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391716861.371:7285): pid=34554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391716861.371:7286): login pid=34554 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=677 >type=USER_START msg=audit(1391716861.381:7287): pid=34554 uid=0 auid=0 ses=677 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391716861.381:7288): pid=34554 uid=0 auid=0 ses=677 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391716861.401:7289): avc: denied { read } for pid=34572 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391716861.401:7289): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff6afbd80 a2=84800 a3=0 items=0 ppid=34569 pid=34572 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=677 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391716861.411:7290): pid=34554 uid=0 auid=0 ses=677 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391716861.421:7291): pid=34554 uid=0 auid=0 ses=677 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391717401.431:7292): pid=34913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391717401.431:7293): pid=34913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391717401.431:7294): login pid=34913 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=678 >type=USER_START msg=audit(1391717401.431:7295): pid=34913 uid=0 auid=0 ses=678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391717401.431:7296): pid=34913 uid=0 auid=0 ses=678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391717401.571:7297): pid=34913 uid=0 auid=0 ses=678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391717401.571:7298): pid=34913 uid=0 auid=0 ses=678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391718301.581:7299): pid=35465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391718301.581:7300): pid=35465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391718301.581:7301): login pid=35465 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=679 >type=USER_START msg=audit(1391718301.591:7302): pid=35465 uid=0 auid=0 ses=679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391718301.591:7303): pid=35465 uid=0 auid=0 ses=679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391718301.891:7304): pid=35465 uid=0 auid=0 ses=679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391718301.891:7305): pid=35465 uid=0 auid=0 ses=679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391719201.902:7306): pid=36017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391719201.902:7307): pid=36017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391719201.902:7308): login pid=36017 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=680 >type=USER_START msg=audit(1391719201.912:7309): pid=36017 uid=0 auid=0 ses=680 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391719201.912:7310): pid=36017 uid=0 auid=0 ses=680 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391719202.042:7311): pid=36017 uid=0 auid=0 ses=680 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391719202.042:7312): pid=36017 uid=0 auid=0 ses=680 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391720101.062:7313): pid=36571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391720101.062:7314): pid=36571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391720101.062:7315): login pid=36571 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=681 >type=USER_START msg=audit(1391720101.062:7316): pid=36571 uid=0 auid=0 ses=681 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391720101.062:7317): pid=36571 uid=0 auid=0 ses=681 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391720101.402:7318): pid=36571 uid=0 auid=0 ses=681 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391720101.402:7319): pid=36571 uid=0 auid=0 ses=681 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391720461.413:7320): pid=36800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391720461.413:7321): pid=36800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391720461.413:7322): login pid=36800 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=682 >type=USER_START msg=audit(1391720461.413:7323): pid=36800 uid=0 auid=0 ses=682 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391720461.413:7324): pid=36800 uid=0 auid=0 ses=682 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391720461.433:7325): avc: denied { read } for pid=36816 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391720461.433:7325): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff72ec760 a2=84800 a3=0 items=0 ppid=36814 pid=36816 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=682 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391720461.453:7326): pid=36800 uid=0 auid=0 ses=682 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391720461.453:7327): pid=36800 uid=0 auid=0 ses=682 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391721001.463:7328): pid=37155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391721001.463:7329): pid=37155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391721001.463:7330): login pid=37155 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=683 >type=USER_START msg=audit(1391721001.463:7331): pid=37155 uid=0 auid=0 ses=683 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391721001.463:7332): pid=37155 uid=0 auid=0 ses=683 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391721001.593:7333): pid=37155 uid=0 auid=0 ses=683 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391721001.593:7334): pid=37155 uid=0 auid=0 ses=683 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391721901.604:7335): pid=37706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391721901.604:7336): pid=37706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391721901.604:7337): login pid=37706 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=684 >type=USER_START msg=audit(1391721901.614:7338): pid=37706 uid=0 auid=0 ses=684 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391721901.614:7339): pid=37706 uid=0 auid=0 ses=684 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391721901.954:7340): pid=37706 uid=0 auid=0 ses=684 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391721901.954:7341): pid=37706 uid=0 auid=0 ses=684 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391722801.964:7342): pid=38260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391722801.964:7343): pid=38260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391722801.964:7344): login pid=38260 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=685 >type=USER_START msg=audit(1391722801.964:7345): pid=38260 uid=0 auid=0 ses=685 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391722801.964:7346): pid=38260 uid=0 auid=0 ses=685 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391722802.104:7347): pid=38260 uid=0 auid=0 ses=685 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391722802.114:7348): pid=38260 uid=0 auid=0 ses=685 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391723701.125:7349): pid=38813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391723701.125:7350): pid=38813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391723701.125:7351): login pid=38813 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=686 >type=USER_START msg=audit(1391723701.125:7352): pid=38813 uid=0 auid=0 ses=686 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391723701.125:7353): pid=38813 uid=0 auid=0 ses=686 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391723701.495:7354): pid=38813 uid=0 auid=0 ses=686 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391723701.495:7355): pid=38813 uid=0 auid=0 ses=686 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391724061.505:7356): pid=39040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391724061.505:7357): pid=39040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391724061.505:7358): login pid=39040 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=687 >type=USER_START msg=audit(1391724061.505:7359): pid=39040 uid=0 auid=0 ses=687 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391724061.505:7360): pid=39040 uid=0 auid=0 ses=687 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391724061.525:7361): avc: denied { read } for pid=39056 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391724061.525:7361): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe7c71d20 a2=84800 a3=0 items=0 ppid=39054 pid=39056 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=687 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391724061.535:7362): pid=39040 uid=0 auid=0 ses=687 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391724061.535:7363): pid=39040 uid=0 auid=0 ses=687 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391724601.545:7364): pid=39399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391724601.545:7365): pid=39399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391724601.545:7366): login pid=39399 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=688 >type=USER_START msg=audit(1391724601.555:7367): pid=39399 uid=0 auid=0 ses=688 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391724601.555:7368): pid=39399 uid=0 auid=0 ses=688 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391724601.745:7369): pid=39399 uid=0 auid=0 ses=688 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391724601.745:7370): pid=39399 uid=0 auid=0 ses=688 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391725501.746:7371): pid=39951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391725501.746:7372): pid=39951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391725501.746:7373): login pid=39951 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=689 >type=USER_START msg=audit(1391725501.746:7374): pid=39951 uid=0 auid=0 ses=689 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391725501.746:7375): pid=39951 uid=0 auid=0 ses=689 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391725502.066:7376): pid=39951 uid=0 auid=0 ses=689 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391725502.066:7377): pid=39951 uid=0 auid=0 ses=689 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391726401.076:7378): pid=40502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391726401.076:7379): pid=40502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391726401.076:7380): login pid=40502 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=690 >type=USER_START msg=audit(1391726401.086:7381): pid=40502 uid=0 auid=0 ses=690 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391726401.086:7382): pid=40502 uid=0 auid=0 ses=690 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391726401.216:7383): pid=40502 uid=0 auid=0 ses=690 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391726401.226:7384): pid=40502 uid=0 auid=0 ses=690 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391727301.237:7385): pid=41055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391727301.237:7386): pid=41055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391727301.237:7387): login pid=41055 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=691 >type=USER_START msg=audit(1391727301.237:7388): pid=41055 uid=0 auid=0 ses=691 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391727301.237:7389): pid=41055 uid=0 auid=0 ses=691 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391727301.607:7390): pid=41055 uid=0 auid=0 ses=691 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391727301.607:7391): pid=41055 uid=0 auid=0 ses=691 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391727661.617:7392): pid=41283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391727661.617:7393): pid=41283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391727661.617:7394): login pid=41283 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=692 >type=USER_START msg=audit(1391727661.617:7395): pid=41283 uid=0 auid=0 ses=692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391727661.617:7396): pid=41283 uid=0 auid=0 ses=692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391727661.637:7397): avc: denied { read } for pid=41299 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391727661.637:7397): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe5d84600 a2=84800 a3=0 items=0 ppid=41297 pid=41299 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=692 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391727661.657:7398): pid=41283 uid=0 auid=0 ses=692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391727661.657:7399): pid=41283 uid=0 auid=0 ses=692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391728201.667:7400): pid=41643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391728201.667:7401): pid=41643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391728201.667:7402): login pid=41643 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=693 >type=USER_START msg=audit(1391728201.677:7403): pid=41643 uid=0 auid=0 ses=693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391728201.677:7404): pid=41643 uid=0 auid=0 ses=693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391728201.857:7405): pid=41643 uid=0 auid=0 ses=693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391728201.857:7406): pid=41643 uid=0 auid=0 ses=693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391729101.868:7407): pid=42193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391729101.868:7408): pid=42193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391729101.878:7409): login pid=42193 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=694 >type=USER_START msg=audit(1391729101.878:7410): pid=42193 uid=0 auid=0 ses=694 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391729101.878:7411): pid=42193 uid=0 auid=0 ses=694 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391729102.178:7412): pid=42193 uid=0 auid=0 ses=694 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391729102.188:7413): pid=42193 uid=0 auid=0 ses=694 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391730001.198:7414): pid=42744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391730001.198:7415): pid=42744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391730001.198:7416): login pid=42744 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=695 >type=USER_START msg=audit(1391730001.198:7417): pid=42744 uid=0 auid=0 ses=695 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391730001.198:7418): pid=42744 uid=0 auid=0 ses=695 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391730001.358:7419): pid=42744 uid=0 auid=0 ses=695 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391730001.358:7420): pid=42744 uid=0 auid=0 ses=695 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391730901.369:7421): pid=43297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391730901.369:7422): pid=43297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391730901.369:7423): login pid=43297 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=696 >type=USER_START msg=audit(1391730901.379:7424): pid=43297 uid=0 auid=0 ses=696 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391730901.379:7425): pid=43297 uid=0 auid=0 ses=696 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391730901.709:7426): pid=43297 uid=0 auid=0 ses=696 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391730901.709:7427): pid=43297 uid=0 auid=0 ses=696 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391731261.719:7428): pid=43524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391731261.719:7429): pid=43524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391731261.719:7430): login pid=43524 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=697 >type=USER_START msg=audit(1391731261.719:7431): pid=43524 uid=0 auid=0 ses=697 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391731261.719:7432): pid=43524 uid=0 auid=0 ses=697 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391731261.739:7433): avc: denied { read } for pid=43540 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391731261.739:7433): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcf815c10 a2=84800 a3=0 items=0 ppid=43538 pid=43540 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=697 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391731261.759:7434): pid=43524 uid=0 auid=0 ses=697 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391731261.759:7435): pid=43524 uid=0 auid=0 ses=697 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391731801.769:7436): pid=43881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391731801.769:7437): pid=43881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391731801.769:7438): login pid=43881 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=698 >type=USER_START msg=audit(1391731801.769:7439): pid=43881 uid=0 auid=0 ses=698 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391731801.769:7440): pid=43881 uid=0 auid=0 ses=698 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391731801.899:7441): pid=43881 uid=0 auid=0 ses=698 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391731801.909:7442): pid=43881 uid=0 auid=0 ses=698 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391732701.920:7443): pid=44431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391732701.920:7444): pid=44431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391732701.920:7445): login pid=44431 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=699 >type=USER_START msg=audit(1391732701.920:7446): pid=44431 uid=0 auid=0 ses=699 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391732701.920:7447): pid=44431 uid=0 auid=0 ses=699 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391732702.300:7448): pid=44431 uid=0 auid=0 ses=699 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391732702.300:7449): pid=44431 uid=0 auid=0 ses=699 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391733601.310:7450): pid=44983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391733601.310:7451): pid=44983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391733601.320:7452): login pid=44983 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=700 >type=USER_START msg=audit(1391733601.320:7453): pid=44983 uid=0 auid=0 ses=700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391733601.320:7454): pid=44983 uid=0 auid=0 ses=700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391733601.450:7455): pid=44983 uid=0 auid=0 ses=700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391733601.450:7456): pid=44983 uid=0 auid=0 ses=700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391734501.461:7457): pid=45536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391734501.461:7458): pid=45536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391734501.461:7459): login pid=45536 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=701 >type=USER_START msg=audit(1391734501.471:7460): pid=45536 uid=0 auid=0 ses=701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391734501.471:7461): pid=45536 uid=0 auid=0 ses=701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391734501.951:7462): pid=45536 uid=0 auid=0 ses=701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391734501.951:7463): pid=45536 uid=0 auid=0 ses=701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391734861.961:7464): pid=45762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391734861.961:7465): pid=45762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391734861.961:7466): login pid=45762 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=702 >type=USER_START msg=audit(1391734861.971:7467): pid=45762 uid=0 auid=0 ses=702 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391734861.971:7468): pid=45762 uid=0 auid=0 ses=702 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391734861.981:7469): avc: denied { read } for pid=45779 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391734861.981:7469): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd6b590d0 a2=84800 a3=0 items=0 ppid=45777 pid=45779 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=702 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391734862.001:7470): pid=45762 uid=0 auid=0 ses=702 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391734862.001:7471): pid=45762 uid=0 auid=0 ses=702 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391735401.012:7472): pid=46120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391735401.012:7473): pid=46120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391735401.012:7474): login pid=46120 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=703 >type=USER_START msg=audit(1391735401.022:7475): pid=46120 uid=0 auid=0 ses=703 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391735401.022:7476): pid=46120 uid=0 auid=0 ses=703 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391735401.602:7477): pid=46120 uid=0 auid=0 ses=703 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391735401.602:7478): pid=46120 uid=0 auid=0 ses=703 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391736301.612:7479): pid=46677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391736301.612:7480): pid=46677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391736301.612:7481): login pid=46677 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=704 >type=USER_START msg=audit(1391736301.622:7482): pid=46677 uid=0 auid=0 ses=704 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391736301.622:7483): pid=46677 uid=0 auid=0 ses=704 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391736301.942:7484): pid=46677 uid=0 auid=0 ses=704 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391736301.942:7485): pid=46677 uid=0 auid=0 ses=704 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391737201.953:7486): pid=47229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391737201.953:7487): pid=47229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391737201.953:7488): login pid=47229 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=705 >type=USER_START msg=audit(1391737201.963:7489): pid=47229 uid=0 auid=0 ses=705 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391737201.963:7490): pid=47229 uid=0 auid=0 ses=705 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391737202.083:7491): pid=47229 uid=0 auid=0 ses=705 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391737202.083:7492): pid=47229 uid=0 auid=0 ses=705 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391738101.093:7493): pid=47782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391738101.093:7494): pid=47782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391738101.093:7495): login pid=47782 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=706 >type=USER_START msg=audit(1391738101.093:7496): pid=47782 uid=0 auid=0 ses=706 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391738101.093:7497): pid=47782 uid=0 auid=0 ses=706 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391738101.413:7498): pid=47782 uid=0 auid=0 ses=706 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391738101.413:7499): pid=47782 uid=0 auid=0 ses=706 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391738461.423:7500): pid=48011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391738461.423:7501): pid=48011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391738461.423:7502): login pid=48011 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=707 >type=USER_START msg=audit(1391738461.423:7503): pid=48011 uid=0 auid=0 ses=707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391738461.423:7504): pid=48011 uid=0 auid=0 ses=707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391738461.443:7505): avc: denied { read } for pid=48030 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391738461.443:7505): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd57c8070 a2=84800 a3=0 items=0 ppid=48028 pid=48030 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=707 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391738461.463:7506): pid=48011 uid=0 auid=0 ses=707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391738461.463:7507): pid=48011 uid=0 auid=0 ses=707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391739001.474:7508): pid=48370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391739001.474:7509): pid=48370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391739001.474:7510): login pid=48370 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=708 >type=USER_START msg=audit(1391739001.474:7511): pid=48370 uid=0 auid=0 ses=708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391739001.484:7512): pid=48370 uid=0 auid=0 ses=708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391739001.664:7513): pid=48370 uid=0 auid=0 ses=708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391739001.674:7514): pid=48370 uid=0 auid=0 ses=708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391739901.684:7515): pid=48920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391739901.684:7516): pid=48920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391739901.684:7517): login pid=48920 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=709 >type=USER_START msg=audit(1391739901.684:7518): pid=48920 uid=0 auid=0 ses=709 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391739901.684:7519): pid=48920 uid=0 auid=0 ses=709 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391739902.084:7520): pid=48920 uid=0 auid=0 ses=709 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391739902.084:7521): pid=48920 uid=0 auid=0 ses=709 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391740801.105:7522): pid=49473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391740801.105:7523): pid=49473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391740801.105:7524): login pid=49473 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=710 >type=USER_START msg=audit(1391740801.105:7525): pid=49473 uid=0 auid=0 ses=710 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391740801.105:7526): pid=49473 uid=0 auid=0 ses=710 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391740801.235:7527): pid=49473 uid=0 auid=0 ses=710 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391740801.235:7528): pid=49473 uid=0 auid=0 ses=710 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391741701.235:7529): pid=50026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391741701.235:7530): pid=50026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391741701.235:7531): login pid=50026 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=711 >type=USER_START msg=audit(1391741701.245:7532): pid=50026 uid=0 auid=0 ses=711 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391741701.245:7533): pid=50026 uid=0 auid=0 ses=711 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391741701.565:7534): pid=50026 uid=0 auid=0 ses=711 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391741701.565:7535): pid=50026 uid=0 auid=0 ses=711 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391742061.576:7536): pid=50253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391742061.576:7537): pid=50253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391742061.576:7538): login pid=50253 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=712 >type=USER_START msg=audit(1391742061.576:7539): pid=50253 uid=0 auid=0 ses=712 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391742061.586:7540): pid=50253 uid=0 auid=0 ses=712 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391742061.606:7541): avc: denied { read } for pid=50272 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391742061.606:7541): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffde75bf20 a2=84800 a3=0 items=0 ppid=50270 pid=50272 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=712 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391742061.616:7542): pid=50253 uid=0 auid=0 ses=712 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391742061.626:7543): pid=50253 uid=0 auid=0 ses=712 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391742601.636:7544): pid=50613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391742601.636:7545): pid=50613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391742601.636:7546): login pid=50613 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=713 >type=USER_START msg=audit(1391742601.636:7547): pid=50613 uid=0 auid=0 ses=713 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391742601.636:7548): pid=50613 uid=0 auid=0 ses=713 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391742601.766:7549): pid=50613 uid=0 auid=0 ses=713 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391742601.776:7550): pid=50613 uid=0 auid=0 ses=713 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391743501.786:7551): pid=51166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391743501.786:7552): pid=51166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391743501.786:7553): login pid=51166 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=714 >type=USER_START msg=audit(1391743501.786:7554): pid=51166 uid=0 auid=0 ses=714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391743501.786:7555): pid=51166 uid=0 auid=0 ses=714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391743502.146:7556): pid=51166 uid=0 auid=0 ses=714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391743502.146:7557): pid=51166 uid=0 auid=0 ses=714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391744401.157:7558): pid=51719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391744401.157:7559): pid=51719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391744401.157:7560): login pid=51719 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=715 >type=USER_START msg=audit(1391744401.167:7561): pid=51719 uid=0 auid=0 ses=715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391744401.167:7562): pid=51719 uid=0 auid=0 ses=715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391744401.297:7563): pid=51719 uid=0 auid=0 ses=715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391744401.297:7564): pid=51719 uid=0 auid=0 ses=715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391745301.307:7565): pid=52274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391745301.307:7566): pid=52274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391745301.307:7567): login pid=52274 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=716 >type=USER_START msg=audit(1391745301.317:7568): pid=52274 uid=0 auid=0 ses=716 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391745301.317:7569): pid=52274 uid=0 auid=0 ses=716 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391745301.627:7570): pid=52274 uid=0 auid=0 ses=716 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391745301.627:7571): pid=52274 uid=0 auid=0 ses=716 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391745661.638:7572): pid=52501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391745661.638:7573): pid=52501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391745661.638:7574): login pid=52501 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=717 >type=USER_START msg=audit(1391745661.648:7575): pid=52501 uid=0 auid=0 ses=717 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391745661.648:7576): pid=52501 uid=0 auid=0 ses=717 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391745661.668:7577): avc: denied { read } for pid=52520 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391745661.668:7577): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc89792f0 a2=84800 a3=0 items=0 ppid=52518 pid=52520 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=717 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391745661.678:7578): pid=52501 uid=0 auid=0 ses=717 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391745661.678:7579): pid=52501 uid=0 auid=0 ses=717 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391746201.688:7580): pid=52860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391746201.688:7581): pid=52860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391746201.688:7582): login pid=52860 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=718 >type=USER_START msg=audit(1391746201.698:7583): pid=52860 uid=0 auid=0 ses=718 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391746201.698:7584): pid=52860 uid=0 auid=0 ses=718 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391746201.828:7585): pid=52860 uid=0 auid=0 ses=718 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391746201.828:7586): pid=52860 uid=0 auid=0 ses=718 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391747101.839:7587): pid=53411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391747101.839:7588): pid=53411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391747101.839:7589): login pid=53411 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=719 >type=USER_START msg=audit(1391747101.849:7590): pid=53411 uid=0 auid=0 ses=719 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391747101.849:7591): pid=53411 uid=0 auid=0 ses=719 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391747102.159:7592): pid=53411 uid=0 auid=0 ses=719 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391747102.159:7593): pid=53411 uid=0 auid=0 ses=719 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391748001.169:7594): pid=53962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391748001.169:7595): pid=53962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391748001.169:7596): login pid=53962 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=720 >type=USER_START msg=audit(1391748001.179:7597): pid=53962 uid=0 auid=0 ses=720 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391748001.179:7598): pid=53962 uid=0 auid=0 ses=720 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391748001.379:7599): pid=53962 uid=0 auid=0 ses=720 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391748001.379:7600): pid=53962 uid=0 auid=0 ses=720 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391748901.390:7601): pid=54513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391748901.390:7602): pid=54513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391748901.390:7603): login pid=54513 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=721 >type=USER_START msg=audit(1391748901.390:7604): pid=54513 uid=0 auid=0 ses=721 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391748901.390:7605): pid=54513 uid=0 auid=0 ses=721 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391748901.830:7606): pid=54513 uid=0 auid=0 ses=721 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391748901.840:7607): pid=54513 uid=0 auid=0 ses=721 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391749261.840:7608): pid=54742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391749261.840:7609): pid=54742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391749261.840:7610): login pid=54742 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=722 >type=USER_START msg=audit(1391749261.850:7611): pid=54742 uid=0 auid=0 ses=722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391749261.850:7612): pid=54742 uid=0 auid=0 ses=722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391749261.870:7613): avc: denied { read } for pid=54761 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391749261.870:7613): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd5aed0a0 a2=84800 a3=0 items=0 ppid=54759 pid=54761 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=722 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391749261.930:7614): pid=54742 uid=0 auid=0 ses=722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391749261.930:7615): pid=54742 uid=0 auid=0 ses=722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391749801.940:7616): pid=55097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391749801.940:7617): pid=55097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391749801.940:7618): login pid=55097 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=723 >type=USER_START msg=audit(1391749801.940:7619): pid=55097 uid=0 auid=0 ses=723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391749801.940:7620): pid=55097 uid=0 auid=0 ses=723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391749802.070:7621): pid=55097 uid=0 auid=0 ses=723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391749802.080:7622): pid=55097 uid=0 auid=0 ses=723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391750701.091:7623): pid=55647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391750701.091:7624): pid=55647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391750701.091:7625): login pid=55647 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=724 >type=USER_START msg=audit(1391750701.091:7626): pid=55647 uid=0 auid=0 ses=724 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391750701.091:7627): pid=55647 uid=0 auid=0 ses=724 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391750701.411:7628): pid=55647 uid=0 auid=0 ses=724 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391750701.411:7629): pid=55647 uid=0 auid=0 ses=724 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391751601.421:7630): pid=56197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391751601.421:7631): pid=56197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391751601.421:7632): login pid=56197 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=725 >type=USER_START msg=audit(1391751601.421:7633): pid=56197 uid=0 auid=0 ses=725 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391751601.421:7634): pid=56197 uid=0 auid=0 ses=725 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391751601.561:7635): pid=56197 uid=0 auid=0 ses=725 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391751601.561:7636): pid=56197 uid=0 auid=0 ses=725 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391751661.881:7637): avc: denied { read } for pid=56248 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391751661.881:7637): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffeb473490 a2=84800 a3=0 items=0 ppid=56246 pid=56248 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=722 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1391752501.572:7638): pid=59297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391752501.572:7639): pid=59297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391752501.572:7640): login pid=59297 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=726 >type=USER_START msg=audit(1391752501.582:7641): pid=59297 uid=0 auid=0 ses=726 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391752501.582:7642): pid=59297 uid=0 auid=0 ses=726 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391752501.592:7643): pid=59297 uid=0 auid=0 ses=726 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391752501.592:7644): pid=59297 uid=0 auid=0 ses=726 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391752861.602:7645): pid=59520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391752861.602:7646): pid=59520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391752861.602:7647): login pid=59520 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=727 >type=USER_START msg=audit(1391752861.602:7648): pid=59520 uid=0 auid=0 ses=727 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391752861.602:7649): pid=59520 uid=0 auid=0 ses=727 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391752861.622:7650): avc: denied { read } for pid=59536 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391752861.622:7650): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc7505fa0 a2=84800 a3=0 items=0 ppid=59534 pid=59536 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=727 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391752861.632:7651): pid=59520 uid=0 auid=0 ses=727 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391752861.632:7652): pid=59520 uid=0 auid=0 ses=727 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391753401.642:7653): pid=59876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391753401.642:7654): pid=59876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391753401.642:7655): login pid=59876 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=728 >type=USER_START msg=audit(1391753401.652:7656): pid=59876 uid=0 auid=0 ses=728 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391753401.652:7657): pid=59876 uid=0 auid=0 ses=728 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391753401.662:7658): pid=59876 uid=0 auid=0 ses=728 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391753401.662:7659): pid=59876 uid=0 auid=0 ses=728 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391754301.673:7660): pid=60424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391754301.673:7661): pid=60424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391754301.673:7662): login pid=60424 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=729 >type=USER_START msg=audit(1391754301.673:7663): pid=60424 uid=0 auid=0 ses=729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391754301.683:7664): pid=60424 uid=0 auid=0 ses=729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391754301.683:7665): pid=60424 uid=0 auid=0 ses=729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391754301.683:7666): pid=60424 uid=0 auid=0 ses=729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391755201.693:7667): pid=60972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391755201.693:7668): pid=60972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391755201.693:7669): login pid=60972 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=730 >type=USER_START msg=audit(1391755201.703:7670): pid=60972 uid=0 auid=0 ses=730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391755201.703:7671): pid=60972 uid=0 auid=0 ses=730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391755201.703:7672): pid=60972 uid=0 auid=0 ses=730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391755201.713:7673): pid=60972 uid=0 auid=0 ses=730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391756101.724:7674): pid=61521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391756101.724:7675): pid=61521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391756101.724:7676): login pid=61521 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=731 >type=USER_START msg=audit(1391756101.724:7677): pid=61521 uid=0 auid=0 ses=731 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391756101.724:7678): pid=61521 uid=0 auid=0 ses=731 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391756101.734:7679): pid=61521 uid=0 auid=0 ses=731 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391756101.734:7680): pid=61521 uid=0 auid=0 ses=731 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391756461.744:7681): pid=61742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391756461.744:7682): pid=61742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391756461.744:7683): login pid=61742 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=732 >type=USER_START msg=audit(1391756461.744:7684): pid=61742 uid=0 auid=0 ses=732 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391756461.744:7685): pid=61742 uid=0 auid=0 ses=732 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391756461.764:7686): avc: denied { read } for pid=61758 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391756461.764:7686): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff27788e0 a2=84800 a3=0 items=0 ppid=61756 pid=61758 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=732 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391756461.774:7687): pid=61742 uid=0 auid=0 ses=732 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391756461.774:7688): pid=61742 uid=0 auid=0 ses=732 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391757001.784:7689): pid=62100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391757001.784:7690): pid=62100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391757001.784:7691): login pid=62100 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=733 >type=USER_START msg=audit(1391757001.784:7692): pid=62100 uid=0 auid=0 ses=733 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391757001.784:7693): pid=62100 uid=0 auid=0 ses=733 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391757001.794:7694): pid=62100 uid=0 auid=0 ses=733 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391757001.794:7695): pid=62100 uid=0 auid=0 ses=733 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391757901.805:7696): pid=62649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391757901.805:7697): pid=62649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391757901.805:7698): login pid=62649 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=734 >type=USER_START msg=audit(1391757901.815:7699): pid=62649 uid=0 auid=0 ses=734 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391757901.815:7700): pid=62649 uid=0 auid=0 ses=734 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391757901.815:7701): pid=62649 uid=0 auid=0 ses=734 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391757901.815:7702): pid=62649 uid=0 auid=0 ses=734 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391758801.825:7703): pid=63197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391758801.825:7704): pid=63197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391758801.825:7705): login pid=63197 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=735 >type=USER_START msg=audit(1391758801.825:7706): pid=63197 uid=0 auid=0 ses=735 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391758801.825:7707): pid=63197 uid=0 auid=0 ses=735 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391758801.835:7708): pid=63197 uid=0 auid=0 ses=735 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391758801.835:7709): pid=63197 uid=0 auid=0 ses=735 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391759701.846:7710): pid=63744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391759701.846:7711): pid=63744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391759701.846:7712): login pid=63744 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=736 >type=USER_START msg=audit(1391759701.846:7713): pid=63744 uid=0 auid=0 ses=736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391759701.846:7714): pid=63744 uid=0 auid=0 ses=736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391759701.856:7715): pid=63744 uid=0 auid=0 ses=736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391759701.856:7716): pid=63744 uid=0 auid=0 ses=736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391760061.866:7717): pid=63966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391760061.866:7718): pid=63966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391760061.866:7719): login pid=63966 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=737 >type=USER_START msg=audit(1391760061.866:7720): pid=63966 uid=0 auid=0 ses=737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391760061.866:7721): pid=63966 uid=0 auid=0 ses=737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391760061.886:7722): avc: denied { read } for pid=63982 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391760061.886:7722): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd584e850 a2=84800 a3=0 items=0 ppid=63980 pid=63982 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=737 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391760061.896:7723): pid=63966 uid=0 auid=0 ses=737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391760061.896:7724): pid=63966 uid=0 auid=0 ses=737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391760601.907:7725): pid=64325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391760601.907:7726): pid=64325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391760601.907:7727): login pid=64325 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=738 >type=USER_START msg=audit(1391760601.907:7728): pid=64325 uid=0 auid=0 ses=738 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391760601.907:7729): pid=64325 uid=0 auid=0 ses=738 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391760601.917:7730): pid=64325 uid=0 auid=0 ses=738 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391760601.917:7731): pid=64325 uid=0 auid=0 ses=738 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391761501.927:7732): pid=64872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391761501.927:7733): pid=64872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391761501.927:7734): login pid=64872 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=739 >type=USER_START msg=audit(1391761501.927:7735): pid=64872 uid=0 auid=0 ses=739 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391761501.927:7736): pid=64872 uid=0 auid=0 ses=739 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391761501.937:7737): pid=64872 uid=0 auid=0 ses=739 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391761501.937:7738): pid=64872 uid=0 auid=0 ses=739 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391762401.948:7739): pid=65419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391762401.948:7740): pid=65419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391762401.948:7741): login pid=65419 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=740 >type=USER_START msg=audit(1391762401.948:7742): pid=65419 uid=0 auid=0 ses=740 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391762401.958:7743): pid=65419 uid=0 auid=0 ses=740 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391762401.958:7744): pid=65419 uid=0 auid=0 ses=740 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391762401.958:7745): pid=65419 uid=0 auid=0 ses=740 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391763301.968:7746): pid=797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391763301.968:7747): pid=797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391763301.968:7748): login pid=797 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=741 >type=USER_START msg=audit(1391763301.978:7749): pid=797 uid=0 auid=0 ses=741 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391763301.978:7750): pid=797 uid=0 auid=0 ses=741 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391763301.978:7751): pid=797 uid=0 auid=0 ses=741 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391763301.988:7752): pid=797 uid=0 auid=0 ses=741 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391763661.988:7753): pid=1033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391763661.988:7754): pid=1033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391763661.988:7755): login pid=1033 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=742 >type=USER_START msg=audit(1391763661.998:7756): pid=1033 uid=0 auid=0 ses=742 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391763661.998:7757): pid=1033 uid=0 auid=0 ses=742 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391763662.008:7758): avc: denied { read } for pid=1049 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391763662.008:7758): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd6dbfe10 a2=84800 a3=0 items=0 ppid=1047 pid=1049 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=742 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391763662.028:7759): pid=1033 uid=0 auid=0 ses=742 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391763662.028:7760): pid=1033 uid=0 auid=0 ses=742 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391764201.039:7761): pid=1400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391764201.039:7762): pid=1400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391764201.039:7763): login pid=1400 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=743 >type=USER_START msg=audit(1391764201.039:7764): pid=1400 uid=0 auid=0 ses=743 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391764201.039:7765): pid=1400 uid=0 auid=0 ses=743 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391764201.049:7766): pid=1400 uid=0 auid=0 ses=743 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391764201.049:7767): pid=1400 uid=0 auid=0 ses=743 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391765101.059:7768): pid=1947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391765101.059:7769): pid=1947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391765101.059:7770): login pid=1947 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=744 >type=USER_START msg=audit(1391765101.059:7771): pid=1947 uid=0 auid=0 ses=744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391765101.059:7772): pid=1947 uid=0 auid=0 ses=744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391765101.069:7773): pid=1947 uid=0 auid=0 ses=744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391765101.069:7774): pid=1947 uid=0 auid=0 ses=744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391766001.080:7775): pid=2506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391766001.080:7776): pid=2506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391766001.080:7777): login pid=2506 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=745 >type=USER_START msg=audit(1391766001.080:7778): pid=2506 uid=0 auid=0 ses=745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391766001.090:7779): pid=2506 uid=0 auid=0 ses=745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391766001.090:7780): pid=2506 uid=0 auid=0 ses=745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391766001.090:7781): pid=2506 uid=0 auid=0 ses=745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391766901.100:7782): pid=3056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391766901.100:7783): pid=3056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391766901.100:7784): login pid=3056 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=746 >type=USER_START msg=audit(1391766901.110:7785): pid=3056 uid=0 auid=0 ses=746 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391766901.110:7786): pid=3056 uid=0 auid=0 ses=746 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391766901.110:7787): pid=3056 uid=0 auid=0 ses=746 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391766901.120:7788): pid=3056 uid=0 auid=0 ses=746 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391767261.121:7789): pid=3279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391767261.121:7790): pid=3279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391767261.121:7791): login pid=3279 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=747 >type=USER_START msg=audit(1391767261.131:7792): pid=3279 uid=0 auid=0 ses=747 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391767261.131:7793): pid=3279 uid=0 auid=0 ses=747 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391767261.141:7794): avc: denied { read } for pid=3295 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391767261.141:7794): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe86a09d0 a2=84800 a3=0 items=0 ppid=3293 pid=3295 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=747 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391767261.161:7795): pid=3279 uid=0 auid=0 ses=747 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391767261.161:7796): pid=3279 uid=0 auid=0 ses=747 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391767801.171:7797): pid=3634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391767801.171:7798): pid=3634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391767801.171:7799): login pid=3634 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=748 >type=USER_START msg=audit(1391767801.171:7800): pid=3634 uid=0 auid=0 ses=748 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391767801.171:7801): pid=3634 uid=0 auid=0 ses=748 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391767801.181:7802): pid=3634 uid=0 auid=0 ses=748 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391767801.181:7803): pid=3634 uid=0 auid=0 ses=748 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391768701.191:7804): pid=4182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391768701.191:7805): pid=4182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391768701.191:7806): login pid=4182 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=749 >type=USER_START msg=audit(1391768701.201:7807): pid=4182 uid=0 auid=0 ses=749 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391768701.201:7808): pid=4182 uid=0 auid=0 ses=749 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391768701.201:7809): pid=4182 uid=0 auid=0 ses=749 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391768701.201:7810): pid=4182 uid=0 auid=0 ses=749 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391769601.212:7811): pid=4731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391769601.212:7812): pid=4731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391769601.212:7813): login pid=4731 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=750 >type=USER_START msg=audit(1391769601.222:7814): pid=4731 uid=0 auid=0 ses=750 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391769601.222:7815): pid=4731 uid=0 auid=0 ses=750 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391769601.222:7816): pid=4731 uid=0 auid=0 ses=750 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391769601.232:7817): pid=4731 uid=0 auid=0 ses=750 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391770501.242:7818): pid=5278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391770501.242:7819): pid=5278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391770501.242:7820): login pid=5278 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=751 >type=USER_START msg=audit(1391770501.242:7821): pid=5278 uid=0 auid=0 ses=751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391770501.242:7822): pid=5278 uid=0 auid=0 ses=751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391770501.252:7823): pid=5278 uid=0 auid=0 ses=751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391770501.252:7824): pid=5278 uid=0 auid=0 ses=751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391770861.253:7825): pid=5501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391770861.263:7826): pid=5501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391770861.263:7827): login pid=5501 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=752 >type=USER_START msg=audit(1391770861.263:7828): pid=5501 uid=0 auid=0 ses=752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391770861.263:7829): pid=5501 uid=0 auid=0 ses=752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391770861.273:7830): avc: denied { read } for pid=5517 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391770861.273:7830): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff01d86c0 a2=84800 a3=0 items=0 ppid=5515 pid=5517 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=752 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391770861.293:7831): pid=5501 uid=0 auid=0 ses=752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391770861.293:7832): pid=5501 uid=0 auid=0 ses=752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391771401.303:7833): pid=5856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391771401.303:7834): pid=5856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391771401.303:7835): login pid=5856 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=753 >type=USER_START msg=audit(1391771401.303:7836): pid=5856 uid=0 auid=0 ses=753 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391771401.303:7837): pid=5856 uid=0 auid=0 ses=753 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391771401.313:7838): pid=5856 uid=0 auid=0 ses=753 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391771401.313:7839): pid=5856 uid=0 auid=0 ses=753 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391772301.323:7840): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391772301.323:7841): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391772301.323:7842): login pid=6404 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=754 >type=USER_START msg=audit(1391772301.323:7843): pid=6404 uid=0 auid=0 ses=754 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391772301.323:7844): pid=6404 uid=0 auid=0 ses=754 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391772301.333:7845): pid=6404 uid=0 auid=0 ses=754 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391772301.333:7846): pid=6404 uid=0 auid=0 ses=754 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391773201.344:7847): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391773201.344:7848): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391773201.344:7849): login pid=6952 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=755 >type=USER_START msg=audit(1391773201.344:7850): pid=6952 uid=0 auid=0 ses=755 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391773201.354:7851): pid=6952 uid=0 auid=0 ses=755 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391773201.354:7852): pid=6952 uid=0 auid=0 ses=755 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391773201.354:7853): pid=6952 uid=0 auid=0 ses=755 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391774101.365:7854): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391774101.365:7855): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391774101.365:7856): login pid=7500 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=756 >type=USER_START msg=audit(1391774101.375:7857): pid=7500 uid=0 auid=0 ses=756 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391774101.375:7858): pid=7500 uid=0 auid=0 ses=756 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391774101.375:7859): pid=7500 uid=0 auid=0 ses=756 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391774101.385:7860): pid=7500 uid=0 auid=0 ses=756 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391774461.385:7861): pid=7723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391774461.385:7862): pid=7723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391774461.385:7863): login pid=7723 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=757 >type=USER_START msg=audit(1391774461.395:7864): pid=7723 uid=0 auid=0 ses=757 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391774461.395:7865): pid=7723 uid=0 auid=0 ses=757 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391774461.405:7866): avc: denied { read } for pid=7739 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391774461.405:7866): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc3a13f30 a2=84800 a3=0 items=0 ppid=7737 pid=7739 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=757 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391774461.425:7867): pid=7723 uid=0 auid=0 ses=757 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391774461.425:7868): pid=7723 uid=0 auid=0 ses=757 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391775001.435:7869): pid=8080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391775001.435:7870): pid=8080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391775001.435:7871): login pid=8080 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=758 >type=USER_START msg=audit(1391775001.435:7872): pid=8080 uid=0 auid=0 ses=758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391775001.435:7873): pid=8080 uid=0 auid=0 ses=758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391775001.445:7874): pid=8080 uid=0 auid=0 ses=758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391775001.445:7875): pid=8080 uid=0 auid=0 ses=758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391775901.446:7876): pid=8629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391775901.446:7877): pid=8629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391775901.446:7878): login pid=8629 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=759 >type=USER_START msg=audit(1391775901.446:7879): pid=8629 uid=0 auid=0 ses=759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391775901.446:7880): pid=8629 uid=0 auid=0 ses=759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391775901.456:7881): pid=8629 uid=0 auid=0 ses=759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391775901.456:7882): pid=8629 uid=0 auid=0 ses=759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391776801.466:7883): pid=9184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391776801.466:7884): pid=9184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391776801.466:7885): login pid=9184 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=760 >type=USER_START msg=audit(1391776801.476:7886): pid=9184 uid=0 auid=0 ses=760 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391776801.476:7887): pid=9184 uid=0 auid=0 ses=760 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391776801.476:7888): pid=9184 uid=0 auid=0 ses=760 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391776801.486:7889): pid=9184 uid=0 auid=0 ses=760 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391777701.497:7890): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391777701.497:7891): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391777701.497:7892): login pid=9735 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=761 >type=USER_START msg=audit(1391777701.497:7893): pid=9735 uid=0 auid=0 ses=761 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391777701.497:7894): pid=9735 uid=0 auid=0 ses=761 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391777701.507:7895): pid=9735 uid=0 auid=0 ses=761 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391777701.507:7896): pid=9735 uid=0 auid=0 ses=761 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391778061.517:7897): pid=9958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391778061.517:7898): pid=9958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391778061.517:7899): login pid=9958 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=762 >type=USER_START msg=audit(1391778061.517:7900): pid=9958 uid=0 auid=0 ses=762 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391778061.517:7901): pid=9958 uid=0 auid=0 ses=762 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391778061.537:7902): avc: denied { read } for pid=9974 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391778061.537:7902): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcda23a30 a2=84800 a3=0 items=0 ppid=9972 pid=9974 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=762 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391778061.547:7903): pid=9958 uid=0 auid=0 ses=762 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391778061.547:7904): pid=9958 uid=0 auid=0 ses=762 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391778601.557:7905): pid=10315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391778601.557:7906): pid=10315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391778601.557:7907): login pid=10315 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=763 >type=USER_START msg=audit(1391778601.557:7908): pid=10315 uid=0 auid=0 ses=763 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391778601.557:7909): pid=10315 uid=0 auid=0 ses=763 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391778601.567:7910): pid=10315 uid=0 auid=0 ses=763 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391778601.567:7911): pid=10315 uid=0 auid=0 ses=763 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391779501.578:7912): pid=10862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391779501.578:7913): pid=10862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391779501.578:7914): login pid=10862 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=764 >type=USER_START msg=audit(1391779501.588:7915): pid=10862 uid=0 auid=0 ses=764 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391779501.588:7916): pid=10862 uid=0 auid=0 ses=764 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391779501.588:7917): pid=10862 uid=0 auid=0 ses=764 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391779501.588:7918): pid=10862 uid=0 auid=0 ses=764 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391780401.608:7919): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391780401.608:7920): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391780401.608:7921): login pid=11411 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=765 >type=USER_START msg=audit(1391780401.608:7922): pid=11411 uid=0 auid=0 ses=765 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391780401.608:7923): pid=11411 uid=0 auid=0 ses=765 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391780401.618:7924): pid=11411 uid=0 auid=0 ses=765 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391780401.618:7925): pid=11411 uid=0 auid=0 ses=765 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391781301.629:7926): pid=11963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391781301.629:7927): pid=11963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391781301.629:7928): login pid=11963 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=766 >type=USER_START msg=audit(1391781301.629:7929): pid=11963 uid=0 auid=0 ses=766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391781301.629:7930): pid=11963 uid=0 auid=0 ses=766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391781301.639:7931): pid=11963 uid=0 auid=0 ses=766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391781301.639:7932): pid=11963 uid=0 auid=0 ses=766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391781661.649:7933): pid=12184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391781661.649:7934): pid=12184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391781661.649:7935): login pid=12184 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=767 >type=USER_START msg=audit(1391781661.649:7936): pid=12184 uid=0 auid=0 ses=767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391781661.649:7937): pid=12184 uid=0 auid=0 ses=767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391781661.669:7938): avc: denied { read } for pid=12200 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391781661.669:7938): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff2653ef0 a2=84800 a3=0 items=0 ppid=12198 pid=12200 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=767 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391781661.689:7939): pid=12184 uid=0 auid=0 ses=767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391781661.689:7940): pid=12184 uid=0 auid=0 ses=767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391782201.699:7941): pid=12541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391782201.699:7942): pid=12541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391782201.699:7943): login pid=12541 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=768 >type=USER_START msg=audit(1391782201.699:7944): pid=12541 uid=0 auid=0 ses=768 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391782201.699:7945): pid=12541 uid=0 auid=0 ses=768 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391782201.709:7946): pid=12541 uid=0 auid=0 ses=768 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391782201.709:7947): pid=12541 uid=0 auid=0 ses=768 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391783101.720:7948): pid=13095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391783101.720:7949): pid=13095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391783101.720:7950): login pid=13095 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=769 >type=USER_START msg=audit(1391783101.720:7951): pid=13095 uid=0 auid=0 ses=769 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391783101.720:7952): pid=13095 uid=0 auid=0 ses=769 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391783101.730:7953): pid=13095 uid=0 auid=0 ses=769 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391783101.730:7954): pid=13095 uid=0 auid=0 ses=769 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391784001.740:7955): pid=13646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391784001.740:7956): pid=13646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391784001.740:7957): login pid=13646 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=770 >type=USER_START msg=audit(1391784001.750:7958): pid=13646 uid=0 auid=0 ses=770 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391784001.750:7959): pid=13646 uid=0 auid=0 ses=770 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391784001.750:7960): pid=13646 uid=0 auid=0 ses=770 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391784001.750:7961): pid=13646 uid=0 auid=0 ses=770 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391784901.771:7962): pid=14194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391784901.771:7963): pid=14194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391784901.771:7964): login pid=14194 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=771 >type=USER_START msg=audit(1391784901.771:7965): pid=14194 uid=0 auid=0 ses=771 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391784901.771:7966): pid=14194 uid=0 auid=0 ses=771 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391784901.781:7967): pid=14194 uid=0 auid=0 ses=771 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391784901.781:7968): pid=14194 uid=0 auid=0 ses=771 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391785261.791:7969): pid=14415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391785261.791:7970): pid=14415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391785261.791:7971): login pid=14415 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=772 >type=USER_START msg=audit(1391785261.791:7972): pid=14415 uid=0 auid=0 ses=772 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391785261.791:7973): pid=14415 uid=0 auid=0 ses=772 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391785261.811:7974): avc: denied { read } for pid=14431 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391785261.811:7974): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffeaa3dc60 a2=84800 a3=0 items=0 ppid=14429 pid=14431 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=772 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391785261.821:7975): pid=14415 uid=0 auid=0 ses=772 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391785261.821:7976): pid=14415 uid=0 auid=0 ses=772 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391785801.832:7977): pid=14774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391785801.832:7978): pid=14774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391785801.832:7979): login pid=14774 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=773 >type=USER_START msg=audit(1391785801.832:7980): pid=14774 uid=0 auid=0 ses=773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391785801.832:7981): pid=14774 uid=0 auid=0 ses=773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391785801.842:7982): pid=14774 uid=0 auid=0 ses=773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391785801.842:7983): pid=14774 uid=0 auid=0 ses=773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391786701.852:7984): pid=15321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391786701.852:7985): pid=15321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391786701.852:7986): login pid=15321 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=774 >type=USER_START msg=audit(1391786701.852:7987): pid=15321 uid=0 auid=0 ses=774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391786701.862:7988): pid=15321 uid=0 auid=0 ses=774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391786701.862:7989): pid=15321 uid=0 auid=0 ses=774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391786701.862:7990): pid=15321 uid=0 auid=0 ses=774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391787601.873:7991): pid=15869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391787601.873:7992): pid=15869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391787601.873:7993): login pid=15869 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=775 >type=USER_START msg=audit(1391787601.883:7994): pid=15869 uid=0 auid=0 ses=775 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391787601.883:7995): pid=15869 uid=0 auid=0 ses=775 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391787601.893:7996): pid=15869 uid=0 auid=0 ses=775 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391787601.893:7997): pid=15869 uid=0 auid=0 ses=775 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391788501.903:7998): pid=16418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391788501.903:7999): pid=16418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391788501.903:8000): login pid=16418 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=776 >type=USER_START msg=audit(1391788501.903:8001): pid=16418 uid=0 auid=0 ses=776 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391788501.903:8002): pid=16418 uid=0 auid=0 ses=776 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391788501.913:8003): pid=16418 uid=0 auid=0 ses=776 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391788501.913:8004): pid=16418 uid=0 auid=0 ses=776 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1391788690.323:8005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391788690.323:8006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391788861.923:8007): pid=16642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391788861.923:8008): pid=16642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391788861.923:8009): login pid=16642 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=777 >type=USER_START msg=audit(1391788861.923:8010): pid=16642 uid=0 auid=0 ses=777 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391788861.923:8011): pid=16642 uid=0 auid=0 ses=777 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391788861.943:8012): avc: denied { read } for pid=16659 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391788861.943:8012): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd11636e0 a2=84800 a3=0 items=0 ppid=16657 pid=16659 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=777 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391788861.963:8013): pid=16642 uid=0 auid=0 ses=777 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391788861.963:8014): pid=16642 uid=0 auid=0 ses=777 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391789401.974:8015): pid=17002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391789401.974:8016): pid=17002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391789401.974:8017): login pid=17002 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=778 >type=USER_START msg=audit(1391789401.984:8018): pid=17002 uid=0 auid=0 ses=778 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391789401.984:8019): pid=17002 uid=0 auid=0 ses=778 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391789401.984:8020): pid=17002 uid=0 auid=0 ses=778 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391789401.994:8021): pid=17002 uid=0 auid=0 ses=778 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391790302.004:8022): pid=17548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391790302.004:8023): pid=17548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391790302.004:8024): login pid=17548 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=779 >type=USER_START msg=audit(1391790302.004:8025): pid=17548 uid=0 auid=0 ses=779 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391790302.004:8026): pid=17548 uid=0 auid=0 ses=779 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391790302.014:8027): pid=17548 uid=0 auid=0 ses=779 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391790302.014:8028): pid=17548 uid=0 auid=0 ses=779 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391791201.025:8029): pid=18109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391791201.025:8030): pid=18109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391791201.025:8031): login pid=18109 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=780 >type=USER_START msg=audit(1391791201.025:8032): pid=18109 uid=0 auid=0 ses=780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391791201.035:8033): pid=18109 uid=0 auid=0 ses=780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391791201.035:8034): pid=18109 uid=0 auid=0 ses=780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391791201.035:8035): pid=18109 uid=0 auid=0 ses=780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391792101.035:8036): pid=18692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391792101.035:8037): pid=18692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391792101.035:8038): login pid=18692 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=781 >type=USER_START msg=audit(1391792101.045:8039): pid=18692 uid=0 auid=0 ses=781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391792101.045:8040): pid=18692 uid=0 auid=0 ses=781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391792101.055:8041): pid=18692 uid=0 auid=0 ses=781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391792101.055:8042): pid=18692 uid=0 auid=0 ses=781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391792461.065:8043): pid=18913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391792461.065:8044): pid=18913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391792461.065:8045): login pid=18913 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=782 >type=USER_START msg=audit(1391792461.065:8046): pid=18913 uid=0 auid=0 ses=782 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391792461.065:8047): pid=18913 uid=0 auid=0 ses=782 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391792461.085:8048): avc: denied { read } for pid=18929 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391792461.085:8048): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc36ec800 a2=84800 a3=0 items=0 ppid=18927 pid=18929 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=782 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391792461.095:8049): pid=18913 uid=0 auid=0 ses=782 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391792461.095:8050): pid=18913 uid=0 auid=0 ses=782 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391793001.106:8051): pid=19270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391793001.106:8052): pid=19270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391793001.106:8053): login pid=19270 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=783 >type=USER_START msg=audit(1391793001.106:8054): pid=19270 uid=0 auid=0 ses=783 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391793001.106:8055): pid=19270 uid=0 auid=0 ses=783 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391793001.116:8056): pid=19270 uid=0 auid=0 ses=783 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391793001.116:8057): pid=19270 uid=0 auid=0 ses=783 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391793901.126:8058): pid=19817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391793901.126:8059): pid=19817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391793901.126:8060): login pid=19817 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=784 >type=USER_START msg=audit(1391793901.136:8061): pid=19817 uid=0 auid=0 ses=784 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391793901.136:8062): pid=19817 uid=0 auid=0 ses=784 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391793901.136:8063): pid=19817 uid=0 auid=0 ses=784 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391793901.136:8064): pid=19817 uid=0 auid=0 ses=784 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391794801.147:8065): pid=20367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391794801.147:8066): pid=20367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391794801.147:8067): login pid=20367 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=785 >type=USER_START msg=audit(1391794801.157:8068): pid=20367 uid=0 auid=0 ses=785 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391794801.157:8069): pid=20367 uid=0 auid=0 ses=785 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391794801.167:8070): pid=20367 uid=0 auid=0 ses=785 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391794801.167:8071): pid=20367 uid=0 auid=0 ses=785 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391795701.177:8072): pid=20916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391795701.177:8073): pid=20916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391795701.177:8074): login pid=20916 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=786 >type=USER_START msg=audit(1391795701.177:8075): pid=20916 uid=0 auid=0 ses=786 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391795701.177:8076): pid=20916 uid=0 auid=0 ses=786 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391795701.187:8077): pid=20916 uid=0 auid=0 ses=786 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391795701.187:8078): pid=20916 uid=0 auid=0 ses=786 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391796061.198:8079): pid=21139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391796061.198:8080): pid=21139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391796061.198:8081): login pid=21139 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=787 >type=USER_START msg=audit(1391796061.198:8082): pid=21139 uid=0 auid=0 ses=787 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391796061.198:8083): pid=21139 uid=0 auid=0 ses=787 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391796061.218:8084): avc: denied { read } for pid=21155 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391796061.218:8084): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe1e60900 a2=84800 a3=0 items=0 ppid=21153 pid=21155 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=787 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391796061.228:8085): pid=21139 uid=0 auid=0 ses=787 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391796061.228:8086): pid=21139 uid=0 auid=0 ses=787 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391796601.238:8087): pid=21495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391796601.238:8088): pid=21495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391796601.238:8089): login pid=21495 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=788 >type=USER_START msg=audit(1391796601.238:8090): pid=21495 uid=0 auid=0 ses=788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391796601.238:8091): pid=21495 uid=0 auid=0 ses=788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391796601.248:8092): pid=21495 uid=0 auid=0 ses=788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391796601.248:8093): pid=21495 uid=0 auid=0 ses=788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391797501.258:8094): pid=22044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391797501.258:8095): pid=22044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391797501.258:8096): login pid=22044 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=789 >type=USER_START msg=audit(1391797501.258:8097): pid=22044 uid=0 auid=0 ses=789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391797501.268:8098): pid=22044 uid=0 auid=0 ses=789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391797501.268:8099): pid=22044 uid=0 auid=0 ses=789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391797501.268:8100): pid=22044 uid=0 auid=0 ses=789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391798401.279:8101): pid=22594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391798401.279:8102): pid=22594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391798401.279:8103): login pid=22594 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=790 >type=USER_START msg=audit(1391798401.289:8104): pid=22594 uid=0 auid=0 ses=790 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391798401.289:8105): pid=22594 uid=0 auid=0 ses=790 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391798401.289:8106): pid=22594 uid=0 auid=0 ses=790 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391798401.299:8107): pid=22594 uid=0 auid=0 ses=790 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391799301.310:8108): pid=23143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391799301.310:8109): pid=23143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391799301.310:8110): login pid=23143 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=791 >type=USER_START msg=audit(1391799301.310:8111): pid=23143 uid=0 auid=0 ses=791 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391799301.310:8112): pid=23143 uid=0 auid=0 ses=791 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391799301.320:8113): pid=23143 uid=0 auid=0 ses=791 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391799301.320:8114): pid=23143 uid=0 auid=0 ses=791 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391799661.320:8115): pid=23365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391799661.330:8116): pid=23365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391799661.330:8117): login pid=23365 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=792 >type=USER_START msg=audit(1391799661.330:8118): pid=23365 uid=0 auid=0 ses=792 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391799661.330:8119): pid=23365 uid=0 auid=0 ses=792 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391799661.350:8120): avc: denied { read } for pid=23381 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391799661.350:8120): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd6a70840 a2=84800 a3=0 items=0 ppid=23379 pid=23381 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=792 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391799661.360:8121): pid=23365 uid=0 auid=0 ses=792 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391799661.360:8122): pid=23365 uid=0 auid=0 ses=792 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391800201.370:8123): pid=23723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391800201.370:8124): pid=23723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391800201.370:8125): login pid=23723 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=793 >type=USER_START msg=audit(1391800201.370:8126): pid=23723 uid=0 auid=0 ses=793 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391800201.370:8127): pid=23723 uid=0 auid=0 ses=793 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391800201.380:8128): pid=23723 uid=0 auid=0 ses=793 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391800201.380:8129): pid=23723 uid=0 auid=0 ses=793 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391801101.391:8130): pid=24271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391801101.391:8131): pid=24271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391801101.391:8132): login pid=24271 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=794 >type=USER_START msg=audit(1391801101.401:8133): pid=24271 uid=0 auid=0 ses=794 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391801101.401:8134): pid=24271 uid=0 auid=0 ses=794 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391801101.401:8135): pid=24271 uid=0 auid=0 ses=794 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391801101.401:8136): pid=24271 uid=0 auid=0 ses=794 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391802001.411:8137): pid=24818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391802001.411:8138): pid=24818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391802001.411:8139): login pid=24818 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=795 >type=USER_START msg=audit(1391802001.421:8140): pid=24818 uid=0 auid=0 ses=795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391802001.421:8141): pid=24818 uid=0 auid=0 ses=795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391802001.421:8142): pid=24818 uid=0 auid=0 ses=795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391802001.431:8143): pid=24818 uid=0 auid=0 ses=795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391802901.442:8144): pid=25368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391802901.442:8145): pid=25368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391802901.442:8146): login pid=25368 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=796 >type=USER_START msg=audit(1391802901.442:8147): pid=25368 uid=0 auid=0 ses=796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391802901.442:8148): pid=25368 uid=0 auid=0 ses=796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391802901.452:8149): pid=25368 uid=0 auid=0 ses=796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391802901.452:8150): pid=25368 uid=0 auid=0 ses=796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391803261.452:8151): pid=25595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391803261.452:8152): pid=25595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391803261.452:8153): login pid=25595 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=797 >type=USER_START msg=audit(1391803261.462:8154): pid=25595 uid=0 auid=0 ses=797 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391803261.462:8155): pid=25595 uid=0 auid=0 ses=797 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391803261.472:8156): avc: denied { read } for pid=25611 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391803261.472:8156): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc80ca1b0 a2=84800 a3=0 items=0 ppid=25609 pid=25611 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=797 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391803261.492:8157): pid=25595 uid=0 auid=0 ses=797 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391803261.492:8158): pid=25595 uid=0 auid=0 ses=797 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391803801.502:8159): pid=25951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391803801.502:8160): pid=25951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391803801.502:8161): login pid=25951 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=798 >type=USER_START msg=audit(1391803801.512:8162): pid=25951 uid=0 auid=0 ses=798 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391803801.512:8163): pid=25951 uid=0 auid=0 ses=798 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391803801.512:8164): pid=25951 uid=0 auid=0 ses=798 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391803801.512:8165): pid=25951 uid=0 auid=0 ses=798 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391804701.523:8166): pid=26497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391804701.523:8167): pid=26497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391804701.533:8168): login pid=26497 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=799 >type=USER_START msg=audit(1391804701.533:8169): pid=26497 uid=0 auid=0 ses=799 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391804701.533:8170): pid=26497 uid=0 auid=0 ses=799 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391804701.533:8171): pid=26497 uid=0 auid=0 ses=799 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391804701.543:8172): pid=26497 uid=0 auid=0 ses=799 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391805601.553:8173): pid=27046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391805601.553:8174): pid=27046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391805601.553:8175): login pid=27046 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=800 >type=USER_START msg=audit(1391805601.553:8176): pid=27046 uid=0 auid=0 ses=800 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391805601.553:8177): pid=27046 uid=0 auid=0 ses=800 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391805601.563:8178): pid=27046 uid=0 auid=0 ses=800 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391805601.563:8179): pid=27046 uid=0 auid=0 ses=800 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391806501.574:8180): pid=27598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391806501.574:8181): pid=27598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391806501.574:8182): login pid=27598 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=801 >type=USER_START msg=audit(1391806501.574:8183): pid=27598 uid=0 auid=0 ses=801 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391806501.574:8184): pid=27598 uid=0 auid=0 ses=801 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391806501.584:8185): pid=27598 uid=0 auid=0 ses=801 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391806501.584:8186): pid=27598 uid=0 auid=0 ses=801 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391806861.594:8187): pid=27820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391806861.594:8188): pid=27820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391806861.594:8189): login pid=27820 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=802 >type=USER_START msg=audit(1391806861.594:8190): pid=27820 uid=0 auid=0 ses=802 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391806861.594:8191): pid=27820 uid=0 auid=0 ses=802 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391806861.614:8192): avc: denied { read } for pid=27836 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391806861.614:8192): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffeb0e6790 a2=84800 a3=0 items=0 ppid=27834 pid=27836 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=802 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391806861.634:8193): pid=27820 uid=0 auid=0 ses=802 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391806861.634:8194): pid=27820 uid=0 auid=0 ses=802 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391807401.644:8195): pid=28178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391807401.644:8196): pid=28178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391807401.644:8197): login pid=28178 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=803 >type=USER_START msg=audit(1391807401.644:8198): pid=28178 uid=0 auid=0 ses=803 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391807401.644:8199): pid=28178 uid=0 auid=0 ses=803 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391807401.654:8200): pid=28178 uid=0 auid=0 ses=803 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391807401.654:8201): pid=28178 uid=0 auid=0 ses=803 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391808301.665:8202): pid=28725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391808301.665:8203): pid=28725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391808301.665:8204): login pid=28725 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=804 >type=USER_START msg=audit(1391808301.675:8205): pid=28725 uid=0 auid=0 ses=804 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391808301.675:8206): pid=28725 uid=0 auid=0 ses=804 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391808301.675:8207): pid=28725 uid=0 auid=0 ses=804 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391808301.675:8208): pid=28725 uid=0 auid=0 ses=804 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391809201.675:8209): pid=29275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391809201.675:8210): pid=29275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391809201.685:8211): login pid=29275 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=805 >type=USER_START msg=audit(1391809201.685:8212): pid=29275 uid=0 auid=0 ses=805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391809201.685:8213): pid=29275 uid=0 auid=0 ses=805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391809201.695:8214): pid=29275 uid=0 auid=0 ses=805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391809201.695:8215): pid=29275 uid=0 auid=0 ses=805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391810101.706:8216): pid=29824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391810101.706:8217): pid=29824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391810101.706:8218): login pid=29824 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=806 >type=USER_START msg=audit(1391810101.706:8219): pid=29824 uid=0 auid=0 ses=806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391810101.706:8220): pid=29824 uid=0 auid=0 ses=806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391810101.716:8221): pid=29824 uid=0 auid=0 ses=806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391810101.716:8222): pid=29824 uid=0 auid=0 ses=806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391810461.726:8223): pid=30045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391810461.726:8224): pid=30045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391810461.726:8225): login pid=30045 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=807 >type=USER_START msg=audit(1391810461.726:8226): pid=30045 uid=0 auid=0 ses=807 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391810461.726:8227): pid=30045 uid=0 auid=0 ses=807 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391810461.746:8228): avc: denied { read } for pid=30061 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391810461.746:8228): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc4f2f740 a2=84800 a3=0 items=0 ppid=30059 pid=30061 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=807 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391810461.756:8229): pid=30045 uid=0 auid=0 ses=807 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391810461.756:8230): pid=30045 uid=0 auid=0 ses=807 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391811001.766:8231): pid=30403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391811001.766:8232): pid=30403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391811001.766:8233): login pid=30403 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=808 >type=USER_START msg=audit(1391811001.766:8234): pid=30403 uid=0 auid=0 ses=808 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391811001.766:8235): pid=30403 uid=0 auid=0 ses=808 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391811001.776:8236): pid=30403 uid=0 auid=0 ses=808 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391811001.776:8237): pid=30403 uid=0 auid=0 ses=808 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391811901.787:8238): pid=30950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391811901.787:8239): pid=30950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391811901.787:8240): login pid=30950 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=809 >type=USER_START msg=audit(1391811901.787:8241): pid=30950 uid=0 auid=0 ses=809 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391811901.787:8242): pid=30950 uid=0 auid=0 ses=809 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391811901.797:8243): pid=30950 uid=0 auid=0 ses=809 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391811901.797:8244): pid=30950 uid=0 auid=0 ses=809 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391812801.808:8245): pid=31497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391812801.808:8246): pid=31497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391812801.808:8247): login pid=31497 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=810 >type=USER_START msg=audit(1391812801.808:8248): pid=31497 uid=0 auid=0 ses=810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391812801.808:8249): pid=31497 uid=0 auid=0 ses=810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391812801.818:8250): pid=31497 uid=0 auid=0 ses=810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391812801.818:8251): pid=31497 uid=0 auid=0 ses=810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391813701.828:8252): pid=32046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391813701.828:8253): pid=32046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391813701.828:8254): login pid=32046 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=811 >type=USER_START msg=audit(1391813701.828:8255): pid=32046 uid=0 auid=0 ses=811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391813701.828:8256): pid=32046 uid=0 auid=0 ses=811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391813701.838:8257): pid=32046 uid=0 auid=0 ses=811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391813701.838:8258): pid=32046 uid=0 auid=0 ses=811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391814061.848:8259): pid=32268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391814061.848:8260): pid=32268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391814061.848:8261): login pid=32268 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=812 >type=USER_START msg=audit(1391814061.848:8262): pid=32268 uid=0 auid=0 ses=812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391814061.848:8263): pid=32268 uid=0 auid=0 ses=812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391814061.868:8264): avc: denied { read } for pid=32284 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391814061.868:8264): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc4f010a0 a2=84800 a3=0 items=0 ppid=32282 pid=32284 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=812 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391814061.878:8265): pid=32268 uid=0 auid=0 ses=812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391814061.878:8266): pid=32268 uid=0 auid=0 ses=812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391814601.889:8267): pid=32626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391814601.889:8268): pid=32626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391814601.889:8269): login pid=32626 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=813 >type=USER_START msg=audit(1391814601.899:8270): pid=32626 uid=0 auid=0 ses=813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391814601.899:8271): pid=32626 uid=0 auid=0 ses=813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391814601.899:8272): pid=32626 uid=0 auid=0 ses=813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391814601.909:8273): pid=32626 uid=0 auid=0 ses=813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391815501.919:8274): pid=33175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391815501.919:8275): pid=33175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391815501.919:8276): login pid=33175 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=814 >type=USER_START msg=audit(1391815501.919:8277): pid=33175 uid=0 auid=0 ses=814 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391815501.919:8278): pid=33175 uid=0 auid=0 ses=814 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391815501.929:8279): pid=33175 uid=0 auid=0 ses=814 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391815501.929:8280): pid=33175 uid=0 auid=0 ses=814 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391816401.940:8281): pid=33727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391816401.940:8282): pid=33727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391816401.940:8283): login pid=33727 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=815 >type=USER_START msg=audit(1391816401.940:8284): pid=33727 uid=0 auid=0 ses=815 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391816401.940:8285): pid=33727 uid=0 auid=0 ses=815 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391816401.950:8286): pid=33727 uid=0 auid=0 ses=815 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391816401.950:8287): pid=33727 uid=0 auid=0 ses=815 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391817301.960:8288): pid=34278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391817301.960:8289): pid=34278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391817301.960:8290): login pid=34278 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=816 >type=USER_START msg=audit(1391817301.960:8291): pid=34278 uid=0 auid=0 ses=816 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391817301.960:8292): pid=34278 uid=0 auid=0 ses=816 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391817301.970:8293): pid=34278 uid=0 auid=0 ses=816 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391817301.970:8294): pid=34278 uid=0 auid=0 ses=816 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391817661.980:8295): pid=34501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391817661.980:8296): pid=34501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391817661.980:8297): login pid=34501 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=817 >type=USER_START msg=audit(1391817661.980:8298): pid=34501 uid=0 auid=0 ses=817 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391817661.980:8299): pid=34501 uid=0 auid=0 ses=817 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391817662.000:8300): avc: denied { read } for pid=34517 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391817662.000:8300): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff72a0700 a2=84800 a3=0 items=0 ppid=34515 pid=34517 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=817 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391817662.010:8301): pid=34501 uid=0 auid=0 ses=817 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391817662.010:8302): pid=34501 uid=0 auid=0 ses=817 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391818201.021:8303): pid=34860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391818201.021:8304): pid=34860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391818201.021:8305): login pid=34860 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=818 >type=USER_START msg=audit(1391818201.031:8306): pid=34860 uid=0 auid=0 ses=818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391818201.031:8307): pid=34860 uid=0 auid=0 ses=818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391818201.031:8308): pid=34860 uid=0 auid=0 ses=818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391818201.031:8309): pid=34860 uid=0 auid=0 ses=818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391819101.041:8310): pid=35407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391819101.041:8311): pid=35407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391819101.041:8312): login pid=35407 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=819 >type=USER_START msg=audit(1391819101.051:8313): pid=35407 uid=0 auid=0 ses=819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391819101.051:8314): pid=35407 uid=0 auid=0 ses=819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391819101.051:8315): pid=35407 uid=0 auid=0 ses=819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391819101.051:8316): pid=35407 uid=0 auid=0 ses=819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391820001.062:8317): pid=35957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391820001.062:8318): pid=35957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391820001.062:8319): login pid=35957 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=820 >type=USER_START msg=audit(1391820001.072:8320): pid=35957 uid=0 auid=0 ses=820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391820001.072:8321): pid=35957 uid=0 auid=0 ses=820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391820001.082:8322): pid=35957 uid=0 auid=0 ses=820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391820001.082:8323): pid=35957 uid=0 auid=0 ses=820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391820901.092:8324): pid=36507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391820901.092:8325): pid=36507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391820901.092:8326): login pid=36507 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=821 >type=USER_START msg=audit(1391820901.092:8327): pid=36507 uid=0 auid=0 ses=821 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391820901.092:8328): pid=36507 uid=0 auid=0 ses=821 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391820901.102:8329): pid=36507 uid=0 auid=0 ses=821 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391820901.102:8330): pid=36507 uid=0 auid=0 ses=821 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391821261.113:8331): pid=36729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391821261.113:8332): pid=36729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391821261.113:8333): login pid=36729 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=822 >type=USER_START msg=audit(1391821261.113:8334): pid=36729 uid=0 auid=0 ses=822 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391821261.113:8335): pid=36729 uid=0 auid=0 ses=822 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391821261.133:8336): avc: denied { read } for pid=36745 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391821261.133:8336): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd575d2d0 a2=84800 a3=0 items=0 ppid=36743 pid=36745 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=822 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391821261.143:8337): pid=36729 uid=0 auid=0 ses=822 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391821261.143:8338): pid=36729 uid=0 auid=0 ses=822 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391821801.153:8339): pid=37084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391821801.153:8340): pid=37084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391821801.153:8341): login pid=37084 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=823 >type=USER_START msg=audit(1391821801.153:8342): pid=37084 uid=0 auid=0 ses=823 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391821801.153:8343): pid=37084 uid=0 auid=0 ses=823 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391821801.163:8344): pid=37084 uid=0 auid=0 ses=823 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391821801.163:8345): pid=37084 uid=0 auid=0 ses=823 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391822701.173:8346): pid=37631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391822701.173:8347): pid=37631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391822701.173:8348): login pid=37631 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=824 >type=USER_START msg=audit(1391822701.183:8349): pid=37631 uid=0 auid=0 ses=824 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391822701.183:8350): pid=37631 uid=0 auid=0 ses=824 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391822701.183:8351): pid=37631 uid=0 auid=0 ses=824 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391822701.183:8352): pid=37631 uid=0 auid=0 ses=824 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391823601.194:8353): pid=38179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391823601.194:8354): pid=38179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391823601.194:8355): login pid=38179 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=825 >type=USER_START msg=audit(1391823601.204:8356): pid=38179 uid=0 auid=0 ses=825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391823601.204:8357): pid=38179 uid=0 auid=0 ses=825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391823601.204:8358): pid=38179 uid=0 auid=0 ses=825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391823601.214:8359): pid=38179 uid=0 auid=0 ses=825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391824501.225:8360): pid=38728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391824501.225:8361): pid=38728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391824501.225:8362): login pid=38728 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=826 >type=USER_START msg=audit(1391824501.225:8363): pid=38728 uid=0 auid=0 ses=826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391824501.225:8364): pid=38728 uid=0 auid=0 ses=826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391824501.235:8365): pid=38728 uid=0 auid=0 ses=826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391824501.235:8366): pid=38728 uid=0 auid=0 ses=826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391824861.245:8367): pid=38952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391824861.245:8368): pid=38952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391824861.245:8369): login pid=38952 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=827 >type=USER_START msg=audit(1391824861.245:8370): pid=38952 uid=0 auid=0 ses=827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391824861.245:8371): pid=38952 uid=0 auid=0 ses=827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391824861.265:8372): avc: denied { read } for pid=38971 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391824861.265:8372): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff03529b0 a2=84800 a3=0 items=0 ppid=38969 pid=38971 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=827 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391824861.275:8373): pid=38952 uid=0 auid=0 ses=827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391824861.285:8374): pid=38952 uid=0 auid=0 ses=827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391825401.285:8375): pid=39310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391825401.285:8376): pid=39310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391825401.285:8377): login pid=39310 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=828 >type=USER_START msg=audit(1391825401.295:8378): pid=39310 uid=0 auid=0 ses=828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391825401.295:8379): pid=39310 uid=0 auid=0 ses=828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391825401.305:8380): pid=39310 uid=0 auid=0 ses=828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391825401.305:8381): pid=39310 uid=0 auid=0 ses=828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391826301.306:8382): pid=39860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391826301.306:8383): pid=39860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391826301.306:8384): login pid=39860 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=829 >type=USER_START msg=audit(1391826301.306:8385): pid=39860 uid=0 auid=0 ses=829 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391826301.306:8386): pid=39860 uid=0 auid=0 ses=829 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391826301.316:8387): pid=39860 uid=0 auid=0 ses=829 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391826301.316:8388): pid=39860 uid=0 auid=0 ses=829 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391827201.326:8389): pid=40409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391827201.326:8390): pid=40409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391827201.326:8391): login pid=40409 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=830 >type=USER_START msg=audit(1391827201.326:8392): pid=40409 uid=0 auid=0 ses=830 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391827201.326:8393): pid=40409 uid=0 auid=0 ses=830 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391827201.336:8394): pid=40409 uid=0 auid=0 ses=830 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391827201.336:8395): pid=40409 uid=0 auid=0 ses=830 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391828101.347:8396): pid=40959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391828101.347:8397): pid=40959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391828101.347:8398): login pid=40959 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=831 >type=USER_START msg=audit(1391828101.347:8399): pid=40959 uid=0 auid=0 ses=831 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391828101.347:8400): pid=40959 uid=0 auid=0 ses=831 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391828101.357:8401): pid=40959 uid=0 auid=0 ses=831 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391828101.357:8402): pid=40959 uid=0 auid=0 ses=831 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391828461.367:8403): pid=41182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391828461.367:8404): pid=41182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391828461.367:8405): login pid=41182 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=832 >type=USER_START msg=audit(1391828461.367:8406): pid=41182 uid=0 auid=0 ses=832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391828461.367:8407): pid=41182 uid=0 auid=0 ses=832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391828461.397:8408): avc: denied { read } for pid=41201 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391828461.397:8408): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd97a0560 a2=84800 a3=0 items=0 ppid=41199 pid=41201 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=832 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391828461.457:8409): pid=41182 uid=0 auid=0 ses=832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391828461.457:8410): pid=41182 uid=0 auid=0 ses=832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391829001.467:8411): pid=41544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391829001.467:8412): pid=41544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391829001.467:8413): login pid=41544 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=833 >type=USER_START msg=audit(1391829001.467:8414): pid=41544 uid=0 auid=0 ses=833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391829001.467:8415): pid=41544 uid=0 auid=0 ses=833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391829001.477:8416): pid=41544 uid=0 auid=0 ses=833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391829001.477:8417): pid=41544 uid=0 auid=0 ses=833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391829901.488:8418): pid=42090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391829901.488:8419): pid=42090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391829901.488:8420): login pid=42090 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=834 >type=USER_START msg=audit(1391829901.498:8421): pid=42090 uid=0 auid=0 ses=834 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391829901.498:8422): pid=42090 uid=0 auid=0 ses=834 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391829901.508:8423): pid=42090 uid=0 auid=0 ses=834 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391829901.508:8424): pid=42090 uid=0 auid=0 ses=834 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391830801.518:8425): pid=42638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391830801.518:8426): pid=42638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391830801.518:8427): login pid=42638 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=835 >type=USER_START msg=audit(1391830801.518:8428): pid=42638 uid=0 auid=0 ses=835 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391830801.518:8429): pid=42638 uid=0 auid=0 ses=835 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391830801.528:8430): pid=42638 uid=0 auid=0 ses=835 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391830801.528:8431): pid=42638 uid=0 auid=0 ses=835 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391831701.539:8432): pid=43189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391831701.539:8433): pid=43189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391831701.539:8434): login pid=43189 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=836 >type=USER_START msg=audit(1391831701.539:8435): pid=43189 uid=0 auid=0 ses=836 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391831701.539:8436): pid=43189 uid=0 auid=0 ses=836 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391831701.549:8437): pid=43189 uid=0 auid=0 ses=836 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391831701.549:8438): pid=43189 uid=0 auid=0 ses=836 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391832061.559:8439): pid=43411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391832061.559:8440): pid=43411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391832061.559:8441): login pid=43411 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=837 >type=USER_START msg=audit(1391832061.559:8442): pid=43411 uid=0 auid=0 ses=837 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391832061.569:8443): pid=43411 uid=0 auid=0 ses=837 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391832061.579:8444): avc: denied { read } for pid=43430 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391832061.579:8444): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff7daf6b0 a2=84800 a3=0 items=0 ppid=43428 pid=43430 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=837 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391832061.599:8445): pid=43411 uid=0 auid=0 ses=837 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391832061.599:8446): pid=43411 uid=0 auid=0 ses=837 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391832601.609:8447): pid=43771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391832601.609:8448): pid=43771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391832601.609:8449): login pid=43771 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=838 >type=USER_START msg=audit(1391832601.609:8450): pid=43771 uid=0 auid=0 ses=838 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391832601.609:8451): pid=43771 uid=0 auid=0 ses=838 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391832601.619:8452): pid=43771 uid=0 auid=0 ses=838 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391832601.619:8453): pid=43771 uid=0 auid=0 ses=838 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391833501.630:8454): pid=44319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391833501.630:8455): pid=44319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391833501.630:8456): login pid=44319 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=839 >type=USER_START msg=audit(1391833501.640:8457): pid=44319 uid=0 auid=0 ses=839 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391833501.640:8458): pid=44319 uid=0 auid=0 ses=839 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391833501.640:8459): pid=44319 uid=0 auid=0 ses=839 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391833501.650:8460): pid=44319 uid=0 auid=0 ses=839 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391834401.660:8461): pid=44868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391834401.660:8462): pid=44868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391834401.660:8463): login pid=44868 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=840 >type=USER_START msg=audit(1391834401.660:8464): pid=44868 uid=0 auid=0 ses=840 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391834401.660:8465): pid=44868 uid=0 auid=0 ses=840 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391834401.670:8466): pid=44868 uid=0 auid=0 ses=840 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391834401.670:8467): pid=44868 uid=0 auid=0 ses=840 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391835301.681:8468): pid=45417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391835301.681:8469): pid=45417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391835301.681:8470): login pid=45417 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=841 >type=USER_START msg=audit(1391835301.681:8471): pid=45417 uid=0 auid=0 ses=841 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391835301.681:8472): pid=45417 uid=0 auid=0 ses=841 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391835301.691:8473): pid=45417 uid=0 auid=0 ses=841 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391835301.691:8474): pid=45417 uid=0 auid=0 ses=841 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391835661.701:8475): pid=45639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391835661.701:8476): pid=45639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391835661.701:8477): login pid=45639 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=842 >type=USER_START msg=audit(1391835661.701:8478): pid=45639 uid=0 auid=0 ses=842 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391835661.701:8479): pid=45639 uid=0 auid=0 ses=842 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391835661.721:8480): avc: denied { read } for pid=45658 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391835661.721:8480): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc43709d0 a2=84800 a3=0 items=0 ppid=45656 pid=45658 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=842 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391835661.741:8481): pid=45639 uid=0 auid=0 ses=842 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391835661.741:8482): pid=45639 uid=0 auid=0 ses=842 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391836201.751:8483): pid=45998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391836201.751:8484): pid=45998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391836201.751:8485): login pid=45998 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=843 >type=USER_START msg=audit(1391836201.751:8486): pid=45998 uid=0 auid=0 ses=843 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391836201.751:8487): pid=45998 uid=0 auid=0 ses=843 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391836201.761:8488): pid=45998 uid=0 auid=0 ses=843 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391836201.761:8489): pid=45998 uid=0 auid=0 ses=843 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391836321.732:8490): avc: denied { read } for pid=46080 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391836321.732:8490): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe293d0c0 a2=84800 a3=0 items=0 ppid=46078 pid=46080 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=842 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1391837101.772:8491): pid=46602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391837101.772:8492): pid=46602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391837101.772:8493): login pid=46602 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=844 >type=USER_START msg=audit(1391837101.782:8494): pid=46602 uid=0 auid=0 ses=844 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391837101.782:8495): pid=46602 uid=0 auid=0 ses=844 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391837101.792:8496): pid=46602 uid=0 auid=0 ses=844 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391837101.792:8497): pid=46602 uid=0 auid=0 ses=844 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391838001.803:8498): pid=47150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391838001.803:8499): pid=47150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391838001.803:8500): login pid=47150 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=845 >type=USER_START msg=audit(1391838001.803:8501): pid=47150 uid=0 auid=0 ses=845 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391838001.813:8502): pid=47150 uid=0 auid=0 ses=845 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391838001.813:8503): pid=47150 uid=0 auid=0 ses=845 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391838001.813:8504): pid=47150 uid=0 auid=0 ses=845 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391838901.823:8505): pid=47700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391838901.823:8506): pid=47700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391838901.823:8507): login pid=47700 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=846 >type=USER_START msg=audit(1391838901.833:8508): pid=47700 uid=0 auid=0 ses=846 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391838901.833:8509): pid=47700 uid=0 auid=0 ses=846 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391838901.843:8510): pid=47700 uid=0 auid=0 ses=846 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391838901.843:8511): pid=47700 uid=0 auid=0 ses=846 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391839261.843:8512): pid=47923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391839261.843:8513): pid=47923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391839261.843:8514): login pid=47923 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=847 >type=USER_START msg=audit(1391839261.853:8515): pid=47923 uid=0 auid=0 ses=847 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391839261.853:8516): pid=47923 uid=0 auid=0 ses=847 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391839261.863:8517): avc: denied { read } for pid=47939 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391839261.863:8517): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcf140d40 a2=84800 a3=0 items=0 ppid=47937 pid=47939 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=847 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391839261.883:8518): pid=47923 uid=0 auid=0 ses=847 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391839261.883:8519): pid=47923 uid=0 auid=0 ses=847 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391839801.894:8520): pid=48282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391839801.894:8521): pid=48282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391839801.894:8522): login pid=48282 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=848 >type=USER_START msg=audit(1391839801.904:8523): pid=48282 uid=0 auid=0 ses=848 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391839801.904:8524): pid=48282 uid=0 auid=0 ses=848 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391839801.904:8525): pid=48282 uid=0 auid=0 ses=848 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391839801.904:8526): pid=48282 uid=0 auid=0 ses=848 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391840701.924:8527): pid=48829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391840701.924:8528): pid=48829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391840701.924:8529): login pid=48829 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=849 >type=USER_START msg=audit(1391840701.924:8530): pid=48829 uid=0 auid=0 ses=849 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391840701.924:8531): pid=48829 uid=0 auid=0 ses=849 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391840701.934:8532): pid=48829 uid=0 auid=0 ses=849 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391840701.934:8533): pid=48829 uid=0 auid=0 ses=849 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391841601.945:8534): pid=49379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391841601.945:8535): pid=49379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391841601.945:8536): login pid=49379 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=850 >type=USER_START msg=audit(1391841601.945:8537): pid=49379 uid=0 auid=0 ses=850 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391841601.945:8538): pid=49379 uid=0 auid=0 ses=850 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391841601.955:8539): pid=49379 uid=0 auid=0 ses=850 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391841601.955:8540): pid=49379 uid=0 auid=0 ses=850 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391842501.955:8541): pid=49929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391842501.955:8542): pid=49929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391842501.955:8543): login pid=49929 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=851 >type=USER_START msg=audit(1391842501.965:8544): pid=49929 uid=0 auid=0 ses=851 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391842501.965:8545): pid=49929 uid=0 auid=0 ses=851 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391842501.965:8546): pid=49929 uid=0 auid=0 ses=851 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391842501.975:8547): pid=49929 uid=0 auid=0 ses=851 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391842861.975:8548): pid=50151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391842861.975:8549): pid=50151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391842861.975:8550): login pid=50151 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=852 >type=USER_START msg=audit(1391842861.985:8551): pid=50151 uid=0 auid=0 ses=852 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391842861.985:8552): pid=50151 uid=0 auid=0 ses=852 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391842861.995:8553): avc: denied { read } for pid=50167 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391842861.995:8553): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd012e8b0 a2=84800 a3=0 items=0 ppid=50165 pid=50167 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=852 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391842862.015:8554): pid=50151 uid=0 auid=0 ses=852 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391842862.015:8555): pid=50151 uid=0 auid=0 ses=852 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391843401.026:8556): pid=50508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391843401.026:8557): pid=50508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391843401.026:8558): login pid=50508 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=853 >type=USER_START msg=audit(1391843401.026:8559): pid=50508 uid=0 auid=0 ses=853 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391843401.026:8560): pid=50508 uid=0 auid=0 ses=853 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391843401.036:8561): pid=50508 uid=0 auid=0 ses=853 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391843401.036:8562): pid=50508 uid=0 auid=0 ses=853 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391844301.046:8563): pid=51056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391844301.046:8564): pid=51056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391844301.046:8565): login pid=51056 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=854 >type=USER_START msg=audit(1391844301.046:8566): pid=51056 uid=0 auid=0 ses=854 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391844301.046:8567): pid=51056 uid=0 auid=0 ses=854 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391844301.056:8568): pid=51056 uid=0 auid=0 ses=854 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391844301.056:8569): pid=51056 uid=0 auid=0 ses=854 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391845201.067:8570): pid=51606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391845201.067:8571): pid=51606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391845201.067:8572): login pid=51606 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=855 >type=USER_START msg=audit(1391845201.077:8573): pid=51606 uid=0 auid=0 ses=855 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391845201.077:8574): pid=51606 uid=0 auid=0 ses=855 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391845201.077:8575): pid=51606 uid=0 auid=0 ses=855 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391845201.087:8576): pid=51606 uid=0 auid=0 ses=855 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391846101.097:8577): pid=52155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391846101.097:8578): pid=52155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391846101.097:8579): login pid=52155 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=856 >type=USER_START msg=audit(1391846101.097:8580): pid=52155 uid=0 auid=0 ses=856 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391846101.097:8581): pid=52155 uid=0 auid=0 ses=856 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391846101.107:8582): pid=52155 uid=0 auid=0 ses=856 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391846101.107:8583): pid=52155 uid=0 auid=0 ses=856 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391846461.118:8584): pid=52379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391846461.118:8585): pid=52379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391846461.118:8586): login pid=52379 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=857 >type=USER_START msg=audit(1391846461.118:8587): pid=52379 uid=0 auid=0 ses=857 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391846461.118:8588): pid=52379 uid=0 auid=0 ses=857 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391846461.138:8589): avc: denied { read } for pid=52395 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391846461.138:8589): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffff625880 a2=84800 a3=0 items=0 ppid=52393 pid=52395 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=857 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391846461.148:8590): pid=52379 uid=0 auid=0 ses=857 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391846461.148:8591): pid=52379 uid=0 auid=0 ses=857 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391847001.158:8592): pid=52735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391847001.158:8593): pid=52735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391847001.158:8594): login pid=52735 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=858 >type=USER_START msg=audit(1391847001.158:8595): pid=52735 uid=0 auid=0 ses=858 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391847001.158:8596): pid=52735 uid=0 auid=0 ses=858 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391847001.168:8597): pid=52735 uid=0 auid=0 ses=858 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391847001.168:8598): pid=52735 uid=0 auid=0 ses=858 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391847901.178:8599): pid=53282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391847901.178:8600): pid=53282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391847901.178:8601): login pid=53282 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=859 >type=USER_START msg=audit(1391847901.188:8602): pid=53282 uid=0 auid=0 ses=859 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391847901.188:8603): pid=53282 uid=0 auid=0 ses=859 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391847901.188:8604): pid=53282 uid=0 auid=0 ses=859 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391847901.188:8605): pid=53282 uid=0 auid=0 ses=859 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391848801.209:8606): pid=53829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391848801.209:8607): pid=53829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391848801.209:8608): login pid=53829 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=860 >type=USER_START msg=audit(1391848801.209:8609): pid=53829 uid=0 auid=0 ses=860 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391848801.209:8610): pid=53829 uid=0 auid=0 ses=860 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391848801.219:8611): pid=53829 uid=0 auid=0 ses=860 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391848801.219:8612): pid=53829 uid=0 auid=0 ses=860 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391849701.229:8613): pid=54378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391849701.229:8614): pid=54378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391849701.229:8615): login pid=54378 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=861 >type=USER_START msg=audit(1391849701.229:8616): pid=54378 uid=0 auid=0 ses=861 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391849701.229:8617): pid=54378 uid=0 auid=0 ses=861 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391849701.239:8618): pid=54378 uid=0 auid=0 ses=861 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391849701.239:8619): pid=54378 uid=0 auid=0 ses=861 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391850061.250:8620): pid=54602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391850061.250:8621): pid=54602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391850061.250:8622): login pid=54602 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=862 >type=USER_START msg=audit(1391850061.250:8623): pid=54602 uid=0 auid=0 ses=862 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391850061.250:8624): pid=54602 uid=0 auid=0 ses=862 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391850061.270:8625): avc: denied { read } for pid=54618 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391850061.270:8625): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff6d802c0 a2=84800 a3=0 items=0 ppid=54616 pid=54618 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=862 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391850061.280:8626): pid=54602 uid=0 auid=0 ses=862 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391850061.280:8627): pid=54602 uid=0 auid=0 ses=862 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391850601.290:8628): pid=54960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391850601.290:8629): pid=54960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391850601.290:8630): login pid=54960 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=863 >type=USER_START msg=audit(1391850601.290:8631): pid=54960 uid=0 auid=0 ses=863 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391850601.300:8632): pid=54960 uid=0 auid=0 ses=863 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391850601.300:8633): pid=54960 uid=0 auid=0 ses=863 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391850601.300:8634): pid=54960 uid=0 auid=0 ses=863 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391851501.311:8635): pid=55506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391851501.311:8636): pid=55506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391851501.311:8637): login pid=55506 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=864 >type=USER_START msg=audit(1391851501.321:8638): pid=55506 uid=0 auid=0 ses=864 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391851501.321:8639): pid=55506 uid=0 auid=0 ses=864 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391851501.321:8640): pid=55506 uid=0 auid=0 ses=864 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391851501.331:8641): pid=55506 uid=0 auid=0 ses=864 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391852401.341:8642): pid=56055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391852401.341:8643): pid=56055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391852401.341:8644): login pid=56055 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=865 >type=USER_START msg=audit(1391852401.341:8645): pid=56055 uid=0 auid=0 ses=865 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391852401.341:8646): pid=56055 uid=0 auid=0 ses=865 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391852401.351:8647): pid=56055 uid=0 auid=0 ses=865 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391852401.351:8648): pid=56055 uid=0 auid=0 ses=865 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391853301.362:8649): pid=56603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391853301.362:8650): pid=56603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391853301.362:8651): login pid=56603 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=866 >type=USER_START msg=audit(1391853301.362:8652): pid=56603 uid=0 auid=0 ses=866 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391853301.362:8653): pid=56603 uid=0 auid=0 ses=866 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391853301.372:8654): pid=56603 uid=0 auid=0 ses=866 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391853301.372:8655): pid=56603 uid=0 auid=0 ses=866 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391853661.382:8656): pid=56827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391853661.382:8657): pid=56827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391853661.382:8658): login pid=56827 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=867 >type=USER_START msg=audit(1391853661.382:8659): pid=56827 uid=0 auid=0 ses=867 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391853661.382:8660): pid=56827 uid=0 auid=0 ses=867 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391853661.402:8661): avc: denied { read } for pid=56843 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391853661.402:8661): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcf082f90 a2=84800 a3=0 items=0 ppid=56841 pid=56843 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=867 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391853661.412:8662): pid=56827 uid=0 auid=0 ses=867 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391853661.412:8663): pid=56827 uid=0 auid=0 ses=867 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391854201.422:8664): pid=57182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391854201.422:8665): pid=57182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391854201.422:8666): login pid=57182 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=868 >type=USER_START msg=audit(1391854201.432:8667): pid=57182 uid=0 auid=0 ses=868 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391854201.432:8668): pid=57182 uid=0 auid=0 ses=868 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391854201.432:8669): pid=57182 uid=0 auid=0 ses=868 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391854201.442:8670): pid=57182 uid=0 auid=0 ses=868 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391855101.453:8671): pid=57730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391855101.453:8672): pid=57730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391855101.453:8673): login pid=57730 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=869 >type=USER_START msg=audit(1391855101.453:8674): pid=57730 uid=0 auid=0 ses=869 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391855101.453:8675): pid=57730 uid=0 auid=0 ses=869 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391855101.463:8676): pid=57730 uid=0 auid=0 ses=869 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391855101.463:8677): pid=57730 uid=0 auid=0 ses=869 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391856001.473:8678): pid=58278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391856001.473:8679): pid=58278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391856001.473:8680): login pid=58278 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=870 >type=USER_START msg=audit(1391856001.473:8681): pid=58278 uid=0 auid=0 ses=870 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391856001.473:8682): pid=58278 uid=0 auid=0 ses=870 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391856001.483:8683): pid=58278 uid=0 auid=0 ses=870 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391856001.483:8684): pid=58278 uid=0 auid=0 ses=870 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391856901.494:8685): pid=58826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391856901.494:8686): pid=58826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391856901.494:8687): login pid=58826 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=871 >type=USER_START msg=audit(1391856901.504:8688): pid=58826 uid=0 auid=0 ses=871 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391856901.504:8689): pid=58826 uid=0 auid=0 ses=871 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391856901.504:8690): pid=58826 uid=0 auid=0 ses=871 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391856901.504:8691): pid=58826 uid=0 auid=0 ses=871 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391857261.514:8692): pid=59049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391857261.514:8693): pid=59049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391857261.514:8694): login pid=59049 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=872 >type=USER_START msg=audit(1391857261.524:8695): pid=59049 uid=0 auid=0 ses=872 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391857261.524:8696): pid=59049 uid=0 auid=0 ses=872 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391857261.534:8697): avc: denied { read } for pid=59065 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391857261.534:8697): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe1f2c220 a2=84800 a3=0 items=0 ppid=59063 pid=59065 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=872 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391857261.554:8698): pid=59049 uid=0 auid=0 ses=872 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391857261.554:8699): pid=59049 uid=0 auid=0 ses=872 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391857801.564:8700): pid=59405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391857801.564:8701): pid=59405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391857801.564:8702): login pid=59405 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=873 >type=USER_START msg=audit(1391857801.574:8703): pid=59405 uid=0 auid=0 ses=873 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391857801.574:8704): pid=59405 uid=0 auid=0 ses=873 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391857801.574:8705): pid=59405 uid=0 auid=0 ses=873 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391857801.584:8706): pid=59405 uid=0 auid=0 ses=873 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391858701.595:8707): pid=59954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391858701.595:8708): pid=59954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391858701.595:8709): login pid=59954 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=874 >type=USER_START msg=audit(1391858701.595:8710): pid=59954 uid=0 auid=0 ses=874 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391858701.595:8711): pid=59954 uid=0 auid=0 ses=874 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391858701.605:8712): pid=59954 uid=0 auid=0 ses=874 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391858701.605:8713): pid=59954 uid=0 auid=0 ses=874 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391859601.605:8714): pid=60502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391859601.605:8715): pid=60502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391859601.605:8716): login pid=60502 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=875 >type=USER_START msg=audit(1391859601.605:8717): pid=60502 uid=0 auid=0 ses=875 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391859601.605:8718): pid=60502 uid=0 auid=0 ses=875 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391859601.615:8719): pid=60502 uid=0 auid=0 ses=875 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391859601.615:8720): pid=60502 uid=0 auid=0 ses=875 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391860501.626:8721): pid=61051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391860501.626:8722): pid=61051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391860501.626:8723): login pid=61051 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=876 >type=USER_START msg=audit(1391860501.626:8724): pid=61051 uid=0 auid=0 ses=876 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391860501.626:8725): pid=61051 uid=0 auid=0 ses=876 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391860501.636:8726): pid=61051 uid=0 auid=0 ses=876 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391860501.636:8727): pid=61051 uid=0 auid=0 ses=876 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391860861.646:8728): pid=61273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391860861.646:8729): pid=61273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391860861.646:8730): login pid=61273 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=877 >type=USER_START msg=audit(1391860861.646:8731): pid=61273 uid=0 auid=0 ses=877 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391860861.646:8732): pid=61273 uid=0 auid=0 ses=877 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391860861.666:8733): avc: denied { read } for pid=61289 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391860861.666:8733): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc6181f10 a2=84800 a3=0 items=0 ppid=61287 pid=61289 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=877 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391860864.916:8734): pid=61273 uid=0 auid=0 ses=877 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391860864.916:8735): pid=61273 uid=0 auid=0 ses=877 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391861401.926:8736): pid=61632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391861401.926:8737): pid=61632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391861401.926:8738): login pid=61632 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=878 >type=USER_START msg=audit(1391861401.936:8739): pid=61632 uid=0 auid=0 ses=878 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391861401.936:8740): pid=61632 uid=0 auid=0 ses=878 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391861401.936:8741): pid=61632 uid=0 auid=0 ses=878 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391861401.946:8742): pid=61632 uid=0 auid=0 ses=878 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391862301.957:8743): pid=62180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391862301.957:8744): pid=62180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391862301.957:8745): login pid=62180 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=879 >type=USER_START msg=audit(1391862301.957:8746): pid=62180 uid=0 auid=0 ses=879 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391862301.957:8747): pid=62180 uid=0 auid=0 ses=879 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391862301.967:8748): pid=62180 uid=0 auid=0 ses=879 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391862301.967:8749): pid=62180 uid=0 auid=0 ses=879 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391863201.978:8750): pid=62727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391863201.978:8751): pid=62727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391863201.978:8752): login pid=62727 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=880 >type=USER_START msg=audit(1391863201.978:8753): pid=62727 uid=0 auid=0 ses=880 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391863201.978:8754): pid=62727 uid=0 auid=0 ses=880 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391863201.988:8755): pid=62727 uid=0 auid=0 ses=880 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391863201.988:8756): pid=62727 uid=0 auid=0 ses=880 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391864101.998:8757): pid=63275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391864101.998:8758): pid=63275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391864101.998:8759): login pid=63275 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=881 >type=USER_START msg=audit(1391864102.008:8760): pid=63275 uid=0 auid=0 ses=881 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391864102.008:8761): pid=63275 uid=0 auid=0 ses=881 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391864102.008:8762): pid=63275 uid=0 auid=0 ses=881 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391864102.008:8763): pid=63275 uid=0 auid=0 ses=881 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391864461.018:8764): pid=63497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391864461.018:8765): pid=63497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391864461.018:8766): login pid=63497 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=882 >type=USER_START msg=audit(1391864461.028:8767): pid=63497 uid=0 auid=0 ses=882 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391864461.028:8768): pid=63497 uid=0 auid=0 ses=882 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391864461.038:8769): avc: denied { read } for pid=63513 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391864461.038:8769): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcb062940 a2=84800 a3=0 items=0 ppid=63511 pid=63513 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=882 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391864461.048:8770): pid=63497 uid=0 auid=0 ses=882 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391864461.058:8771): pid=63497 uid=0 auid=0 ses=882 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391865001.059:8772): pid=63854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391865001.059:8773): pid=63854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391865001.059:8774): login pid=63854 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=883 >type=USER_START msg=audit(1391865001.069:8775): pid=63854 uid=0 auid=0 ses=883 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391865001.069:8776): pid=63854 uid=0 auid=0 ses=883 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391865001.079:8777): pid=63854 uid=0 auid=0 ses=883 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391865001.079:8778): pid=63854 uid=0 auid=0 ses=883 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391865901.089:8779): pid=64401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391865901.089:8780): pid=64401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391865901.089:8781): login pid=64401 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=884 >type=USER_START msg=audit(1391865901.089:8782): pid=64401 uid=0 auid=0 ses=884 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391865901.089:8783): pid=64401 uid=0 auid=0 ses=884 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391865901.099:8784): pid=64401 uid=0 auid=0 ses=884 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391865901.099:8785): pid=64401 uid=0 auid=0 ses=884 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391866801.110:8786): pid=64950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391866801.110:8787): pid=64950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391866801.110:8788): login pid=64950 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=885 >type=USER_START msg=audit(1391866801.110:8789): pid=64950 uid=0 auid=0 ses=885 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391866801.110:8790): pid=64950 uid=0 auid=0 ses=885 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391866801.120:8791): pid=64950 uid=0 auid=0 ses=885 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391866801.120:8792): pid=64950 uid=0 auid=0 ses=885 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391867701.130:8793): pid=65499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391867701.130:8794): pid=65499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391867701.130:8795): login pid=65499 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=886 >type=USER_START msg=audit(1391867701.140:8796): pid=65499 uid=0 auid=0 ses=886 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391867701.140:8797): pid=65499 uid=0 auid=0 ses=886 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391867701.140:8798): pid=65499 uid=0 auid=0 ses=886 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391867701.140:8799): pid=65499 uid=0 auid=0 ses=886 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391868061.150:8800): pid=511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391868061.150:8801): pid=511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391868061.150:8802): login pid=511 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=887 >type=USER_START msg=audit(1391868061.150:8803): pid=511 uid=0 auid=0 ses=887 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391868061.160:8804): pid=511 uid=0 auid=0 ses=887 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391868061.170:8805): avc: denied { read } for pid=529 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391868061.170:8805): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd0b960d0 a2=84800 a3=0 items=0 ppid=527 pid=529 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=887 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391868061.190:8806): pid=511 uid=0 auid=0 ses=887 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391868061.190:8807): pid=511 uid=0 auid=0 ses=887 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391868601.201:8808): pid=911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391868601.201:8809): pid=911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391868601.201:8810): login pid=911 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=888 >type=USER_START msg=audit(1391868601.201:8811): pid=911 uid=0 auid=0 ses=888 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391868601.201:8812): pid=911 uid=0 auid=0 ses=888 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391868601.211:8813): pid=911 uid=0 auid=0 ses=888 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391868601.211:8814): pid=911 uid=0 auid=0 ses=888 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391869501.221:8815): pid=1477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391869501.221:8816): pid=1477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391869501.221:8817): login pid=1477 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=889 >type=USER_START msg=audit(1391869501.231:8818): pid=1477 uid=0 auid=0 ses=889 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391869501.231:8819): pid=1477 uid=0 auid=0 ses=889 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391869501.231:8820): pid=1477 uid=0 auid=0 ses=889 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391869501.241:8821): pid=1477 uid=0 auid=0 ses=889 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391870401.252:8822): pid=2026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391870401.252:8823): pid=2026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391870401.252:8824): login pid=2026 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=890 >type=USER_START msg=audit(1391870401.252:8825): pid=2026 uid=0 auid=0 ses=890 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391870401.252:8826): pid=2026 uid=0 auid=0 ses=890 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391870401.262:8827): pid=2026 uid=0 auid=0 ses=890 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391870401.262:8828): pid=2026 uid=0 auid=0 ses=890 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391871301.272:8829): pid=2585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391871301.272:8830): pid=2585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391871301.272:8831): login pid=2585 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=891 >type=USER_START msg=audit(1391871301.272:8832): pid=2585 uid=0 auid=0 ses=891 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391871301.272:8833): pid=2585 uid=0 auid=0 ses=891 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391871301.282:8834): pid=2585 uid=0 auid=0 ses=891 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391871301.282:8835): pid=2585 uid=0 auid=0 ses=891 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391871661.293:8836): pid=2808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391871661.293:8837): pid=2808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391871661.293:8838): login pid=2808 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=892 >type=USER_START msg=audit(1391871661.293:8839): pid=2808 uid=0 auid=0 ses=892 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391871661.293:8840): pid=2808 uid=0 auid=0 ses=892 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391871661.313:8841): avc: denied { read } for pid=2824 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391871661.313:8841): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcdd88790 a2=84800 a3=0 items=0 ppid=2822 pid=2824 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=892 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391871661.333:8842): pid=2808 uid=0 auid=0 ses=892 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391871661.333:8843): pid=2808 uid=0 auid=0 ses=892 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391872201.343:8844): pid=3164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391872201.343:8845): pid=3164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391872201.343:8846): login pid=3164 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=893 >type=USER_START msg=audit(1391872201.353:8847): pid=3164 uid=0 auid=0 ses=893 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391872201.353:8848): pid=3164 uid=0 auid=0 ses=893 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391872201.353:8849): pid=3164 uid=0 auid=0 ses=893 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391872201.363:8850): pid=3164 uid=0 auid=0 ses=893 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391873101.373:8851): pid=3712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391873101.373:8852): pid=3712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391873101.373:8853): login pid=3712 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=894 >type=USER_START msg=audit(1391873101.373:8854): pid=3712 uid=0 auid=0 ses=894 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391873101.373:8855): pid=3712 uid=0 auid=0 ses=894 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391873101.383:8856): pid=3712 uid=0 auid=0 ses=894 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391873101.383:8857): pid=3712 uid=0 auid=0 ses=894 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391874001.394:8858): pid=4260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391874001.394:8859): pid=4260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391874001.394:8860): login pid=4260 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=895 >type=USER_START msg=audit(1391874001.394:8861): pid=4260 uid=0 auid=0 ses=895 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391874001.394:8862): pid=4260 uid=0 auid=0 ses=895 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391874001.404:8863): pid=4260 uid=0 auid=0 ses=895 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391874001.404:8864): pid=4260 uid=0 auid=0 ses=895 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391874901.414:8865): pid=4808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391874901.414:8866): pid=4808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391874901.414:8867): login pid=4808 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=896 >type=USER_START msg=audit(1391874901.424:8868): pid=4808 uid=0 auid=0 ses=896 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391874901.424:8869): pid=4808 uid=0 auid=0 ses=896 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391874901.424:8870): pid=4808 uid=0 auid=0 ses=896 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391874901.424:8871): pid=4808 uid=0 auid=0 ses=896 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1391875090.335:8872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391875090.335:8873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391875261.435:8874): pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391875261.435:8875): pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391875261.435:8876): login pid=5032 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=897 >type=USER_START msg=audit(1391875261.445:8877): pid=5032 uid=0 auid=0 ses=897 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391875261.445:8878): pid=5032 uid=0 auid=0 ses=897 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391875261.465:8879): avc: denied { read } for pid=5048 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391875261.465:8879): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc7c869a0 a2=84800 a3=0 items=0 ppid=5046 pid=5048 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=897 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391875261.475:8880): pid=5032 uid=0 auid=0 ses=897 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391875261.475:8881): pid=5032 uid=0 auid=0 ses=897 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391875801.485:8882): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391875801.485:8883): pid=5388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391875801.485:8884): login pid=5388 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=898 >type=USER_START msg=audit(1391875801.495:8885): pid=5388 uid=0 auid=0 ses=898 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391875801.495:8886): pid=5388 uid=0 auid=0 ses=898 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391875801.495:8887): pid=5388 uid=0 auid=0 ses=898 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391875801.505:8888): pid=5388 uid=0 auid=0 ses=898 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391876701.506:8889): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391876701.506:8890): pid=5934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391876701.506:8891): login pid=5934 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=899 >type=USER_START msg=audit(1391876701.506:8892): pid=5934 uid=0 auid=0 ses=899 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391876701.506:8893): pid=5934 uid=0 auid=0 ses=899 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391876701.516:8894): pid=5934 uid=0 auid=0 ses=899 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391876701.516:8895): pid=5934 uid=0 auid=0 ses=899 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391877601.526:8896): pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391877601.526:8897): pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391877601.526:8898): login pid=6483 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=900 >type=USER_START msg=audit(1391877601.526:8899): pid=6483 uid=0 auid=0 ses=900 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391877601.526:8900): pid=6483 uid=0 auid=0 ses=900 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391877601.536:8901): pid=6483 uid=0 auid=0 ses=900 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391877601.536:8902): pid=6483 uid=0 auid=0 ses=900 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391878501.547:8903): pid=7034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391878501.547:8904): pid=7034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391878501.547:8905): login pid=7034 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=901 >type=USER_START msg=audit(1391878501.557:8906): pid=7034 uid=0 auid=0 ses=901 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391878501.557:8907): pid=7034 uid=0 auid=0 ses=901 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391878501.557:8908): pid=7034 uid=0 auid=0 ses=901 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391878501.557:8909): pid=7034 uid=0 auid=0 ses=901 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391878861.567:8910): pid=7259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391878861.567:8911): pid=7259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391878861.567:8912): login pid=7259 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=902 >type=USER_START msg=audit(1391878861.577:8913): pid=7259 uid=0 auid=0 ses=902 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391878861.577:8914): pid=7259 uid=0 auid=0 ses=902 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391878861.587:8915): avc: denied { read } for pid=7275 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391878861.587:8915): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffdfab630 a2=84800 a3=0 items=0 ppid=7273 pid=7275 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=902 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391878861.607:8916): pid=7259 uid=0 auid=0 ses=902 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391878861.607:8917): pid=7259 uid=0 auid=0 ses=902 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391879401.617:8918): pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391879401.617:8919): pid=7614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391879401.617:8920): login pid=7614 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=903 >type=USER_START msg=audit(1391879401.627:8921): pid=7614 uid=0 auid=0 ses=903 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391879401.627:8922): pid=7614 uid=0 auid=0 ses=903 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391879401.627:8923): pid=7614 uid=0 auid=0 ses=903 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391879401.637:8924): pid=7614 uid=0 auid=0 ses=903 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391880301.648:8925): pid=8161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391880301.648:8926): pid=8161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391880301.648:8927): login pid=8161 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=904 >type=USER_START msg=audit(1391880301.648:8928): pid=8161 uid=0 auid=0 ses=904 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391880301.648:8929): pid=8161 uid=0 auid=0 ses=904 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391880301.658:8930): pid=8161 uid=0 auid=0 ses=904 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391880301.658:8931): pid=8161 uid=0 auid=0 ses=904 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391881201.668:8932): pid=8713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391881201.668:8933): pid=8713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391881201.668:8934): login pid=8713 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=905 >type=USER_START msg=audit(1391881201.668:8935): pid=8713 uid=0 auid=0 ses=905 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391881201.668:8936): pid=8713 uid=0 auid=0 ses=905 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391881201.678:8937): pid=8713 uid=0 auid=0 ses=905 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391881201.678:8938): pid=8713 uid=0 auid=0 ses=905 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391882101.689:8939): pid=9267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391882101.689:8940): pid=9267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391882101.689:8941): login pid=9267 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=906 >type=USER_START msg=audit(1391882101.699:8942): pid=9267 uid=0 auid=0 ses=906 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391882101.699:8943): pid=9267 uid=0 auid=0 ses=906 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391882101.699:8944): pid=9267 uid=0 auid=0 ses=906 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391882101.699:8945): pid=9267 uid=0 auid=0 ses=906 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391882461.709:8946): pid=9491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391882461.709:8947): pid=9491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391882461.709:8948): login pid=9491 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=907 >type=USER_START msg=audit(1391882461.719:8949): pid=9491 uid=0 auid=0 ses=907 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391882461.719:8950): pid=9491 uid=0 auid=0 ses=907 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391882461.729:8951): avc: denied { read } for pid=9507 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391882461.729:8951): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffddf27d90 a2=84800 a3=0 items=0 ppid=9505 pid=9507 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=907 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391882461.749:8952): pid=9491 uid=0 auid=0 ses=907 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391882461.749:8953): pid=9491 uid=0 auid=0 ses=907 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391883001.759:8954): pid=9847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391883001.759:8955): pid=9847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391883001.759:8956): login pid=9847 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=908 >type=USER_START msg=audit(1391883001.759:8957): pid=9847 uid=0 auid=0 ses=908 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391883001.759:8958): pid=9847 uid=0 auid=0 ses=908 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391883001.769:8959): pid=9847 uid=0 auid=0 ses=908 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391883001.769:8960): pid=9847 uid=0 auid=0 ses=908 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391883901.780:8961): pid=10396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391883901.780:8962): pid=10396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391883901.780:8963): login pid=10396 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=909 >type=USER_START msg=audit(1391883901.790:8964): pid=10396 uid=0 auid=0 ses=909 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391883901.790:8965): pid=10396 uid=0 auid=0 ses=909 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391883901.790:8966): pid=10396 uid=0 auid=0 ses=909 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391883901.800:8967): pid=10396 uid=0 auid=0 ses=909 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391884801.810:8968): pid=10947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391884801.810:8969): pid=10947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391884801.810:8970): login pid=10947 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=910 >type=USER_START msg=audit(1391884801.810:8971): pid=10947 uid=0 auid=0 ses=910 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391884801.810:8972): pid=10947 uid=0 auid=0 ses=910 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391884801.820:8973): pid=10947 uid=0 auid=0 ses=910 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391884801.820:8974): pid=10947 uid=0 auid=0 ses=910 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391885701.831:8975): pid=11498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391885701.831:8976): pid=11498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391885701.831:8977): login pid=11498 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=911 >type=USER_START msg=audit(1391885701.831:8978): pid=11498 uid=0 auid=0 ses=911 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391885701.831:8979): pid=11498 uid=0 auid=0 ses=911 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391885701.841:8980): pid=11498 uid=0 auid=0 ses=911 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391885701.841:8981): pid=11498 uid=0 auid=0 ses=911 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391886061.851:8982): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391886061.851:8983): pid=11719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391886061.851:8984): login pid=11719 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=912 >type=USER_START msg=audit(1391886061.851:8985): pid=11719 uid=0 auid=0 ses=912 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391886061.851:8986): pid=11719 uid=0 auid=0 ses=912 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391886061.871:8987): avc: denied { read } for pid=11735 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391886061.871:8987): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcc158b20 a2=84800 a3=0 items=0 ppid=11733 pid=11735 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=912 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391886061.881:8988): pid=11719 uid=0 auid=0 ses=912 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391886061.881:8989): pid=11719 uid=0 auid=0 ses=912 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391886601.891:8990): pid=12078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391886601.891:8991): pid=12078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391886601.891:8992): login pid=12078 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=913 >type=USER_START msg=audit(1391886601.891:8993): pid=12078 uid=0 auid=0 ses=913 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391886601.891:8994): pid=12078 uid=0 auid=0 ses=913 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391886601.901:8995): pid=12078 uid=0 auid=0 ses=913 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391886601.901:8996): pid=12078 uid=0 auid=0 ses=913 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391887501.912:8997): pid=12624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391887501.912:8998): pid=12624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391887501.912:8999): login pid=12624 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=914 >type=USER_START msg=audit(1391887501.922:9000): pid=12624 uid=0 auid=0 ses=914 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391887501.922:9001): pid=12624 uid=0 auid=0 ses=914 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391887501.922:9002): pid=12624 uid=0 auid=0 ses=914 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391887501.922:9003): pid=12624 uid=0 auid=0 ses=914 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391888401.932:9004): pid=13178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391888401.932:9005): pid=13178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391888401.942:9006): login pid=13178 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=915 >type=USER_START msg=audit(1391888401.942:9007): pid=13178 uid=0 auid=0 ses=915 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391888401.942:9008): pid=13178 uid=0 auid=0 ses=915 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391888401.952:9009): pid=13178 uid=0 auid=0 ses=915 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391888401.952:9010): pid=13178 uid=0 auid=0 ses=915 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391889301.963:9011): pid=13728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391889301.963:9012): pid=13728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391889301.963:9013): login pid=13728 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=916 >type=USER_START msg=audit(1391889301.963:9014): pid=13728 uid=0 auid=0 ses=916 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391889301.963:9015): pid=13728 uid=0 auid=0 ses=916 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391889301.973:9016): pid=13728 uid=0 auid=0 ses=916 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391889301.973:9017): pid=13728 uid=0 auid=0 ses=916 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391889661.983:9018): pid=13949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391889661.983:9019): pid=13949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391889661.983:9020): login pid=13949 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=917 >type=USER_START msg=audit(1391889661.983:9021): pid=13949 uid=0 auid=0 ses=917 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391889661.983:9022): pid=13949 uid=0 auid=0 ses=917 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391889662.003:9023): avc: denied { read } for pid=13965 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391889662.003:9023): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc4528580 a2=84800 a3=0 items=0 ppid=13963 pid=13965 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=917 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391889662.023:9024): pid=13949 uid=0 auid=0 ses=917 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391889662.023:9025): pid=13949 uid=0 auid=0 ses=917 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391890201.034:9026): pid=14306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391890201.034:9027): pid=14306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391890201.034:9028): login pid=14306 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=918 >type=USER_START msg=audit(1391890201.034:9029): pid=14306 uid=0 auid=0 ses=918 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391890201.034:9030): pid=14306 uid=0 auid=0 ses=918 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391890201.044:9031): pid=14306 uid=0 auid=0 ses=918 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391890201.044:9032): pid=14306 uid=0 auid=0 ses=918 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391891101.054:9033): pid=14854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391891101.054:9034): pid=14854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391891101.054:9035): login pid=14854 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=919 >type=USER_START msg=audit(1391891101.054:9036): pid=14854 uid=0 auid=0 ses=919 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391891101.054:9037): pid=14854 uid=0 auid=0 ses=919 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391891101.064:9038): pid=14854 uid=0 auid=0 ses=919 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391891101.064:9039): pid=14854 uid=0 auid=0 ses=919 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391892001.075:9040): pid=15402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391892001.075:9041): pid=15402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391892001.075:9042): login pid=15402 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=920 >type=USER_START msg=audit(1391892001.075:9043): pid=15402 uid=0 auid=0 ses=920 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391892001.075:9044): pid=15402 uid=0 auid=0 ses=920 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391892001.085:9045): pid=15402 uid=0 auid=0 ses=920 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391892001.085:9046): pid=15402 uid=0 auid=0 ses=920 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391892901.085:9047): pid=15951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391892901.085:9048): pid=15951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391892901.085:9049): login pid=15951 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=921 >type=USER_START msg=audit(1391892901.095:9050): pid=15951 uid=0 auid=0 ses=921 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391892901.095:9051): pid=15951 uid=0 auid=0 ses=921 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391892901.095:9052): pid=15951 uid=0 auid=0 ses=921 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391892901.095:9053): pid=15951 uid=0 auid=0 ses=921 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391893261.105:9054): pid=16173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391893261.105:9055): pid=16173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391893261.105:9056): login pid=16173 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=922 >type=USER_START msg=audit(1391893261.115:9057): pid=16173 uid=0 auid=0 ses=922 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391893261.115:9058): pid=16173 uid=0 auid=0 ses=922 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391893261.125:9059): avc: denied { read } for pid=16189 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391893261.125:9059): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd5168280 a2=84800 a3=0 items=0 ppid=16187 pid=16189 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=922 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391893261.145:9060): pid=16173 uid=0 auid=0 ses=922 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391893261.145:9061): pid=16173 uid=0 auid=0 ses=922 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391893801.156:9062): pid=16530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391893801.156:9063): pid=16530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391893801.156:9064): login pid=16530 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=923 >type=USER_START msg=audit(1391893801.156:9065): pid=16530 uid=0 auid=0 ses=923 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391893801.156:9066): pid=16530 uid=0 auid=0 ses=923 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391893801.166:9067): pid=16530 uid=0 auid=0 ses=923 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391893801.166:9068): pid=16530 uid=0 auid=0 ses=923 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391894701.176:9069): pid=17077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391894701.176:9070): pid=17077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391894701.176:9071): login pid=17077 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=924 >type=USER_START msg=audit(1391894701.176:9072): pid=17077 uid=0 auid=0 ses=924 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391894701.176:9073): pid=17077 uid=0 auid=0 ses=924 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391894701.186:9074): pid=17077 uid=0 auid=0 ses=924 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391894701.186:9075): pid=17077 uid=0 auid=0 ses=924 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391895601.197:9076): pid=17625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391895601.197:9077): pid=17625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391895601.197:9078): login pid=17625 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=925 >type=USER_START msg=audit(1391895601.197:9079): pid=17625 uid=0 auid=0 ses=925 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391895601.197:9080): pid=17625 uid=0 auid=0 ses=925 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391895601.207:9081): pid=17625 uid=0 auid=0 ses=925 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391895601.207:9082): pid=17625 uid=0 auid=0 ses=925 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391896501.217:9083): pid=18188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391896501.217:9084): pid=18188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391896501.217:9085): login pid=18188 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=926 >type=USER_START msg=audit(1391896501.227:9086): pid=18188 uid=0 auid=0 ses=926 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391896501.227:9087): pid=18188 uid=0 auid=0 ses=926 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391896501.227:9088): pid=18188 uid=0 auid=0 ses=926 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391896501.227:9089): pid=18188 uid=0 auid=0 ses=926 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391896861.238:9090): pid=18440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391896861.238:9091): pid=18440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391896861.238:9092): login pid=18440 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=927 >type=USER_START msg=audit(1391896861.248:9093): pid=18440 uid=0 auid=0 ses=927 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391896861.248:9094): pid=18440 uid=0 auid=0 ses=927 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391896861.258:9095): avc: denied { read } for pid=18456 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391896861.258:9095): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffff402b40 a2=84800 a3=0 items=0 ppid=18454 pid=18456 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=927 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391896861.278:9096): pid=18440 uid=0 auid=0 ses=927 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391896861.278:9097): pid=18440 uid=0 auid=0 ses=927 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391897401.288:9098): pid=18797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391897401.288:9099): pid=18797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391897401.288:9100): login pid=18797 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=928 >type=USER_START msg=audit(1391897401.288:9101): pid=18797 uid=0 auid=0 ses=928 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391897401.288:9102): pid=18797 uid=0 auid=0 ses=928 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391897401.298:9103): pid=18797 uid=0 auid=0 ses=928 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391897401.298:9104): pid=18797 uid=0 auid=0 ses=928 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391898301.308:9105): pid=19344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391898301.308:9106): pid=19344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391898301.308:9107): login pid=19344 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=929 >type=USER_START msg=audit(1391898301.308:9108): pid=19344 uid=0 auid=0 ses=929 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391898301.308:9109): pid=19344 uid=0 auid=0 ses=929 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391898301.318:9110): pid=19344 uid=0 auid=0 ses=929 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391898301.318:9111): pid=19344 uid=0 auid=0 ses=929 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391899201.329:9112): pid=19891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391899201.329:9113): pid=19891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391899201.329:9114): login pid=19891 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=930 >type=USER_START msg=audit(1391899201.339:9115): pid=19891 uid=0 auid=0 ses=930 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391899201.339:9116): pid=19891 uid=0 auid=0 ses=930 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391899201.339:9117): pid=19891 uid=0 auid=0 ses=930 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391899201.339:9118): pid=19891 uid=0 auid=0 ses=930 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391900101.349:9119): pid=20442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391900101.359:9120): pid=20442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391900101.359:9121): login pid=20442 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=931 >type=USER_START msg=audit(1391900101.359:9122): pid=20442 uid=0 auid=0 ses=931 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391900101.359:9123): pid=20442 uid=0 auid=0 ses=931 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391900101.369:9124): pid=20442 uid=0 auid=0 ses=931 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391900101.369:9125): pid=20442 uid=0 auid=0 ses=931 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391900461.380:9126): pid=20666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391900461.380:9127): pid=20666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391900461.380:9128): login pid=20666 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=932 >type=USER_START msg=audit(1391900461.380:9129): pid=20666 uid=0 auid=0 ses=932 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391900461.380:9130): pid=20666 uid=0 auid=0 ses=932 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391900461.390:9131): avc: denied { read } for pid=20682 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391900461.390:9131): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc8cc8450 a2=84800 a3=0 items=0 ppid=20680 pid=20682 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=932 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391900461.410:9132): pid=20666 uid=0 auid=0 ses=932 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391900461.410:9133): pid=20666 uid=0 auid=0 ses=932 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391901001.420:9134): pid=21022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391901001.420:9135): pid=21022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391901001.420:9136): login pid=21022 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=933 >type=USER_START msg=audit(1391901001.420:9137): pid=21022 uid=0 auid=0 ses=933 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391901001.420:9138): pid=21022 uid=0 auid=0 ses=933 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391901001.430:9139): pid=21022 uid=0 auid=0 ses=933 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391901001.430:9140): pid=21022 uid=0 auid=0 ses=933 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391901901.441:9141): pid=21569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391901901.441:9142): pid=21569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391901901.441:9143): login pid=21569 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=934 >type=USER_START msg=audit(1391901901.441:9144): pid=21569 uid=0 auid=0 ses=934 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391901901.441:9145): pid=21569 uid=0 auid=0 ses=934 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391901901.461:9146): pid=21569 uid=0 auid=0 ses=934 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391901901.461:9147): pid=21569 uid=0 auid=0 ses=934 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391902801.471:9148): pid=22119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391902801.471:9149): pid=22119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391902801.471:9150): login pid=22119 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=935 >type=USER_START msg=audit(1391902801.471:9151): pid=22119 uid=0 auid=0 ses=935 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391902801.471:9152): pid=22119 uid=0 auid=0 ses=935 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391902801.481:9153): pid=22119 uid=0 auid=0 ses=935 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391902801.481:9154): pid=22119 uid=0 auid=0 ses=935 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391903701.492:9155): pid=22667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391903701.492:9156): pid=22667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391903701.492:9157): login pid=22667 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=936 >type=USER_START msg=audit(1391903701.502:9158): pid=22667 uid=0 auid=0 ses=936 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391903701.502:9159): pid=22667 uid=0 auid=0 ses=936 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391903701.502:9160): pid=22667 uid=0 auid=0 ses=936 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391903701.502:9161): pid=22667 uid=0 auid=0 ses=936 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391904061.512:9162): pid=22890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391904061.512:9163): pid=22890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391904061.512:9164): login pid=22890 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=937 >type=USER_START msg=audit(1391904061.522:9165): pid=22890 uid=0 auid=0 ses=937 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391904061.522:9166): pid=22890 uid=0 auid=0 ses=937 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391904061.532:9167): avc: denied { read } for pid=22906 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391904061.532:9167): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe5e74e70 a2=84800 a3=0 items=0 ppid=22904 pid=22906 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=937 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391904061.542:9168): pid=22890 uid=0 auid=0 ses=937 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391904061.542:9169): pid=22890 uid=0 auid=0 ses=937 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391904601.552:9170): pid=23244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391904601.552:9171): pid=23244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391904601.552:9172): login pid=23244 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=938 >type=USER_START msg=audit(1391904601.562:9173): pid=23244 uid=0 auid=0 ses=938 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391904601.562:9174): pid=23244 uid=0 auid=0 ses=938 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391904601.562:9175): pid=23244 uid=0 auid=0 ses=938 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391904601.562:9176): pid=23244 uid=0 auid=0 ses=938 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391905501.583:9177): pid=23792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391905501.583:9178): pid=23792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391905501.583:9179): login pid=23792 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=939 >type=USER_START msg=audit(1391905501.583:9180): pid=23792 uid=0 auid=0 ses=939 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391905501.583:9181): pid=23792 uid=0 auid=0 ses=939 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391905501.593:9182): pid=23792 uid=0 auid=0 ses=939 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391905501.593:9183): pid=23792 uid=0 auid=0 ses=939 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391906401.603:9184): pid=24341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391906401.603:9185): pid=24341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391906401.603:9186): login pid=24341 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=940 >type=USER_START msg=audit(1391906401.603:9187): pid=24341 uid=0 auid=0 ses=940 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391906401.603:9188): pid=24341 uid=0 auid=0 ses=940 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391906401.613:9189): pid=24341 uid=0 auid=0 ses=940 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391906401.613:9190): pid=24341 uid=0 auid=0 ses=940 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391907301.624:9191): pid=24891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391907301.624:9192): pid=24891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391907301.624:9193): login pid=24891 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=941 >type=USER_START msg=audit(1391907301.624:9194): pid=24891 uid=0 auid=0 ses=941 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391907301.624:9195): pid=24891 uid=0 auid=0 ses=941 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391907301.634:9196): pid=24891 uid=0 auid=0 ses=941 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391907301.634:9197): pid=24891 uid=0 auid=0 ses=941 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391907661.644:9198): pid=25114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391907661.644:9199): pid=25114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391907661.644:9200): login pid=25114 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=942 >type=USER_START msg=audit(1391907661.644:9201): pid=25114 uid=0 auid=0 ses=942 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391907661.644:9202): pid=25114 uid=0 auid=0 ses=942 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391907661.664:9203): avc: denied { read } for pid=25131 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391907661.664:9203): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe9b8dce0 a2=84800 a3=0 items=0 ppid=25128 pid=25131 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=942 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391907661.684:9204): pid=25114 uid=0 auid=0 ses=942 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391907661.684:9205): pid=25114 uid=0 auid=0 ses=942 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391908201.694:9206): pid=25476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391908201.694:9207): pid=25476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391908201.694:9208): login pid=25476 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=943 >type=USER_START msg=audit(1391908201.694:9209): pid=25476 uid=0 auid=0 ses=943 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391908201.694:9210): pid=25476 uid=0 auid=0 ses=943 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391908201.704:9211): pid=25476 uid=0 auid=0 ses=943 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391908201.704:9212): pid=25476 uid=0 auid=0 ses=943 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391909101.715:9213): pid=26025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391909101.715:9214): pid=26025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391909101.715:9215): login pid=26025 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=944 >type=USER_START msg=audit(1391909101.715:9216): pid=26025 uid=0 auid=0 ses=944 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391909101.715:9217): pid=26025 uid=0 auid=0 ses=944 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391909101.725:9218): pid=26025 uid=0 auid=0 ses=944 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391909101.725:9219): pid=26025 uid=0 auid=0 ses=944 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391910001.725:9220): pid=26573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391910001.725:9221): pid=26573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391910001.725:9222): login pid=26573 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=945 >type=USER_START msg=audit(1391910001.735:9223): pid=26573 uid=0 auid=0 ses=945 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391910001.735:9224): pid=26573 uid=0 auid=0 ses=945 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391910001.735:9225): pid=26573 uid=0 auid=0 ses=945 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391910001.735:9226): pid=26573 uid=0 auid=0 ses=945 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391910901.746:9227): pid=27122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391910901.746:9228): pid=27122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391910901.746:9229): login pid=27122 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=946 >type=USER_START msg=audit(1391910901.756:9230): pid=27122 uid=0 auid=0 ses=946 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391910901.756:9231): pid=27122 uid=0 auid=0 ses=946 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391910901.766:9232): pid=27122 uid=0 auid=0 ses=946 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391910901.766:9233): pid=27122 uid=0 auid=0 ses=946 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391911261.766:9234): pid=27344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391911261.766:9235): pid=27344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391911261.776:9236): login pid=27344 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=947 >type=USER_START msg=audit(1391911261.776:9237): pid=27344 uid=0 auid=0 ses=947 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391911261.776:9238): pid=27344 uid=0 auid=0 ses=947 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391911261.796:9239): avc: denied { read } for pid=27363 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391911261.796:9239): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff468f380 a2=84800 a3=0 items=0 ppid=27361 pid=27363 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=947 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391911261.816:9240): pid=27344 uid=0 auid=0 ses=947 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391911261.816:9241): pid=27344 uid=0 auid=0 ses=947 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391911801.826:9242): pid=27705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391911801.826:9243): pid=27705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391911801.826:9244): login pid=27705 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=948 >type=USER_START msg=audit(1391911801.836:9245): pid=27705 uid=0 auid=0 ses=948 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391911801.836:9246): pid=27705 uid=0 auid=0 ses=948 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391911801.846:9247): pid=27705 uid=0 auid=0 ses=948 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391911801.846:9248): pid=27705 uid=0 auid=0 ses=948 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391912701.857:9249): pid=28253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391912701.857:9250): pid=28253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391912701.857:9251): login pid=28253 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=949 >type=USER_START msg=audit(1391912701.857:9252): pid=28253 uid=0 auid=0 ses=949 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391912701.857:9253): pid=28253 uid=0 auid=0 ses=949 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391912701.867:9254): pid=28253 uid=0 auid=0 ses=949 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391912701.867:9255): pid=28253 uid=0 auid=0 ses=949 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391913601.877:9256): pid=28802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391913601.877:9257): pid=28802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391913601.877:9258): login pid=28802 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=950 >type=USER_START msg=audit(1391913601.877:9259): pid=28802 uid=0 auid=0 ses=950 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391913601.877:9260): pid=28802 uid=0 auid=0 ses=950 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391913601.887:9261): pid=28802 uid=0 auid=0 ses=950 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391913601.887:9262): pid=28802 uid=0 auid=0 ses=950 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391914501.898:9263): pid=29352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391914501.898:9264): pid=29352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391914501.898:9265): login pid=29352 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=951 >type=USER_START msg=audit(1391914501.908:9266): pid=29352 uid=0 auid=0 ses=951 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391914501.908:9267): pid=29352 uid=0 auid=0 ses=951 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391914501.908:9268): pid=29352 uid=0 auid=0 ses=951 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391914501.918:9269): pid=29352 uid=0 auid=0 ses=951 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391914801.918:9270): pid=29538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391914801.918:9271): pid=29538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391914801.918:9272): login pid=29538 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=952 >type=USER_START msg=audit(1391914801.928:9273): pid=29538 uid=0 auid=0 ses=952 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391914801.928:9274): pid=29538 uid=0 auid=0 ses=952 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391914801.938:9275): pid=29538 uid=0 auid=0 ses=952 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391914801.938:9276): pid=29538 uid=0 auid=0 ses=952 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391914861.948:9277): pid=29583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391914861.948:9278): pid=29583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391914861.948:9279): login pid=29583 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=953 >type=USER_START msg=audit(1391914861.948:9280): pid=29583 uid=0 auid=0 ses=953 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391914861.948:9281): pid=29583 uid=0 auid=0 ses=953 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391914861.968:9282): avc: denied { read } for pid=29602 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391914861.968:9282): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffefa0b300 a2=84800 a3=0 items=0 ppid=29600 pid=29602 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=953 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391914861.988:9283): pid=29583 uid=0 auid=0 ses=953 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391914861.988:9284): pid=29583 uid=0 auid=0 ses=953 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391915401.999:9285): pid=29944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391915401.999:9286): pid=29944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391915401.999:9287): login pid=29944 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=954 >type=USER_START msg=audit(1391915402.009:9288): pid=29944 uid=0 auid=0 ses=954 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391915402.009:9289): pid=29944 uid=0 auid=0 ses=954 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391915402.009:9290): pid=29944 uid=0 auid=0 ses=954 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391915402.019:9291): pid=29944 uid=0 auid=0 ses=954 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391916301.029:9292): pid=30490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391916301.029:9293): pid=30490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391916301.029:9294): login pid=30490 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=955 >type=USER_START msg=audit(1391916301.029:9295): pid=30490 uid=0 auid=0 ses=955 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391916301.029:9296): pid=30490 uid=0 auid=0 ses=955 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391916301.049:9297): pid=30490 uid=0 auid=0 ses=955 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391916301.049:9298): pid=30490 uid=0 auid=0 ses=955 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391917201.060:9299): pid=31039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391917201.060:9300): pid=31039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391917201.060:9301): login pid=31039 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=956 >type=USER_START msg=audit(1391917201.060:9302): pid=31039 uid=0 auid=0 ses=956 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391917201.060:9303): pid=31039 uid=0 auid=0 ses=956 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391917201.070:9304): pid=31039 uid=0 auid=0 ses=956 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391917201.070:9305): pid=31039 uid=0 auid=0 ses=956 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391918101.080:9306): pid=31588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391918101.080:9307): pid=31588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391918101.080:9308): login pid=31588 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=957 >type=USER_START msg=audit(1391918101.080:9309): pid=31588 uid=0 auid=0 ses=957 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391918101.080:9310): pid=31588 uid=0 auid=0 ses=957 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391918101.090:9311): pid=31588 uid=0 auid=0 ses=957 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391918101.090:9312): pid=31588 uid=0 auid=0 ses=957 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391918461.100:9313): pid=31809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391918461.100:9314): pid=31809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391918461.100:9315): login pid=31809 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=958 >type=USER_START msg=audit(1391918461.100:9316): pid=31809 uid=0 auid=0 ses=958 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391918461.100:9317): pid=31809 uid=0 auid=0 ses=958 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391918461.120:9318): avc: denied { read } for pid=31828 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391918461.120:9318): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffc4927c0 a2=84800 a3=0 items=0 ppid=31826 pid=31828 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=958 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391918461.140:9319): pid=31809 uid=0 auid=0 ses=958 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391918461.140:9320): pid=31809 uid=0 auid=0 ses=958 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391919001.151:9321): pid=32171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391919001.151:9322): pid=32171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391919001.151:9323): login pid=32171 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=959 >type=USER_START msg=audit(1391919001.151:9324): pid=32171 uid=0 auid=0 ses=959 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391919001.151:9325): pid=32171 uid=0 auid=0 ses=959 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391919001.161:9326): pid=32171 uid=0 auid=0 ses=959 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391919001.161:9327): pid=32171 uid=0 auid=0 ses=959 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391919901.171:9328): pid=32718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391919901.171:9329): pid=32718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391919901.171:9330): login pid=32718 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=960 >type=USER_START msg=audit(1391919901.181:9331): pid=32718 uid=0 auid=0 ses=960 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391919901.181:9332): pid=32718 uid=0 auid=0 ses=960 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391919901.191:9333): pid=32718 uid=0 auid=0 ses=960 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391919901.191:9334): pid=32718 uid=0 auid=0 ses=960 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391920801.202:9335): pid=33271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391920801.202:9336): pid=33271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391920801.202:9337): login pid=33271 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=961 >type=USER_START msg=audit(1391920801.202:9338): pid=33271 uid=0 auid=0 ses=961 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391920801.202:9339): pid=33271 uid=0 auid=0 ses=961 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391920801.212:9340): pid=33271 uid=0 auid=0 ses=961 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391920801.212:9341): pid=33271 uid=0 auid=0 ses=961 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391921701.222:9342): pid=33823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391921701.222:9343): pid=33823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391921701.222:9344): login pid=33823 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=962 >type=USER_START msg=audit(1391921701.222:9345): pid=33823 uid=0 auid=0 ses=962 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391921701.222:9346): pid=33823 uid=0 auid=0 ses=962 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391921701.232:9347): pid=33823 uid=0 auid=0 ses=962 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391921701.232:9348): pid=33823 uid=0 auid=0 ses=962 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391922061.242:9349): pid=34049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391922061.242:9350): pid=34049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391922061.242:9351): login pid=34049 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=963 >type=USER_START msg=audit(1391922061.242:9352): pid=34049 uid=0 auid=0 ses=963 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391922061.242:9353): pid=34049 uid=0 auid=0 ses=963 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391922061.262:9354): avc: denied { read } for pid=34068 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391922061.262:9354): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe0bdee10 a2=84800 a3=0 items=0 ppid=34066 pid=34068 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=963 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391922061.292:9355): pid=34049 uid=0 auid=0 ses=963 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391922061.292:9356): pid=34049 uid=0 auid=0 ses=963 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391922361.273:9357): avc: denied { read } for pid=34267 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391922361.273:9357): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff8cedbb0 a2=84800 a3=0 items=0 ppid=34265 pid=34267 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=963 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1391922601.313:9358): pid=34476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391922601.313:9359): pid=34476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391922601.313:9360): login pid=34476 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=964 >type=USER_START msg=audit(1391922601.313:9361): pid=34476 uid=0 auid=0 ses=964 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391922601.313:9362): pid=34476 uid=0 auid=0 ses=964 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391922601.323:9363): pid=34476 uid=0 auid=0 ses=964 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391922601.323:9364): pid=34476 uid=0 auid=0 ses=964 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391923501.333:9365): pid=35025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391923501.333:9366): pid=35025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391923501.333:9367): login pid=35025 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=965 >type=USER_START msg=audit(1391923501.343:9368): pid=35025 uid=0 auid=0 ses=965 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391923501.343:9369): pid=35025 uid=0 auid=0 ses=965 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391923501.343:9370): pid=35025 uid=0 auid=0 ses=965 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391923501.353:9371): pid=35025 uid=0 auid=0 ses=965 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391924401.364:9372): pid=35573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391924401.364:9373): pid=35573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391924401.364:9374): login pid=35573 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=966 >type=USER_START msg=audit(1391924401.364:9375): pid=35573 uid=0 auid=0 ses=966 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391924401.364:9376): pid=35573 uid=0 auid=0 ses=966 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391924401.374:9377): pid=35573 uid=0 auid=0 ses=966 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391924401.374:9378): pid=35573 uid=0 auid=0 ses=966 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391925301.384:9379): pid=36122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391925301.384:9380): pid=36122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391925301.384:9381): login pid=36122 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=967 >type=USER_START msg=audit(1391925301.384:9382): pid=36122 uid=0 auid=0 ses=967 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391925301.384:9383): pid=36122 uid=0 auid=0 ses=967 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391925301.394:9384): pid=36122 uid=0 auid=0 ses=967 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391925301.394:9385): pid=36122 uid=0 auid=0 ses=967 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391925661.405:9386): pid=36346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391925661.405:9387): pid=36346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391925661.405:9388): login pid=36346 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=968 >type=USER_START msg=audit(1391925661.405:9389): pid=36346 uid=0 auid=0 ses=968 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391925661.405:9390): pid=36346 uid=0 auid=0 ses=968 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391925661.425:9391): avc: denied { read } for pid=36362 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391925661.425:9391): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe20ec5e0 a2=84800 a3=0 items=0 ppid=36360 pid=36362 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=968 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391925661.435:9392): pid=36346 uid=0 auid=0 ses=968 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391925661.445:9393): pid=36346 uid=0 auid=0 ses=968 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391926201.445:9394): pid=36703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391926201.455:9395): pid=36703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391926201.455:9396): login pid=36703 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=969 >type=USER_START msg=audit(1391926201.455:9397): pid=36703 uid=0 auid=0 ses=969 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391926201.455:9398): pid=36703 uid=0 auid=0 ses=969 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391926201.465:9399): pid=36703 uid=0 auid=0 ses=969 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391926201.465:9400): pid=36703 uid=0 auid=0 ses=969 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391927101.465:9401): pid=37251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391927101.465:9402): pid=37251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391927101.465:9403): login pid=37251 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=970 >type=USER_START msg=audit(1391927101.465:9404): pid=37251 uid=0 auid=0 ses=970 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391927101.465:9405): pid=37251 uid=0 auid=0 ses=970 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391927101.475:9406): pid=37251 uid=0 auid=0 ses=970 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391927101.475:9407): pid=37251 uid=0 auid=0 ses=970 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391928001.486:9408): pid=37801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391928001.486:9409): pid=37801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391928001.486:9410): login pid=37801 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=971 >type=USER_START msg=audit(1391928001.486:9411): pid=37801 uid=0 auid=0 ses=971 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391928001.486:9412): pid=37801 uid=0 auid=0 ses=971 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391928001.506:9413): pid=37801 uid=0 auid=0 ses=971 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391928001.506:9414): pid=37801 uid=0 auid=0 ses=971 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391928901.517:9415): pid=38351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391928901.517:9416): pid=38351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391928901.517:9417): login pid=38351 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=972 >type=USER_START msg=audit(1391928901.527:9418): pid=38351 uid=0 auid=0 ses=972 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391928901.527:9419): pid=38351 uid=0 auid=0 ses=972 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391928901.527:9420): pid=38351 uid=0 auid=0 ses=972 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391928901.537:9421): pid=38351 uid=0 auid=0 ses=972 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391929261.537:9422): pid=38574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391929261.537:9423): pid=38574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391929261.537:9424): login pid=38574 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=973 >type=USER_START msg=audit(1391929261.547:9425): pid=38574 uid=0 auid=0 ses=973 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391929261.547:9426): pid=38574 uid=0 auid=0 ses=973 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391929261.557:9427): avc: denied { read } for pid=38590 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391929261.557:9427): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcf3070c0 a2=84800 a3=0 items=0 ppid=38588 pid=38590 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=973 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391929261.577:9428): pid=38574 uid=0 auid=0 ses=973 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391929261.577:9429): pid=38574 uid=0 auid=0 ses=973 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391929801.587:9430): pid=38929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391929801.587:9431): pid=38929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391929801.587:9432): login pid=38929 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=974 >type=USER_START msg=audit(1391929801.587:9433): pid=38929 uid=0 auid=0 ses=974 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391929801.587:9434): pid=38929 uid=0 auid=0 ses=974 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391929801.597:9435): pid=38929 uid=0 auid=0 ses=974 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391929801.597:9436): pid=38929 uid=0 auid=0 ses=974 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391930701.608:9437): pid=39478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391930701.608:9438): pid=39478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391930701.608:9439): login pid=39478 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=975 >type=USER_START msg=audit(1391930701.608:9440): pid=39478 uid=0 auid=0 ses=975 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391930701.608:9441): pid=39478 uid=0 auid=0 ses=975 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391930701.618:9442): pid=39478 uid=0 auid=0 ses=975 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391930701.618:9443): pid=39478 uid=0 auid=0 ses=975 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391931601.628:9444): pid=40025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391931601.628:9445): pid=40025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391931601.628:9446): login pid=40025 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=976 >type=USER_START msg=audit(1391931601.638:9447): pid=40025 uid=0 auid=0 ses=976 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391931601.638:9448): pid=40025 uid=0 auid=0 ses=976 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391931601.638:9449): pid=40025 uid=0 auid=0 ses=976 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391931601.638:9450): pid=40025 uid=0 auid=0 ses=976 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391932501.649:9451): pid=40573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391932501.649:9452): pid=40573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391932501.659:9453): login pid=40573 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=977 >type=USER_START msg=audit(1391932501.659:9454): pid=40573 uid=0 auid=0 ses=977 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391932501.659:9455): pid=40573 uid=0 auid=0 ses=977 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391932501.669:9456): pid=40573 uid=0 auid=0 ses=977 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391932501.669:9457): pid=40573 uid=0 auid=0 ses=977 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391932861.669:9458): pid=40796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391932861.669:9459): pid=40796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391932861.679:9460): login pid=40796 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=978 >type=USER_START msg=audit(1391932861.679:9461): pid=40796 uid=0 auid=0 ses=978 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391932861.679:9462): pid=40796 uid=0 auid=0 ses=978 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391932861.699:9463): avc: denied { read } for pid=40812 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391932861.699:9463): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe478d680 a2=84800 a3=0 items=0 ppid=40810 pid=40812 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=978 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391932861.709:9464): pid=40796 uid=0 auid=0 ses=978 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391932861.709:9465): pid=40796 uid=0 auid=0 ses=978 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391933401.719:9466): pid=41154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391933401.719:9467): pid=41154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391933401.719:9468): login pid=41154 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=979 >type=USER_START msg=audit(1391933401.719:9469): pid=41154 uid=0 auid=0 ses=979 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391933401.719:9470): pid=41154 uid=0 auid=0 ses=979 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391933401.729:9471): pid=41154 uid=0 auid=0 ses=979 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391933401.729:9472): pid=41154 uid=0 auid=0 ses=979 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391934301.740:9473): pid=41701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391934301.740:9474): pid=41701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391934301.740:9475): login pid=41701 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=980 >type=USER_START msg=audit(1391934301.750:9476): pid=41701 uid=0 auid=0 ses=980 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391934301.750:9477): pid=41701 uid=0 auid=0 ses=980 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391934301.750:9478): pid=41701 uid=0 auid=0 ses=980 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391934301.760:9479): pid=41701 uid=0 auid=0 ses=980 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391935201.770:9480): pid=42250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391935201.770:9481): pid=42250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391935201.770:9482): login pid=42250 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=981 >type=USER_START msg=audit(1391935201.770:9483): pid=42250 uid=0 auid=0 ses=981 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391935201.770:9484): pid=42250 uid=0 auid=0 ses=981 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391935201.780:9485): pid=42250 uid=0 auid=0 ses=981 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391935201.780:9486): pid=42250 uid=0 auid=0 ses=981 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391936101.791:9487): pid=42800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391936101.791:9488): pid=42800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391936101.791:9489): login pid=42800 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=982 >type=USER_START msg=audit(1391936101.791:9490): pid=42800 uid=0 auid=0 ses=982 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391936101.791:9491): pid=42800 uid=0 auid=0 ses=982 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391936101.801:9492): pid=42800 uid=0 auid=0 ses=982 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391936101.801:9493): pid=42800 uid=0 auid=0 ses=982 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391936461.811:9494): pid=43022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391936461.811:9495): pid=43022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391936461.811:9496): login pid=43022 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=983 >type=USER_START msg=audit(1391936461.811:9497): pid=43022 uid=0 auid=0 ses=983 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391936461.811:9498): pid=43022 uid=0 auid=0 ses=983 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391936461.831:9499): avc: denied { read } for pid=43038 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391936461.831:9499): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff371c500 a2=84800 a3=0 items=0 ppid=43036 pid=43038 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=983 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391936461.841:9500): pid=43022 uid=0 auid=0 ses=983 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391936461.841:9501): pid=43022 uid=0 auid=0 ses=983 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391937001.851:9502): pid=43380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391937001.851:9503): pid=43380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391937001.851:9504): login pid=43380 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=984 >type=USER_START msg=audit(1391937001.861:9505): pid=43380 uid=0 auid=0 ses=984 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391937001.861:9506): pid=43380 uid=0 auid=0 ses=984 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391937001.861:9507): pid=43380 uid=0 auid=0 ses=984 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391937001.861:9508): pid=43380 uid=0 auid=0 ses=984 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391937901.882:9509): pid=43926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391937901.882:9510): pid=43926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391937901.882:9511): login pid=43926 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=985 >type=USER_START msg=audit(1391937901.882:9512): pid=43926 uid=0 auid=0 ses=985 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391937901.882:9513): pid=43926 uid=0 auid=0 ses=985 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391937901.892:9514): pid=43926 uid=0 auid=0 ses=985 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391937901.892:9515): pid=43926 uid=0 auid=0 ses=985 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391938801.902:9516): pid=44474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391938801.902:9517): pid=44474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391938801.902:9518): login pid=44474 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=986 >type=USER_START msg=audit(1391938801.902:9519): pid=44474 uid=0 auid=0 ses=986 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391938801.902:9520): pid=44474 uid=0 auid=0 ses=986 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391938801.912:9521): pid=44474 uid=0 auid=0 ses=986 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391938801.912:9522): pid=44474 uid=0 auid=0 ses=986 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391939701.923:9523): pid=45024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391939701.923:9524): pid=45024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391939701.923:9525): login pid=45024 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=987 >type=USER_START msg=audit(1391939701.923:9526): pid=45024 uid=0 auid=0 ses=987 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391939701.923:9527): pid=45024 uid=0 auid=0 ses=987 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391939701.933:9528): pid=45024 uid=0 auid=0 ses=987 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391939701.933:9529): pid=45024 uid=0 auid=0 ses=987 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391940061.943:9530): pid=45245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391940061.943:9531): pid=45245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391940061.943:9532): login pid=45245 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=988 >type=USER_START msg=audit(1391940061.943:9533): pid=45245 uid=0 auid=0 ses=988 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391940061.943:9534): pid=45245 uid=0 auid=0 ses=988 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391940061.963:9535): avc: denied { read } for pid=45261 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391940061.963:9535): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffceea3580 a2=84800 a3=0 items=0 ppid=45259 pid=45261 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=988 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391940061.973:9536): pid=45245 uid=0 auid=0 ses=988 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391940061.973:9537): pid=45245 uid=0 auid=0 ses=988 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391940601.984:9538): pid=45602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391940601.984:9539): pid=45602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391940601.984:9540): login pid=45602 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=989 >type=USER_START msg=audit(1391940601.994:9541): pid=45602 uid=0 auid=0 ses=989 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391940601.994:9542): pid=45602 uid=0 auid=0 ses=989 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391940601.994:9543): pid=45602 uid=0 auid=0 ses=989 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391940601.994:9544): pid=45602 uid=0 auid=0 ses=989 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391941501.004:9545): pid=46149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391941501.014:9546): pid=46149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391941501.014:9547): login pid=46149 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=990 >type=USER_START msg=audit(1391941501.014:9548): pid=46149 uid=0 auid=0 ses=990 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391941501.014:9549): pid=46149 uid=0 auid=0 ses=990 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391941501.024:9550): pid=46149 uid=0 auid=0 ses=990 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391941501.024:9551): pid=46149 uid=0 auid=0 ses=990 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391942401.035:9552): pid=46702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391942401.035:9553): pid=46702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391942401.035:9554): login pid=46702 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=991 >type=USER_START msg=audit(1391942401.035:9555): pid=46702 uid=0 auid=0 ses=991 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391942401.035:9556): pid=46702 uid=0 auid=0 ses=991 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391942401.045:9557): pid=46702 uid=0 auid=0 ses=991 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391942401.045:9558): pid=46702 uid=0 auid=0 ses=991 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391943301.055:9559): pid=47251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391943301.055:9560): pid=47251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391943301.055:9561): login pid=47251 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=992 >type=USER_START msg=audit(1391943301.055:9562): pid=47251 uid=0 auid=0 ses=992 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391943301.055:9563): pid=47251 uid=0 auid=0 ses=992 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391943301.065:9564): pid=47251 uid=0 auid=0 ses=992 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391943301.065:9565): pid=47251 uid=0 auid=0 ses=992 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391943661.065:9566): pid=47474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391943661.065:9567): pid=47474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391943661.065:9568): login pid=47474 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=993 >type=USER_START msg=audit(1391943661.065:9569): pid=47474 uid=0 auid=0 ses=993 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391943661.065:9570): pid=47474 uid=0 auid=0 ses=993 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391943661.095:9571): avc: denied { read } for pid=47490 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391943661.095:9571): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffac6fb10 a2=84800 a3=0 items=0 ppid=47488 pid=47490 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=993 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391943661.105:9572): pid=47474 uid=0 auid=0 ses=993 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391943661.105:9573): pid=47474 uid=0 auid=0 ses=993 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391944201.116:9574): pid=47832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391944201.116:9575): pid=47832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391944201.116:9576): login pid=47832 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=994 >type=USER_START msg=audit(1391944201.116:9577): pid=47832 uid=0 auid=0 ses=994 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391944201.116:9578): pid=47832 uid=0 auid=0 ses=994 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391944201.126:9579): pid=47832 uid=0 auid=0 ses=994 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391944201.126:9580): pid=47832 uid=0 auid=0 ses=994 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391945101.136:9581): pid=48381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391945101.136:9582): pid=48381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391945101.136:9583): login pid=48381 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=995 >type=USER_START msg=audit(1391945101.136:9584): pid=48381 uid=0 auid=0 ses=995 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391945101.136:9585): pid=48381 uid=0 auid=0 ses=995 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391945101.146:9586): pid=48381 uid=0 auid=0 ses=995 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391945101.146:9587): pid=48381 uid=0 auid=0 ses=995 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391946001.157:9588): pid=48930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391946001.157:9589): pid=48930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391946001.157:9590): login pid=48930 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=996 >type=USER_START msg=audit(1391946001.157:9591): pid=48930 uid=0 auid=0 ses=996 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391946001.157:9592): pid=48930 uid=0 auid=0 ses=996 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391946001.167:9593): pid=48930 uid=0 auid=0 ses=996 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391946001.167:9594): pid=48930 uid=0 auid=0 ses=996 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391946901.177:9595): pid=49478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391946901.177:9596): pid=49478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391946901.177:9597): login pid=49478 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=997 >type=USER_START msg=audit(1391946901.187:9598): pid=49478 uid=0 auid=0 ses=997 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391946901.187:9599): pid=49478 uid=0 auid=0 ses=997 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391946901.187:9600): pid=49478 uid=0 auid=0 ses=997 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391946901.197:9601): pid=49478 uid=0 auid=0 ses=997 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391947261.197:9602): pid=49701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391947261.197:9603): pid=49701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391947261.197:9604): login pid=49701 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=998 >type=USER_START msg=audit(1391947261.207:9605): pid=49701 uid=0 auid=0 ses=998 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391947261.207:9606): pid=49701 uid=0 auid=0 ses=998 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391947261.217:9607): avc: denied { read } for pid=49717 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391947261.217:9607): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdee8f3e0 a2=84800 a3=0 items=0 ppid=49715 pid=49717 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=998 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391947261.237:9608): pid=49701 uid=0 auid=0 ses=998 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391947261.237:9609): pid=49701 uid=0 auid=0 ses=998 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391947801.248:9610): pid=50059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391947801.248:9611): pid=50059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391947801.248:9612): login pid=50059 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=999 >type=USER_START msg=audit(1391947801.258:9613): pid=50059 uid=0 auid=0 ses=999 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391947801.258:9614): pid=50059 uid=0 auid=0 ses=999 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391947801.258:9615): pid=50059 uid=0 auid=0 ses=999 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391947801.258:9616): pid=50059 uid=0 auid=0 ses=999 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391948701.268:9617): pid=50606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391948701.268:9618): pid=50606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391948701.278:9619): login pid=50606 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1000 >type=USER_START msg=audit(1391948701.278:9620): pid=50606 uid=0 auid=0 ses=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391948701.278:9621): pid=50606 uid=0 auid=0 ses=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391948701.288:9622): pid=50606 uid=0 auid=0 ses=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391948701.288:9623): pid=50606 uid=0 auid=0 ses=1000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391949601.299:9624): pid=51156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391949601.299:9625): pid=51156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391949601.299:9626): login pid=51156 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1001 >type=USER_START msg=audit(1391949601.299:9627): pid=51156 uid=0 auid=0 ses=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391949601.299:9628): pid=51156 uid=0 auid=0 ses=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391949601.309:9629): pid=51156 uid=0 auid=0 ses=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391949601.309:9630): pid=51156 uid=0 auid=0 ses=1001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391950501.319:9631): pid=51706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391950501.319:9632): pid=51706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391950501.319:9633): login pid=51706 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1002 >type=USER_START msg=audit(1391950501.319:9634): pid=51706 uid=0 auid=0 ses=1002 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391950501.319:9635): pid=51706 uid=0 auid=0 ses=1002 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391950501.329:9636): pid=51706 uid=0 auid=0 ses=1002 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391950501.329:9637): pid=51706 uid=0 auid=0 ses=1002 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391950861.340:9638): pid=51931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391950861.340:9639): pid=51931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391950861.340:9640): login pid=51931 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1003 >type=USER_START msg=audit(1391950861.340:9641): pid=51931 uid=0 auid=0 ses=1003 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391950861.340:9642): pid=51931 uid=0 auid=0 ses=1003 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391950861.360:9643): avc: denied { read } for pid=51947 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391950861.360:9643): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe48312a0 a2=84800 a3=0 items=0 ppid=51945 pid=51947 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1003 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391950861.370:9644): pid=51931 uid=0 auid=0 ses=1003 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391950861.370:9645): pid=51931 uid=0 auid=0 ses=1003 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391951401.380:9646): pid=52287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391951401.380:9647): pid=52287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391951401.380:9648): login pid=52287 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1004 >type=USER_START msg=audit(1391951401.380:9649): pid=52287 uid=0 auid=0 ses=1004 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391951401.380:9650): pid=52287 uid=0 auid=0 ses=1004 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391951401.390:9651): pid=52287 uid=0 auid=0 ses=1004 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391951401.390:9652): pid=52287 uid=0 auid=0 ses=1004 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391952301.400:9653): pid=52834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391952301.400:9654): pid=52834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391952301.400:9655): login pid=52834 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1005 >type=USER_START msg=audit(1391952301.400:9656): pid=52834 uid=0 auid=0 ses=1005 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391952301.400:9657): pid=52834 uid=0 auid=0 ses=1005 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391952301.410:9658): pid=52834 uid=0 auid=0 ses=1005 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391952301.410:9659): pid=52834 uid=0 auid=0 ses=1005 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391953201.421:9660): pid=53382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391953201.421:9661): pid=53382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391953201.421:9662): login pid=53382 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1006 >type=USER_START msg=audit(1391953201.431:9663): pid=53382 uid=0 auid=0 ses=1006 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391953201.431:9664): pid=53382 uid=0 auid=0 ses=1006 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391953201.431:9665): pid=53382 uid=0 auid=0 ses=1006 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391953201.431:9666): pid=53382 uid=0 auid=0 ses=1006 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391954101.442:9667): pid=53932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391954101.442:9668): pid=53932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391954101.442:9669): login pid=53932 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1007 >type=USER_START msg=audit(1391954101.452:9670): pid=53932 uid=0 auid=0 ses=1007 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391954101.452:9671): pid=53932 uid=0 auid=0 ses=1007 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391954101.452:9672): pid=53932 uid=0 auid=0 ses=1007 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391954101.462:9673): pid=53932 uid=0 auid=0 ses=1007 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391954461.462:9674): pid=54156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391954461.462:9675): pid=54156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391954461.462:9676): login pid=54156 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1008 >type=USER_START msg=audit(1391954461.472:9677): pid=54156 uid=0 auid=0 ses=1008 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391954461.472:9678): pid=54156 uid=0 auid=0 ses=1008 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391954461.482:9679): avc: denied { read } for pid=54172 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391954461.482:9679): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc3f55360 a2=84800 a3=0 items=0 ppid=54170 pid=54172 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1008 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391954461.502:9680): pid=54156 uid=0 auid=0 ses=1008 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391954461.502:9681): pid=54156 uid=0 auid=0 ses=1008 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391955001.512:9682): pid=54512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391955001.512:9683): pid=54512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391955001.512:9684): login pid=54512 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1009 >type=USER_START msg=audit(1391955001.512:9685): pid=54512 uid=0 auid=0 ses=1009 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391955001.512:9686): pid=54512 uid=0 auid=0 ses=1009 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391955001.522:9687): pid=54512 uid=0 auid=0 ses=1009 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391955001.522:9688): pid=54512 uid=0 auid=0 ses=1009 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391955901.533:9689): pid=55059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391955901.533:9690): pid=55059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391955901.533:9691): login pid=55059 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1010 >type=USER_START msg=audit(1391955901.543:9692): pid=55059 uid=0 auid=0 ses=1010 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391955901.543:9693): pid=55059 uid=0 auid=0 ses=1010 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391955901.543:9694): pid=55059 uid=0 auid=0 ses=1010 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391955901.553:9695): pid=55059 uid=0 auid=0 ses=1010 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391956801.553:9696): pid=55608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391956801.553:9697): pid=55608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391956801.563:9698): login pid=55608 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1011 >type=USER_START msg=audit(1391956801.563:9699): pid=55608 uid=0 auid=0 ses=1011 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391956801.563:9700): pid=55608 uid=0 auid=0 ses=1011 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391956801.573:9701): pid=55608 uid=0 auid=0 ses=1011 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391956801.573:9702): pid=55608 uid=0 auid=0 ses=1011 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391957701.584:9703): pid=56157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391957701.584:9704): pid=56157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391957701.584:9705): login pid=56157 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1012 >type=USER_START msg=audit(1391957701.584:9706): pid=56157 uid=0 auid=0 ses=1012 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391957701.584:9707): pid=56157 uid=0 auid=0 ses=1012 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391957701.594:9708): pid=56157 uid=0 auid=0 ses=1012 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391957701.594:9709): pid=56157 uid=0 auid=0 ses=1012 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391958061.604:9710): pid=56380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391958061.604:9711): pid=56380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391958061.604:9712): login pid=56380 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1013 >type=USER_START msg=audit(1391958061.604:9713): pid=56380 uid=0 auid=0 ses=1013 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391958061.604:9714): pid=56380 uid=0 auid=0 ses=1013 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391958061.624:9715): avc: denied { read } for pid=56396 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391958061.624:9715): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd2dd7890 a2=84800 a3=0 items=0 ppid=56394 pid=56396 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1013 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391958061.634:9716): pid=56380 uid=0 auid=0 ses=1013 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391958061.634:9717): pid=56380 uid=0 auid=0 ses=1013 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391958601.644:9718): pid=56737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391958601.644:9719): pid=56737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391958601.644:9720): login pid=56737 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1014 >type=USER_START msg=audit(1391958601.644:9721): pid=56737 uid=0 auid=0 ses=1014 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391958601.644:9722): pid=56737 uid=0 auid=0 ses=1014 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391958601.654:9723): pid=56737 uid=0 auid=0 ses=1014 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391958601.654:9724): pid=56737 uid=0 auid=0 ses=1014 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391959501.665:9725): pid=57286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391959501.665:9726): pid=57286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391959501.665:9727): login pid=57286 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1015 >type=USER_START msg=audit(1391959501.675:9728): pid=57286 uid=0 auid=0 ses=1015 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391959501.675:9729): pid=57286 uid=0 auid=0 ses=1015 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391959501.685:9730): pid=57286 uid=0 auid=0 ses=1015 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391959501.685:9731): pid=57286 uid=0 auid=0 ses=1015 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391960401.685:9732): pid=57835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391960401.685:9733): pid=57835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391960401.685:9734): login pid=57835 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1016 >type=USER_START msg=audit(1391960401.685:9735): pid=57835 uid=0 auid=0 ses=1016 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391960401.685:9736): pid=57835 uid=0 auid=0 ses=1016 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391960401.705:9737): pid=57835 uid=0 auid=0 ses=1016 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391960401.705:9738): pid=57835 uid=0 auid=0 ses=1016 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391961301.716:9739): pid=58383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391961301.716:9740): pid=58383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391961301.716:9741): login pid=58383 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1017 >type=USER_START msg=audit(1391961301.726:9742): pid=58383 uid=0 auid=0 ses=1017 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391961301.726:9743): pid=58383 uid=0 auid=0 ses=1017 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391961301.736:9744): pid=58383 uid=0 auid=0 ses=1017 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391961301.736:9745): pid=58383 uid=0 auid=0 ses=1017 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1391961490.336:9746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1391961490.336:9747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1391961661.746:9748): pid=58607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391961661.746:9749): pid=58607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391961661.746:9750): login pid=58607 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1018 >type=USER_START msg=audit(1391961661.756:9751): pid=58607 uid=0 auid=0 ses=1018 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391961661.756:9752): pid=58607 uid=0 auid=0 ses=1018 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391961661.776:9753): avc: denied { read } for pid=58623 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391961661.776:9753): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdfd82260 a2=84800 a3=0 items=0 ppid=58621 pid=58623 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1018 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391961661.786:9754): pid=58607 uid=0 auid=0 ses=1018 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391961661.786:9755): pid=58607 uid=0 auid=0 ses=1018 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391962201.796:9756): pid=58965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391962201.796:9757): pid=58965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391962201.796:9758): login pid=58965 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1019 >type=USER_START msg=audit(1391962201.796:9759): pid=58965 uid=0 auid=0 ses=1019 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391962201.796:9760): pid=58965 uid=0 auid=0 ses=1019 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391962201.806:9761): pid=58965 uid=0 auid=0 ses=1019 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391962201.806:9762): pid=58965 uid=0 auid=0 ses=1019 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391963101.817:9763): pid=59512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391963101.817:9764): pid=59512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391963101.817:9765): login pid=59512 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1020 >type=USER_START msg=audit(1391963101.827:9766): pid=59512 uid=0 auid=0 ses=1020 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391963101.827:9767): pid=59512 uid=0 auid=0 ses=1020 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391963101.827:9768): pid=59512 uid=0 auid=0 ses=1020 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391963101.837:9769): pid=59512 uid=0 auid=0 ses=1020 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391964001.847:9770): pid=60060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391964001.847:9771): pid=60060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391964001.847:9772): login pid=60060 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1021 >type=USER_START msg=audit(1391964001.847:9773): pid=60060 uid=0 auid=0 ses=1021 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391964001.847:9774): pid=60060 uid=0 auid=0 ses=1021 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391964001.857:9775): pid=60060 uid=0 auid=0 ses=1021 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391964001.857:9776): pid=60060 uid=0 auid=0 ses=1021 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391964901.868:9777): pid=60609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391964901.868:9778): pid=60609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391964901.868:9779): login pid=60609 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1022 >type=USER_START msg=audit(1391964901.868:9780): pid=60609 uid=0 auid=0 ses=1022 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391964901.868:9781): pid=60609 uid=0 auid=0 ses=1022 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391964901.878:9782): pid=60609 uid=0 auid=0 ses=1022 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391964901.878:9783): pid=60609 uid=0 auid=0 ses=1022 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391965261.888:9784): pid=60829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391965261.888:9785): pid=60829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391965261.888:9786): login pid=60829 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1023 >type=USER_START msg=audit(1391965261.888:9787): pid=60829 uid=0 auid=0 ses=1023 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391965261.888:9788): pid=60829 uid=0 auid=0 ses=1023 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391965261.908:9789): avc: denied { read } for pid=60845 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391965261.908:9789): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe6d24c40 a2=84800 a3=0 items=0 ppid=60843 pid=60845 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1023 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391965261.918:9790): pid=60829 uid=0 auid=0 ses=1023 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391965261.918:9791): pid=60829 uid=0 auid=0 ses=1023 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391965801.928:9792): pid=61187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391965801.928:9793): pid=61187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391965801.928:9794): login pid=61187 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1024 >type=USER_START msg=audit(1391965801.928:9795): pid=61187 uid=0 auid=0 ses=1024 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391965801.938:9796): pid=61187 uid=0 auid=0 ses=1024 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391965801.938:9797): pid=61187 uid=0 auid=0 ses=1024 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391965801.938:9798): pid=61187 uid=0 auid=0 ses=1024 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391966701.949:9799): pid=61735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391966701.949:9800): pid=61735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391966701.949:9801): login pid=61735 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1025 >type=USER_START msg=audit(1391966701.959:9802): pid=61735 uid=0 auid=0 ses=1025 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391966701.959:9803): pid=61735 uid=0 auid=0 ses=1025 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391966701.969:9804): pid=61735 uid=0 auid=0 ses=1025 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391966701.969:9805): pid=61735 uid=0 auid=0 ses=1025 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391967601.980:9806): pid=62286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391967601.980:9807): pid=62286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391967601.980:9808): login pid=62286 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1026 >type=USER_START msg=audit(1391967601.990:9809): pid=62286 uid=0 auid=0 ses=1026 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391967601.990:9810): pid=62286 uid=0 auid=0 ses=1026 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391967601.990:9811): pid=62286 uid=0 auid=0 ses=1026 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391967601.990:9812): pid=62286 uid=0 auid=0 ses=1026 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391968501.000:9813): pid=62834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391968501.000:9814): pid=62834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391968501.000:9815): login pid=62834 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1027 >type=USER_START msg=audit(1391968501.010:9816): pid=62834 uid=0 auid=0 ses=1027 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391968501.010:9817): pid=62834 uid=0 auid=0 ses=1027 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391968501.020:9818): pid=62834 uid=0 auid=0 ses=1027 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391968501.020:9819): pid=62834 uid=0 auid=0 ses=1027 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391968861.020:9820): pid=63056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391968861.020:9821): pid=63056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391968861.030:9822): login pid=63056 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1028 >type=USER_START msg=audit(1391968861.030:9823): pid=63056 uid=0 auid=0 ses=1028 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391968861.030:9824): pid=63056 uid=0 auid=0 ses=1028 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391968861.050:9825): avc: denied { read } for pid=63072 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391968861.050:9825): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdf510e00 a2=84800 a3=0 items=0 ppid=63070 pid=63072 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1028 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391968861.060:9826): pid=63056 uid=0 auid=0 ses=1028 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391968861.060:9827): pid=63056 uid=0 auid=0 ses=1028 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391969401.071:9828): pid=63417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391969401.071:9829): pid=63417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391969401.071:9830): login pid=63417 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1029 >type=USER_START msg=audit(1391969401.071:9831): pid=63417 uid=0 auid=0 ses=1029 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391969401.071:9832): pid=63417 uid=0 auid=0 ses=1029 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391969401.081:9833): pid=63417 uid=0 auid=0 ses=1029 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391969401.081:9834): pid=63417 uid=0 auid=0 ses=1029 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391970301.091:9835): pid=63966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391970301.091:9836): pid=63966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391970301.091:9837): login pid=63966 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1030 >type=USER_START msg=audit(1391970301.091:9838): pid=63966 uid=0 auid=0 ses=1030 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391970301.091:9839): pid=63966 uid=0 auid=0 ses=1030 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391970301.101:9840): pid=63966 uid=0 auid=0 ses=1030 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391970301.101:9841): pid=63966 uid=0 auid=0 ses=1030 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391971201.112:9842): pid=64513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391971201.112:9843): pid=64513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391971201.112:9844): login pid=64513 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1031 >type=USER_START msg=audit(1391971201.112:9845): pid=64513 uid=0 auid=0 ses=1031 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391971201.112:9846): pid=64513 uid=0 auid=0 ses=1031 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391971201.122:9847): pid=64513 uid=0 auid=0 ses=1031 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391971201.122:9848): pid=64513 uid=0 auid=0 ses=1031 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391972101.132:9849): pid=65062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391972101.132:9850): pid=65062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391972101.132:9851): login pid=65062 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1032 >type=USER_START msg=audit(1391972101.132:9852): pid=65062 uid=0 auid=0 ses=1032 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391972101.142:9853): pid=65062 uid=0 auid=0 ses=1032 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391972101.142:9854): pid=65062 uid=0 auid=0 ses=1032 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391972101.142:9855): pid=65062 uid=0 auid=0 ses=1032 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391972461.152:9856): pid=65283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391972461.152:9857): pid=65283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391972461.152:9858): login pid=65283 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1033 >type=USER_START msg=audit(1391972461.152:9859): pid=65283 uid=0 auid=0 ses=1033 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391972461.162:9860): pid=65283 uid=0 auid=0 ses=1033 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391972461.172:9861): avc: denied { read } for pid=65301 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391972461.172:9861): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd96480c0 a2=84800 a3=0 items=0 ppid=65299 pid=65301 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1033 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391972461.192:9862): pid=65283 uid=0 auid=0 ses=1033 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391972461.192:9863): pid=65283 uid=0 auid=0 ses=1033 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391973001.203:9864): pid=423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391973001.203:9865): pid=423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391973001.203:9866): login pid=423 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1034 >type=USER_START msg=audit(1391973001.203:9867): pid=423 uid=0 auid=0 ses=1034 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391973001.203:9868): pid=423 uid=0 auid=0 ses=1034 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391973001.213:9869): pid=423 uid=0 auid=0 ses=1034 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391973001.213:9870): pid=423 uid=0 auid=0 ses=1034 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391973901.223:9871): pid=1029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391973901.223:9872): pid=1029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391973901.223:9873): login pid=1029 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1035 >type=USER_START msg=audit(1391973901.223:9874): pid=1029 uid=0 auid=0 ses=1035 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391973901.223:9875): pid=1029 uid=0 auid=0 ses=1035 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391973901.233:9876): pid=1029 uid=0 auid=0 ses=1035 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391973901.233:9877): pid=1029 uid=0 auid=0 ses=1035 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391974801.244:9878): pid=1586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391974801.244:9879): pid=1586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391974801.244:9880): login pid=1586 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1036 >type=USER_START msg=audit(1391974801.244:9881): pid=1586 uid=0 auid=0 ses=1036 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391974801.244:9882): pid=1586 uid=0 auid=0 ses=1036 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391974801.254:9883): pid=1586 uid=0 auid=0 ses=1036 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391974801.254:9884): pid=1586 uid=0 auid=0 ses=1036 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391975701.264:9885): pid=2137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391975701.264:9886): pid=2137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391975701.264:9887): login pid=2137 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1037 >type=USER_START msg=audit(1391975701.264:9888): pid=2137 uid=0 auid=0 ses=1037 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391975701.274:9889): pid=2137 uid=0 auid=0 ses=1037 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391975701.274:9890): pid=2137 uid=0 auid=0 ses=1037 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391975701.274:9891): pid=2137 uid=0 auid=0 ses=1037 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391976061.285:9892): pid=2371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391976061.285:9893): pid=2371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391976061.285:9894): login pid=2371 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1038 >type=USER_START msg=audit(1391976061.285:9895): pid=2371 uid=0 auid=0 ses=1038 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391976061.295:9896): pid=2371 uid=0 auid=0 ses=1038 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391976061.305:9897): avc: denied { read } for pid=2387 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391976061.305:9897): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc59c6160 a2=84800 a3=0 items=0 ppid=2385 pid=2387 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1038 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391976061.315:9898): pid=2371 uid=0 auid=0 ses=1038 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391976061.315:9899): pid=2371 uid=0 auid=0 ses=1038 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391976601.325:9900): pid=2726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391976601.325:9901): pid=2726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391976601.325:9902): login pid=2726 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1039 >type=USER_START msg=audit(1391976601.335:9903): pid=2726 uid=0 auid=0 ses=1039 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391976601.335:9904): pid=2726 uid=0 auid=0 ses=1039 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391976601.335:9905): pid=2726 uid=0 auid=0 ses=1039 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391976601.345:9906): pid=2726 uid=0 auid=0 ses=1039 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391977501.335:9907): pid=3273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391977501.345:9908): pid=3273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391977501.345:9909): login pid=3273 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1040 >type=USER_START msg=audit(1391977501.345:9910): pid=3273 uid=0 auid=0 ses=1040 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391977501.345:9911): pid=3273 uid=0 auid=0 ses=1040 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391977501.355:9912): pid=3273 uid=0 auid=0 ses=1040 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391977501.355:9913): pid=3273 uid=0 auid=0 ses=1040 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391978401.366:9914): pid=3824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391978401.366:9915): pid=3824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391978401.366:9916): login pid=3824 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1041 >type=USER_START msg=audit(1391978401.366:9917): pid=3824 uid=0 auid=0 ses=1041 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391978401.366:9918): pid=3824 uid=0 auid=0 ses=1041 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391978401.386:9919): pid=3824 uid=0 auid=0 ses=1041 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391978401.386:9920): pid=3824 uid=0 auid=0 ses=1041 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391979301.397:9921): pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391979301.397:9922): pid=4374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391979301.397:9923): login pid=4374 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1042 >type=USER_START msg=audit(1391979301.407:9924): pid=4374 uid=0 auid=0 ses=1042 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391979301.407:9925): pid=4374 uid=0 auid=0 ses=1042 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391979301.407:9926): pid=4374 uid=0 auid=0 ses=1042 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391979301.407:9927): pid=4374 uid=0 auid=0 ses=1042 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391979661.417:9928): pid=4598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391979661.417:9929): pid=4598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391979661.417:9930): login pid=4598 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1043 >type=USER_START msg=audit(1391979661.427:9931): pid=4598 uid=0 auid=0 ses=1043 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391979661.427:9932): pid=4598 uid=0 auid=0 ses=1043 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391979661.437:9933): avc: denied { read } for pid=4614 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391979661.437:9933): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff02c3d70 a2=84800 a3=0 items=0 ppid=4612 pid=4614 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1043 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391979661.457:9934): pid=4598 uid=0 auid=0 ses=1043 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391979661.457:9935): pid=4598 uid=0 auid=0 ses=1043 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391980201.467:9936): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391980201.467:9937): pid=4953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391980201.467:9938): login pid=4953 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1044 >type=USER_START msg=audit(1391980201.477:9939): pid=4953 uid=0 auid=0 ses=1044 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391980201.477:9940): pid=4953 uid=0 auid=0 ses=1044 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391980201.477:9941): pid=4953 uid=0 auid=0 ses=1044 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391980201.477:9942): pid=4953 uid=0 auid=0 ses=1044 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391981101.488:9943): pid=5500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391981101.488:9944): pid=5500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391981101.488:9945): login pid=5500 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1045 >type=USER_START msg=audit(1391981101.498:9946): pid=5500 uid=0 auid=0 ses=1045 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391981101.498:9947): pid=5500 uid=0 auid=0 ses=1045 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391981101.498:9948): pid=5500 uid=0 auid=0 ses=1045 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391981101.508:9949): pid=5500 uid=0 auid=0 ses=1045 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391982001.518:9950): pid=6048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391982001.518:9951): pid=6048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391982001.518:9952): login pid=6048 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1046 >type=USER_START msg=audit(1391982001.518:9953): pid=6048 uid=0 auid=0 ses=1046 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391982001.518:9954): pid=6048 uid=0 auid=0 ses=1046 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391982001.528:9955): pid=6048 uid=0 auid=0 ses=1046 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391982001.528:9956): pid=6048 uid=0 auid=0 ses=1046 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391982901.539:9957): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391982901.539:9958): pid=6598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391982901.539:9959): login pid=6598 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1047 >type=USER_START msg=audit(1391982901.539:9960): pid=6598 uid=0 auid=0 ses=1047 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391982901.539:9961): pid=6598 uid=0 auid=0 ses=1047 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391982901.549:9962): pid=6598 uid=0 auid=0 ses=1047 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391982901.549:9963): pid=6598 uid=0 auid=0 ses=1047 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391983261.559:9964): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391983261.559:9965): pid=6821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391983261.559:9966): login pid=6821 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1048 >type=USER_START msg=audit(1391983261.559:9967): pid=6821 uid=0 auid=0 ses=1048 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391983261.559:9968): pid=6821 uid=0 auid=0 ses=1048 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391983261.579:9969): avc: denied { read } for pid=6837 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391983261.579:9969): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffc1cea50 a2=84800 a3=0 items=0 ppid=6835 pid=6837 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1048 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391983261.589:9970): pid=6821 uid=0 auid=0 ses=1048 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391983261.589:9971): pid=6821 uid=0 auid=0 ses=1048 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391983801.599:9972): pid=7179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391983801.599:9973): pid=7179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391983801.599:9974): login pid=7179 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1049 >type=USER_START msg=audit(1391983801.599:9975): pid=7179 uid=0 auid=0 ses=1049 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391983801.599:9976): pid=7179 uid=0 auid=0 ses=1049 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391983801.609:9977): pid=7179 uid=0 auid=0 ses=1049 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391983801.609:9978): pid=7179 uid=0 auid=0 ses=1049 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391984701.620:9979): pid=7726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391984701.620:9980): pid=7726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391984701.620:9981): login pid=7726 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1050 >type=USER_START msg=audit(1391984701.630:9982): pid=7726 uid=0 auid=0 ses=1050 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391984701.630:9983): pid=7726 uid=0 auid=0 ses=1050 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391984701.630:9984): pid=7726 uid=0 auid=0 ses=1050 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391984701.640:9985): pid=7726 uid=0 auid=0 ses=1050 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391985601.640:9986): pid=8276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391985601.650:9987): pid=8276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391985601.650:9988): login pid=8276 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1051 >type=USER_START msg=audit(1391985601.650:9989): pid=8276 uid=0 auid=0 ses=1051 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391985601.650:9990): pid=8276 uid=0 auid=0 ses=1051 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391985601.660:9991): pid=8276 uid=0 auid=0 ses=1051 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391985601.660:9992): pid=8276 uid=0 auid=0 ses=1051 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391986501.671:9993): pid=8827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391986501.671:9994): pid=8827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391986501.671:9995): login pid=8827 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1052 >type=USER_START msg=audit(1391986501.671:9996): pid=8827 uid=0 auid=0 ses=1052 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391986501.671:9997): pid=8827 uid=0 auid=0 ses=1052 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391986501.681:9998): pid=8827 uid=0 auid=0 ses=1052 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391986501.681:9999): pid=8827 uid=0 auid=0 ses=1052 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391986861.691:10000): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391986861.691:10001): pid=9054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391986861.691:10002): login pid=9054 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1053 >type=USER_START msg=audit(1391986861.691:10003): pid=9054 uid=0 auid=0 ses=1053 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391986861.691:10004): pid=9054 uid=0 auid=0 ses=1053 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391986861.711:10005): avc: denied { read } for pid=9070 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391986861.711:10005): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd0cc6310 a2=84800 a3=0 items=0 ppid=9068 pid=9070 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1053 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391986861.721:10006): pid=9054 uid=0 auid=0 ses=1053 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391986861.721:10007): pid=9054 uid=0 auid=0 ses=1053 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391987401.731:10008): pid=9411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391987401.731:10009): pid=9411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391987401.731:10010): login pid=9411 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1054 >type=USER_START msg=audit(1391987401.731:10011): pid=9411 uid=0 auid=0 ses=1054 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391987401.731:10012): pid=9411 uid=0 auid=0 ses=1054 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391987401.741:10013): pid=9411 uid=0 auid=0 ses=1054 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391987401.741:10014): pid=9411 uid=0 auid=0 ses=1054 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391988301.752:10015): pid=9957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391988301.752:10016): pid=9957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391988301.752:10017): login pid=9957 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1055 >type=USER_START msg=audit(1391988301.752:10018): pid=9957 uid=0 auid=0 ses=1055 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391988301.752:10019): pid=9957 uid=0 auid=0 ses=1055 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391988301.762:10020): pid=9957 uid=0 auid=0 ses=1055 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391988301.762:10021): pid=9957 uid=0 auid=0 ses=1055 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391989201.772:10022): pid=10506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391989201.772:10023): pid=10506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391989201.772:10024): login pid=10506 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1056 >type=USER_START msg=audit(1391989201.782:10025): pid=10506 uid=0 auid=0 ses=1056 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391989201.782:10026): pid=10506 uid=0 auid=0 ses=1056 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391989201.782:10027): pid=10506 uid=0 auid=0 ses=1056 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391989201.782:10028): pid=10506 uid=0 auid=0 ses=1056 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391990101.793:10029): pid=11055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391990101.793:10030): pid=11055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391990101.793:10031): login pid=11055 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1057 >type=USER_START msg=audit(1391990101.803:10032): pid=11055 uid=0 auid=0 ses=1057 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391990101.803:10033): pid=11055 uid=0 auid=0 ses=1057 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391990101.803:10034): pid=11055 uid=0 auid=0 ses=1057 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391990101.813:10035): pid=11055 uid=0 auid=0 ses=1057 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391990461.813:10036): pid=11277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391990461.813:10037): pid=11277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391990461.813:10038): login pid=11277 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1058 >type=USER_START msg=audit(1391990461.823:10039): pid=11277 uid=0 auid=0 ses=1058 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391990461.823:10040): pid=11277 uid=0 auid=0 ses=1058 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391990461.833:10041): avc: denied { read } for pid=11293 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391990461.833:10041): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff8eef470 a2=84800 a3=0 items=0 ppid=11291 pid=11293 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1058 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391990461.853:10042): pid=11277 uid=0 auid=0 ses=1058 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391990461.853:10043): pid=11277 uid=0 auid=0 ses=1058 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391991001.863:10044): pid=11635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391991001.863:10045): pid=11635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391991001.863:10046): login pid=11635 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1059 >type=USER_START msg=audit(1391991001.863:10047): pid=11635 uid=0 auid=0 ses=1059 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391991001.863:10048): pid=11635 uid=0 auid=0 ses=1059 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391991001.873:10049): pid=11635 uid=0 auid=0 ses=1059 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391991001.873:10050): pid=11635 uid=0 auid=0 ses=1059 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391991901.884:10051): pid=12183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391991901.884:10052): pid=12183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391991901.884:10053): login pid=12183 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1060 >type=USER_START msg=audit(1391991901.884:10054): pid=12183 uid=0 auid=0 ses=1060 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391991901.884:10055): pid=12183 uid=0 auid=0 ses=1060 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391991901.894:10056): pid=12183 uid=0 auid=0 ses=1060 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391991901.894:10057): pid=12183 uid=0 auid=0 ses=1060 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391992801.905:10058): pid=12731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391992801.905:10059): pid=12731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391992801.905:10060): login pid=12731 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1061 >type=USER_START msg=audit(1391992801.905:10061): pid=12731 uid=0 auid=0 ses=1061 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391992801.905:10062): pid=12731 uid=0 auid=0 ses=1061 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391992801.915:10063): pid=12731 uid=0 auid=0 ses=1061 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391992801.915:10064): pid=12731 uid=0 auid=0 ses=1061 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391993701.925:10065): pid=13285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391993701.925:10066): pid=13285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391993701.925:10067): login pid=13285 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1062 >type=USER_START msg=audit(1391993701.935:10068): pid=13285 uid=0 auid=0 ses=1062 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391993701.935:10069): pid=13285 uid=0 auid=0 ses=1062 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391993701.935:10070): pid=13285 uid=0 auid=0 ses=1062 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391993701.935:10071): pid=13285 uid=0 auid=0 ses=1062 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391994061.935:10072): pid=13506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391994061.935:10073): pid=13506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391994061.935:10074): login pid=13506 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1063 >type=USER_START msg=audit(1391994061.935:10075): pid=13506 uid=0 auid=0 ses=1063 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391994061.945:10076): pid=13506 uid=0 auid=0 ses=1063 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391994061.955:10077): avc: denied { read } for pid=13522 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391994061.955:10077): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdf4b11a0 a2=84800 a3=0 items=0 ppid=13520 pid=13522 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1063 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391994062.035:10078): pid=13506 uid=0 auid=0 ses=1063 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391994062.035:10079): pid=13506 uid=0 auid=0 ses=1063 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391994601.046:10080): pid=13864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391994601.046:10081): pid=13864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391994601.046:10082): login pid=13864 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1064 >type=USER_START msg=audit(1391994601.046:10083): pid=13864 uid=0 auid=0 ses=1064 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391994601.046:10084): pid=13864 uid=0 auid=0 ses=1064 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391994601.056:10085): pid=13864 uid=0 auid=0 ses=1064 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391994601.056:10086): pid=13864 uid=0 auid=0 ses=1064 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391995501.066:10087): pid=14410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391995501.066:10088): pid=14410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391995501.066:10089): login pid=14410 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1065 >type=USER_START msg=audit(1391995501.066:10090): pid=14410 uid=0 auid=0 ses=1065 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391995501.066:10091): pid=14410 uid=0 auid=0 ses=1065 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391995501.076:10092): pid=14410 uid=0 auid=0 ses=1065 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391995501.076:10093): pid=14410 uid=0 auid=0 ses=1065 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391996401.087:10094): pid=14957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391996401.087:10095): pid=14957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391996401.087:10096): login pid=14957 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1066 >type=USER_START msg=audit(1391996401.087:10097): pid=14957 uid=0 auid=0 ses=1066 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391996401.087:10098): pid=14957 uid=0 auid=0 ses=1066 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391996401.097:10099): pid=14957 uid=0 auid=0 ses=1066 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391996401.097:10100): pid=14957 uid=0 auid=0 ses=1066 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391997301.107:10101): pid=15506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391997301.107:10102): pid=15506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391997301.107:10103): login pid=15506 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1067 >type=USER_START msg=audit(1391997301.117:10104): pid=15506 uid=0 auid=0 ses=1067 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391997301.117:10105): pid=15506 uid=0 auid=0 ses=1067 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391997301.117:10106): pid=15506 uid=0 auid=0 ses=1067 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391997301.117:10107): pid=15506 uid=0 auid=0 ses=1067 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391997661.127:10108): pid=15727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391997661.127:10109): pid=15727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391997661.127:10110): login pid=15727 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1068 >type=USER_START msg=audit(1391997661.137:10111): pid=15727 uid=0 auid=0 ses=1068 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391997661.137:10112): pid=15727 uid=0 auid=0 ses=1068 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1391997661.157:10113): avc: denied { read } for pid=15746 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1391997661.157:10113): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcb5b8910 a2=84800 a3=0 items=0 ppid=15744 pid=15746 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1068 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1391997661.167:10114): pid=15727 uid=0 auid=0 ses=1068 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391997661.167:10115): pid=15727 uid=0 auid=0 ses=1068 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391998201.178:10116): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391998201.178:10117): pid=16088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391998201.178:10118): login pid=16088 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1069 >type=USER_START msg=audit(1391998201.188:10119): pid=16088 uid=0 auid=0 ses=1069 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391998201.188:10120): pid=16088 uid=0 auid=0 ses=1069 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391998201.188:10121): pid=16088 uid=0 auid=0 ses=1069 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391998201.198:10122): pid=16088 uid=0 auid=0 ses=1069 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1391999101.208:10123): pid=16635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1391999101.208:10124): pid=16635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1391999101.208:10125): login pid=16635 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1070 >type=USER_START msg=audit(1391999101.208:10126): pid=16635 uid=0 auid=0 ses=1070 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1391999101.208:10127): pid=16635 uid=0 auid=0 ses=1070 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1391999101.218:10128): pid=16635 uid=0 auid=0 ses=1070 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1391999101.218:10129): pid=16635 uid=0 auid=0 ses=1070 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392000001.229:10130): pid=17186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392000001.229:10131): pid=17186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392000001.229:10132): login pid=17186 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1071 >type=USER_START msg=audit(1392000001.229:10133): pid=17186 uid=0 auid=0 ses=1071 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392000001.229:10134): pid=17186 uid=0 auid=0 ses=1071 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392000001.239:10135): pid=17186 uid=0 auid=0 ses=1071 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392000001.239:10136): pid=17186 uid=0 auid=0 ses=1071 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392000901.249:10137): pid=17737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392000901.249:10138): pid=17737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392000901.249:10139): login pid=17737 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1072 >type=USER_START msg=audit(1392000901.249:10140): pid=17737 uid=0 auid=0 ses=1072 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392000901.249:10141): pid=17737 uid=0 auid=0 ses=1072 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392000901.259:10142): pid=17737 uid=0 auid=0 ses=1072 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392000901.259:10143): pid=17737 uid=0 auid=0 ses=1072 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392001261.270:10144): pid=17961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392001261.270:10145): pid=17961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392001261.270:10146): login pid=17961 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1073 >type=USER_START msg=audit(1392001261.270:10147): pid=17961 uid=0 auid=0 ses=1073 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392001261.280:10148): pid=17961 uid=0 auid=0 ses=1073 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392001261.290:10149): avc: denied { read } for pid=17980 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392001261.290:10149): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffeb428060 a2=84800 a3=0 items=0 ppid=17978 pid=17980 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1073 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392001261.310:10150): pid=17961 uid=0 auid=0 ses=1073 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392001261.310:10151): pid=17961 uid=0 auid=0 ses=1073 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392001801.320:10152): pid=18361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392001801.320:10153): pid=18361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392001801.320:10154): login pid=18361 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1074 >type=USER_START msg=audit(1392001801.330:10155): pid=18361 uid=0 auid=0 ses=1074 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392001801.330:10156): pid=18361 uid=0 auid=0 ses=1074 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392001801.330:10157): pid=18361 uid=0 auid=0 ses=1074 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392001801.340:10158): pid=18361 uid=0 auid=0 ses=1074 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392002701.350:10159): pid=18909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392002701.350:10160): pid=18909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392002701.350:10161): login pid=18909 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1075 >type=USER_START msg=audit(1392002701.350:10162): pid=18909 uid=0 auid=0 ses=1075 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392002701.350:10163): pid=18909 uid=0 auid=0 ses=1075 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392002701.360:10164): pid=18909 uid=0 auid=0 ses=1075 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392002701.360:10165): pid=18909 uid=0 auid=0 ses=1075 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392003601.371:10166): pid=19457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392003601.371:10167): pid=19457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392003601.371:10168): login pid=19457 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1076 >type=USER_START msg=audit(1392003601.371:10169): pid=19457 uid=0 auid=0 ses=1076 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392003601.371:10170): pid=19457 uid=0 auid=0 ses=1076 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392003601.381:10171): pid=19457 uid=0 auid=0 ses=1076 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392003601.381:10172): pid=19457 uid=0 auid=0 ses=1076 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392004501.391:10173): pid=20008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392004501.391:10174): pid=20008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392004501.391:10175): login pid=20008 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1077 >type=USER_START msg=audit(1392004501.391:10176): pid=20008 uid=0 auid=0 ses=1077 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392004501.391:10177): pid=20008 uid=0 auid=0 ses=1077 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392004501.401:10178): pid=20008 uid=0 auid=0 ses=1077 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392004501.401:10179): pid=20008 uid=0 auid=0 ses=1077 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392004861.412:10180): pid=20231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392004861.412:10181): pid=20231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392004861.412:10182): login pid=20231 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1078 >type=USER_START msg=audit(1392004861.422:10183): pid=20231 uid=0 auid=0 ses=1078 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392004861.422:10184): pid=20231 uid=0 auid=0 ses=1078 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392004861.442:10185): avc: denied { read } for pid=20250 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392004861.442:10185): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc1522870 a2=84800 a3=0 items=0 ppid=20248 pid=20250 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1078 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392004861.502:10186): pid=20231 uid=0 auid=0 ses=1078 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392004861.502:10187): pid=20231 uid=0 auid=0 ses=1078 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392005401.512:10188): pid=20590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392005401.512:10189): pid=20590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392005401.512:10190): login pid=20590 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1079 >type=USER_START msg=audit(1392005401.512:10191): pid=20590 uid=0 auid=0 ses=1079 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392005401.512:10192): pid=20590 uid=0 auid=0 ses=1079 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392005401.522:10193): pid=20590 uid=0 auid=0 ses=1079 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392005401.522:10194): pid=20590 uid=0 auid=0 ses=1079 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392006301.533:10195): pid=21139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392006301.533:10196): pid=21139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392006301.533:10197): login pid=21139 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1080 >type=USER_START msg=audit(1392006301.543:10198): pid=21139 uid=0 auid=0 ses=1080 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392006301.543:10199): pid=21139 uid=0 auid=0 ses=1080 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392006301.553:10200): pid=21139 uid=0 auid=0 ses=1080 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392006301.553:10201): pid=21139 uid=0 auid=0 ses=1080 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392007201.563:10202): pid=21689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392007201.563:10203): pid=21689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392007201.563:10204): login pid=21689 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1081 >type=USER_START msg=audit(1392007201.563:10205): pid=21689 uid=0 auid=0 ses=1081 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392007201.563:10206): pid=21689 uid=0 auid=0 ses=1081 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392007201.573:10207): pid=21689 uid=0 auid=0 ses=1081 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392007201.573:10208): pid=21689 uid=0 auid=0 ses=1081 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392008101.584:10209): pid=22238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392008101.584:10210): pid=22238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392008101.584:10211): login pid=22238 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1082 >type=USER_START msg=audit(1392008101.584:10212): pid=22238 uid=0 auid=0 ses=1082 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392008101.584:10213): pid=22238 uid=0 auid=0 ses=1082 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392008101.594:10214): pid=22238 uid=0 auid=0 ses=1082 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392008101.594:10215): pid=22238 uid=0 auid=0 ses=1082 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392008461.604:10216): pid=22461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392008461.604:10217): pid=22461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392008461.604:10218): login pid=22461 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1083 >type=USER_START msg=audit(1392008461.614:10219): pid=22461 uid=0 auid=0 ses=1083 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392008461.614:10220): pid=22461 uid=0 auid=0 ses=1083 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392008461.624:10221): avc: denied { read } for pid=22480 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392008461.624:10221): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe7dacf60 a2=84800 a3=0 items=0 ppid=22478 pid=22480 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1083 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392008461.644:10222): pid=22461 uid=0 auid=0 ses=1083 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392008461.654:10223): pid=22461 uid=0 auid=0 ses=1083 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392009001.654:10224): pid=22818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392009001.654:10225): pid=22818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392009001.654:10226): login pid=22818 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1084 >type=USER_START msg=audit(1392009001.664:10227): pid=22818 uid=0 auid=0 ses=1084 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392009001.664:10228): pid=22818 uid=0 auid=0 ses=1084 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392009001.674:10229): pid=22818 uid=0 auid=0 ses=1084 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392009001.674:10230): pid=22818 uid=0 auid=0 ses=1084 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392009721.645:10231): avc: denied { read } for pid=23263 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392009721.645:10231): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc96076f0 a2=84800 a3=0 items=0 ppid=23261 pid=23263 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1083 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1392009901.685:10232): pid=23417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392009901.685:10233): pid=23417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392009901.685:10234): login pid=23417 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1085 >type=USER_START msg=audit(1392009901.695:10235): pid=23417 uid=0 auid=0 ses=1085 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392009901.695:10236): pid=23417 uid=0 auid=0 ses=1085 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392009901.705:10237): pid=23417 uid=0 auid=0 ses=1085 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392009901.705:10238): pid=23417 uid=0 auid=0 ses=1085 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392010801.705:10239): pid=23965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392010801.705:10240): pid=23965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392010801.705:10241): login pid=23965 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1086 >type=USER_START msg=audit(1392010801.705:10242): pid=23965 uid=0 auid=0 ses=1086 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392010801.705:10243): pid=23965 uid=0 auid=0 ses=1086 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392010801.715:10244): pid=23965 uid=0 auid=0 ses=1086 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392010801.715:10245): pid=23965 uid=0 auid=0 ses=1086 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392011701.726:10246): pid=24515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392011701.726:10247): pid=24515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392011701.726:10248): login pid=24515 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1087 >type=USER_START msg=audit(1392011701.726:10249): pid=24515 uid=0 auid=0 ses=1087 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392011701.726:10250): pid=24515 uid=0 auid=0 ses=1087 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392011701.736:10251): pid=24515 uid=0 auid=0 ses=1087 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392011701.736:10252): pid=24515 uid=0 auid=0 ses=1087 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392012061.746:10253): pid=24739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392012061.746:10254): pid=24739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392012061.746:10255): login pid=24739 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1088 >type=USER_START msg=audit(1392012061.746:10256): pid=24739 uid=0 auid=0 ses=1088 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392012061.756:10257): pid=24739 uid=0 auid=0 ses=1088 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392012061.766:10258): avc: denied { read } for pid=24755 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392012061.766:10258): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc2501e00 a2=84800 a3=0 items=0 ppid=24753 pid=24755 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1088 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392012061.786:10259): pid=24739 uid=0 auid=0 ses=1088 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392012061.786:10260): pid=24739 uid=0 auid=0 ses=1088 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392012601.796:10261): pid=25098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392012601.796:10262): pid=25098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392012601.796:10263): login pid=25098 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1089 >type=USER_START msg=audit(1392012601.806:10264): pid=25098 uid=0 auid=0 ses=1089 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392012601.806:10265): pid=25098 uid=0 auid=0 ses=1089 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392012601.806:10266): pid=25098 uid=0 auid=0 ses=1089 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392012601.816:10267): pid=25098 uid=0 auid=0 ses=1089 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392013501.827:10268): pid=25650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392013501.827:10269): pid=25650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392013501.827:10270): login pid=25650 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1090 >type=USER_START msg=audit(1392013501.827:10271): pid=25650 uid=0 auid=0 ses=1090 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392013501.827:10272): pid=25650 uid=0 auid=0 ses=1090 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392013501.837:10273): pid=25650 uid=0 auid=0 ses=1090 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392013501.837:10274): pid=25650 uid=0 auid=0 ses=1090 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392014401.847:10275): pid=26198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392014401.847:10276): pid=26198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392014401.847:10277): login pid=26198 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1091 >type=USER_START msg=audit(1392014401.847:10278): pid=26198 uid=0 auid=0 ses=1091 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392014401.847:10279): pid=26198 uid=0 auid=0 ses=1091 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392014401.857:10280): pid=26198 uid=0 auid=0 ses=1091 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392014401.857:10281): pid=26198 uid=0 auid=0 ses=1091 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392015301.868:10282): pid=26747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392015301.868:10283): pid=26747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392015301.868:10284): login pid=26747 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1092 >type=USER_START msg=audit(1392015301.878:10285): pid=26747 uid=0 auid=0 ses=1092 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392015301.878:10286): pid=26747 uid=0 auid=0 ses=1092 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392015301.878:10287): pid=26747 uid=0 auid=0 ses=1092 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392015301.878:10288): pid=26747 uid=0 auid=0 ses=1092 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392015661.888:10289): pid=26969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392015661.888:10290): pid=26969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392015661.888:10291): login pid=26969 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1093 >type=USER_START msg=audit(1392015661.898:10292): pid=26969 uid=0 auid=0 ses=1093 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392015661.898:10293): pid=26969 uid=0 auid=0 ses=1093 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392015661.908:10294): avc: denied { read } for pid=26985 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392015661.908:10294): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe8e02500 a2=84800 a3=0 items=0 ppid=26983 pid=26985 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1093 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392015661.928:10295): pid=26969 uid=0 auid=0 ses=1093 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392015661.928:10296): pid=26969 uid=0 auid=0 ses=1093 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392016201.938:10297): pid=27326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392016201.938:10298): pid=27326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392016201.938:10299): login pid=27326 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1094 >type=USER_START msg=audit(1392016201.938:10300): pid=27326 uid=0 auid=0 ses=1094 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392016201.938:10301): pid=27326 uid=0 auid=0 ses=1094 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392016201.948:10302): pid=27326 uid=0 auid=0 ses=1094 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392016201.948:10303): pid=27326 uid=0 auid=0 ses=1094 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392017101.959:10304): pid=27876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392017101.959:10305): pid=27876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392017101.959:10306): login pid=27876 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1095 >type=USER_START msg=audit(1392017101.959:10307): pid=27876 uid=0 auid=0 ses=1095 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392017101.959:10308): pid=27876 uid=0 auid=0 ses=1095 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392017101.969:10309): pid=27876 uid=0 auid=0 ses=1095 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392017101.969:10310): pid=27876 uid=0 auid=0 ses=1095 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392018001.980:10311): pid=28424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392018001.980:10312): pid=28424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392018001.980:10313): login pid=28424 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1096 >type=USER_START msg=audit(1392018001.990:10314): pid=28424 uid=0 auid=0 ses=1096 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392018001.990:10315): pid=28424 uid=0 auid=0 ses=1096 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392018001.990:10316): pid=28424 uid=0 auid=0 ses=1096 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392018002.000:10317): pid=28424 uid=0 auid=0 ses=1096 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392018901.010:10318): pid=28970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392018901.010:10319): pid=28970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392018901.010:10320): login pid=28970 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1097 >type=USER_START msg=audit(1392018901.010:10321): pid=28970 uid=0 auid=0 ses=1097 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392018901.010:10322): pid=28970 uid=0 auid=0 ses=1097 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392018901.020:10323): pid=28970 uid=0 auid=0 ses=1097 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392018901.020:10324): pid=28970 uid=0 auid=0 ses=1097 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392019261.030:10325): pid=29192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392019261.030:10326): pid=29192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392019261.030:10327): login pid=29192 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1098 >type=USER_START msg=audit(1392019261.030:10328): pid=29192 uid=0 auid=0 ses=1098 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392019261.030:10329): pid=29192 uid=0 auid=0 ses=1098 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392019261.050:10330): avc: denied { read } for pid=29208 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392019261.050:10330): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdd3c1550 a2=84800 a3=0 items=0 ppid=29206 pid=29208 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1098 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392019261.060:10331): pid=29192 uid=0 auid=0 ses=1098 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392019261.060:10332): pid=29192 uid=0 auid=0 ses=1098 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392019801.071:10333): pid=29550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392019801.071:10334): pid=29550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392019801.071:10335): login pid=29550 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1099 >type=USER_START msg=audit(1392019801.071:10336): pid=29550 uid=0 auid=0 ses=1099 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392019801.071:10337): pid=29550 uid=0 auid=0 ses=1099 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392019801.081:10338): pid=29550 uid=0 auid=0 ses=1099 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392019801.081:10339): pid=29550 uid=0 auid=0 ses=1099 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392020701.091:10340): pid=30098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392020701.091:10341): pid=30098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392020701.091:10342): login pid=30098 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1100 >type=USER_START msg=audit(1392020701.101:10343): pid=30098 uid=0 auid=0 ses=1100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392020701.101:10344): pid=30098 uid=0 auid=0 ses=1100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392020701.101:10345): pid=30098 uid=0 auid=0 ses=1100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392020701.101:10346): pid=30098 uid=0 auid=0 ses=1100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392021601.112:10347): pid=30645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392021601.112:10348): pid=30645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392021601.122:10349): login pid=30645 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1101 >type=USER_START msg=audit(1392021601.122:10350): pid=30645 uid=0 auid=0 ses=1101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392021601.122:10351): pid=30645 uid=0 auid=0 ses=1101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392021601.132:10352): pid=30645 uid=0 auid=0 ses=1101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392021601.132:10353): pid=30645 uid=0 auid=0 ses=1101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392022501.142:10354): pid=31196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392022501.142:10355): pid=31196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392022501.142:10356): login pid=31196 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1102 >type=USER_START msg=audit(1392022501.142:10357): pid=31196 uid=0 auid=0 ses=1102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392022501.142:10358): pid=31196 uid=0 auid=0 ses=1102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392022501.152:10359): pid=31196 uid=0 auid=0 ses=1102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392022501.152:10360): pid=31196 uid=0 auid=0 ses=1102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392022861.162:10361): pid=31417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392022861.162:10362): pid=31417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392022861.162:10363): login pid=31417 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1103 >type=USER_START msg=audit(1392022861.162:10364): pid=31417 uid=0 auid=0 ses=1103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392022861.162:10365): pid=31417 uid=0 auid=0 ses=1103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392022861.182:10366): avc: denied { read } for pid=31433 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392022861.182:10366): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffa2d6f90 a2=84800 a3=0 items=0 ppid=31431 pid=31433 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1103 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392022861.192:10367): pid=31417 uid=0 auid=0 ses=1103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392022861.192:10368): pid=31417 uid=0 auid=0 ses=1103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392023401.203:10369): pid=31775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392023401.203:10370): pid=31775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392023401.203:10371): login pid=31775 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1104 >type=USER_START msg=audit(1392023401.203:10372): pid=31775 uid=0 auid=0 ses=1104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392023401.203:10373): pid=31775 uid=0 auid=0 ses=1104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392023401.213:10374): pid=31775 uid=0 auid=0 ses=1104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392023401.213:10375): pid=31775 uid=0 auid=0 ses=1104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392024301.223:10376): pid=32321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392024301.223:10377): pid=32321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392024301.223:10378): login pid=32321 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1105 >type=USER_START msg=audit(1392024301.223:10379): pid=32321 uid=0 auid=0 ses=1105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392024301.223:10380): pid=32321 uid=0 auid=0 ses=1105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392024301.233:10381): pid=32321 uid=0 auid=0 ses=1105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392024301.233:10382): pid=32321 uid=0 auid=0 ses=1105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392025201.244:10383): pid=32871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392025201.244:10384): pid=32871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392025201.244:10385): login pid=32871 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1106 >type=USER_START msg=audit(1392025201.254:10386): pid=32871 uid=0 auid=0 ses=1106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392025201.254:10387): pid=32871 uid=0 auid=0 ses=1106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392025201.254:10388): pid=32871 uid=0 auid=0 ses=1106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392025201.254:10389): pid=32871 uid=0 auid=0 ses=1106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392026101.264:10390): pid=33424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392026101.264:10391): pid=33424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392026101.274:10392): login pid=33424 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1107 >type=USER_START msg=audit(1392026101.274:10393): pid=33424 uid=0 auid=0 ses=1107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392026101.274:10394): pid=33424 uid=0 auid=0 ses=1107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392026101.284:10395): pid=33424 uid=0 auid=0 ses=1107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392026101.284:10396): pid=33424 uid=0 auid=0 ses=1107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392026461.285:10397): pid=33649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392026461.285:10398): pid=33649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392026461.295:10399): login pid=33649 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1108 >type=USER_START msg=audit(1392026461.295:10400): pid=33649 uid=0 auid=0 ses=1108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392026461.295:10401): pid=33649 uid=0 auid=0 ses=1108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392026461.305:10402): avc: denied { read } for pid=33665 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392026461.305:10402): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffce86cea0 a2=84800 a3=0 items=0 ppid=33663 pid=33665 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1108 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392026461.325:10403): pid=33649 uid=0 auid=0 ses=1108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392026461.325:10404): pid=33649 uid=0 auid=0 ses=1108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392027001.335:10405): pid=34006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392027001.335:10406): pid=34006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392027001.335:10407): login pid=34006 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1109 >type=USER_START msg=audit(1392027001.335:10408): pid=34006 uid=0 auid=0 ses=1109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392027001.335:10409): pid=34006 uid=0 auid=0 ses=1109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392027001.345:10410): pid=34006 uid=0 auid=0 ses=1109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392027001.345:10411): pid=34006 uid=0 auid=0 ses=1109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392027901.345:10412): pid=34555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392027901.345:10413): pid=34555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392027901.345:10414): login pid=34555 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1110 >type=USER_START msg=audit(1392027901.345:10415): pid=34555 uid=0 auid=0 ses=1110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392027901.345:10416): pid=34555 uid=0 auid=0 ses=1110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392027901.355:10417): pid=34555 uid=0 auid=0 ses=1110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392027901.355:10418): pid=34555 uid=0 auid=0 ses=1110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392028801.366:10419): pid=35106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392028801.366:10420): pid=35106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392028801.366:10421): login pid=35106 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1111 >type=USER_START msg=audit(1392028801.366:10422): pid=35106 uid=0 auid=0 ses=1111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392028801.376:10423): pid=35106 uid=0 auid=0 ses=1111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392028801.376:10424): pid=35106 uid=0 auid=0 ses=1111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392028801.376:10425): pid=35106 uid=0 auid=0 ses=1111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392029701.386:10426): pid=35655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392029701.386:10427): pid=35655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392029701.386:10428): login pid=35655 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1112 >type=USER_START msg=audit(1392029701.396:10429): pid=35655 uid=0 auid=0 ses=1112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392029701.396:10430): pid=35655 uid=0 auid=0 ses=1112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392029701.396:10431): pid=35655 uid=0 auid=0 ses=1112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392029701.406:10432): pid=35655 uid=0 auid=0 ses=1112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392030061.407:10433): pid=35880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392030061.407:10434): pid=35880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392030061.407:10435): login pid=35880 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1113 >type=USER_START msg=audit(1392030061.417:10436): pid=35880 uid=0 auid=0 ses=1113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392030061.417:10437): pid=35880 uid=0 auid=0 ses=1113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392030061.427:10438): avc: denied { read } for pid=35896 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392030061.427:10438): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd8077a20 a2=84800 a3=0 items=0 ppid=35894 pid=35896 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1113 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392030061.447:10439): pid=35880 uid=0 auid=0 ses=1113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392030061.447:10440): pid=35880 uid=0 auid=0 ses=1113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392030601.457:10441): pid=36236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392030601.457:10442): pid=36236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392030601.457:10443): login pid=36236 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1114 >type=USER_START msg=audit(1392030601.457:10444): pid=36236 uid=0 auid=0 ses=1114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392030601.457:10445): pid=36236 uid=0 auid=0 ses=1114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392030601.467:10446): pid=36236 uid=0 auid=0 ses=1114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392030601.467:10447): pid=36236 uid=0 auid=0 ses=1114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392031501.478:10448): pid=36786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392031501.478:10449): pid=36786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392031501.478:10450): login pid=36786 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1115 >type=USER_START msg=audit(1392031501.488:10451): pid=36786 uid=0 auid=0 ses=1115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392031501.488:10452): pid=36786 uid=0 auid=0 ses=1115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392031501.488:10453): pid=36786 uid=0 auid=0 ses=1115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392031501.488:10454): pid=36786 uid=0 auid=0 ses=1115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392032401.498:10455): pid=37333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392032401.498:10456): pid=37333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392032401.498:10457): login pid=37333 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1116 >type=USER_START msg=audit(1392032401.508:10458): pid=37333 uid=0 auid=0 ses=1116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392032401.508:10459): pid=37333 uid=0 auid=0 ses=1116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392032401.508:10460): pid=37333 uid=0 auid=0 ses=1116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392032401.518:10461): pid=37333 uid=0 auid=0 ses=1116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392033301.529:10462): pid=37882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392033301.529:10463): pid=37882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392033301.529:10464): login pid=37882 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1117 >type=USER_START msg=audit(1392033301.529:10465): pid=37882 uid=0 auid=0 ses=1117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392033301.529:10466): pid=37882 uid=0 auid=0 ses=1117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392033301.539:10467): pid=37882 uid=0 auid=0 ses=1117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392033301.539:10468): pid=37882 uid=0 auid=0 ses=1117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392033661.549:10469): pid=38105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392033661.549:10470): pid=38105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392033661.549:10471): login pid=38105 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1118 >type=USER_START msg=audit(1392033661.549:10472): pid=38105 uid=0 auid=0 ses=1118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392033661.549:10473): pid=38105 uid=0 auid=0 ses=1118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392033661.569:10474): avc: denied { read } for pid=38121 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392033661.569:10474): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffed9e06c0 a2=84800 a3=0 items=0 ppid=38119 pid=38121 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1118 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392033661.579:10475): pid=38105 uid=0 auid=0 ses=1118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392033661.579:10476): pid=38105 uid=0 auid=0 ses=1118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392034201.589:10477): pid=38462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392034201.589:10478): pid=38462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392034201.589:10479): login pid=38462 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1119 >type=USER_START msg=audit(1392034201.599:10480): pid=38462 uid=0 auid=0 ses=1119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392034201.599:10481): pid=38462 uid=0 auid=0 ses=1119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392034201.599:10482): pid=38462 uid=0 auid=0 ses=1119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392034201.599:10483): pid=38462 uid=0 auid=0 ses=1119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1392035026.250:10484): pid=38964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=38964 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392035026.250:10485): pid=38964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=38964 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392035026.250:10486): pid=38964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=38964 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392035026.250:10487): pid=38963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=38964 suid=74 rport=59563 laddr=10 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392035026.250:10488): pid=38963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=38964 suid=74 rport=59563 laddr=10 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_AUTH msg=audit(1392035026.330:10489): pid=38963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_ACCT msg=audit(1392035026.330:10490): pid=38963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392035026.330:10491): pid=38963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=38964 suid=74 rport=59563 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_AUTH msg=audit(1392035026.330:10492): pid=38963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1392035026.330:10493): pid=38963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=LOGIN msg=audit(1392035026.330:10494): login pid=38963 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1120 >type=USER_ROLE_CHANGE msg=audit(1392035026.370:10495): pid=38963 uid=0 auid=0 ses=1120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_START msg=audit(1392035026.380:10496): pid=38963 uid=0 auid=0 ses=1120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392035026.390:10497): pid=38968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=38968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392035026.390:10498): pid=38968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=38968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392035026.390:10499): pid=38968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=38968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392035026.390:10500): pid=38967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=blowfish-cbc ksize=128 mac=hmac-sha1 spid=38968 suid=74 rport=59564 laddr=10.10.27.64 lpo exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392035026.390:10501): pid=38967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=blowfish-cbc ksize=128 mac=hmac-sha1 spid=38968 suid=74 rport=59564 laddr=10.10.27.64 lpo exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_AUTH msg=audit(1392035026.420:10502): pid=38967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_ACCT msg=audit(1392035026.430:10503): pid=38967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392035026.430:10504): pid=38967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=38968 suid=74 rport=59564 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_AUTH msg=audit(1392035026.430:10505): pid=38967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1392035026.430:10506): pid=38967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=LOGIN msg=audit(1392035026.430:10507): login pid=38967 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1121 >type=USER_ROLE_CHANGE msg=audit(1392035026.460:10508): pid=38967 uid=0 auid=0 ses=1121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_START msg=audit(1392035026.470:10509): pid=38967 uid=0 auid=0 ses=1121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1392035026.470:10510): pid=38967 uid=0 auid=0 ses=1121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_START msg=audit(1392035026.470:10511): pid=38967 uid=0 auid=0 ses=1121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392035026.470:10512): pid=38971 uid=0 auid=0 ses=1121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=38971 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392035026.470:10513): pid=38971 uid=0 auid=0 ses=1121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=38971 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392035026.470:10514): pid=38971 uid=0 auid=0 ses=1121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=38971 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRED_REFR msg=audit(1392035026.480:10515): pid=38971 uid=0 auid=0 ses=1121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1392035026.820:10516): pid=38983 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1392035026.820:10517): pid=38983 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1392035026.820:10518): pid=38983 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=38983 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1392035026.820:10519): pid=38983 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=38983 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1392035026.820:10520): pid=38983 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=38983 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1392035026.820:10521): pid=38983 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_ACCT msg=audit(1392035101.620:10522): pid=39096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392035101.620:10523): pid=39096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392035101.620:10524): login pid=39096 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1122 >type=USER_START msg=audit(1392035101.620:10525): pid=39096 uid=0 auid=0 ses=1122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392035101.620:10526): pid=39096 uid=0 auid=0 ses=1122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392035101.630:10527): pid=39096 uid=0 auid=0 ses=1122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392035101.640:10528): pid=39096 uid=0 auid=0 ses=1122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1392035964.760:10529): pid=39630 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D332031302E31302E32372E36383A2F73746F72616765202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1392035964.770:10530): pid=39630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392035964.770:10531): pid=39630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392035964.800:10532): pid=39630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392035964.800:10533): pid=39630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392035964.890:10534): pid=39640 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392035964.890:10535): pid=39640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392035964.890:10536): pid=39640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392035964.900:10537): pid=39640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392035964.900:10538): pid=39640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392035964.910:10539): pid=39642 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392035964.910:10540): pid=39642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392035964.910:10541): pid=39642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392035964.950:10542): pid=39642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392035964.950:10543): pid=39642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392035965.070:10544): pid=39673 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A' >type=CRED_ACQ msg=audit(1392035965.070:10545): pid=39673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392035965.070:10546): pid=39673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392035965.080:10547): pid=39673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392035965.080:10548): pid=39673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1392036001.650:10549): pid=39736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392036001.650:10550): pid=39736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392036001.650:10551): login pid=39736 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1123 >type=USER_START msg=audit(1392036001.650:10552): pid=39736 uid=0 auid=0 ses=1123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392036001.660:10553): pid=39736 uid=0 auid=0 ses=1123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392036001.670:10554): pid=39736 uid=0 auid=0 ses=1123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392036001.670:10555): pid=39736 uid=0 auid=0 ses=1123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1392036413.610:10556): pid=40126 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F756D6F756E74202D66202D6C202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1392036413.610:10557): pid=40126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392036413.610:10558): pid=40126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392036413.680:10559): pid=40126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392036413.680:10560): pid=40126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392036413.690:10561): pid=40130 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392036413.690:10562): pid=40130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392036413.690:10563): pid=40130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392036413.690:10564): pid=40130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392036413.690:10565): pid=40130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392036413.700:10566): pid=40132 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392036413.700:10567): pid=40132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392036413.700:10568): pid=40132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392036413.740:10569): pid=40132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392036413.740:10570): pid=40132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392036426.660:10571): pid=40165 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=726D202D72207664736D terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1392036426.660:10572): pid=40165 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1392036426.660:10573): pid=40165 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1392036426.740:10574): pid=40165 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1392036426.740:10575): pid=40165 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=ANOM_PROMISCUOUS msg=audit(1392036596.611:10576): dev=vdsmtest-6FzAQ prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=1120 >type=SYSCALL msg=audit(1392036596.611:10576): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffc931b768 a3=0 items=0 ppid=57144 pid=57542 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1120 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1392036596.611:10577): dev=vdsmtest-CtvT0 prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=1120 >type=SYSCALL msg=audit(1392036596.611:10577): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffcafb62e8 a3=0 items=0 ppid=57144 pid=57543 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1120 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1392036596.621:10578): dev=vdsmtest-1XDOz prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=1120 >type=SYSCALL msg=audit(1392036596.621:10578): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3ffff968a7e8 a3=0 items=0 ppid=57144 pid=57544 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1120 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1392036596.651:10579): dev=src-v3CsA prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=1120 >type=SYSCALL msg=audit(1392036596.651:10579): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3fffc9a00bc0 a3=1143 items=0 ppid=57143 pid=57144 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1120 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1392036596.681:10580): dev=src-v3CsA prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=1120 >type=SYSCALL msg=audit(1392036596.681:10580): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3fffc9a00bc0 a3=1043 items=0 ppid=57143 pid=57144 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1120 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1392036596.791:10581): dev=vdsmtest-6FzAQ prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=1120 >type=ANOM_PROMISCUOUS msg=audit(1392036596.861:10582): dev=vdsmtest-CtvT0 prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=1120 >type=ANOM_PROMISCUOUS msg=audit(1392036596.941:10583): dev=vdsmtest-1XDOz prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=1120 >type=ANOM_PROMISCUOUS msg=audit(1392036597.351:10584): dev=vdsmtest-6FzAQ prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=1120 >type=SYSCALL msg=audit(1392036597.351:10584): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffd574bde8 a3=0 items=0 ppid=57144 pid=57591 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1120 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1392036597.361:10585): dev=vdsmtest-CtvT0 prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=1120 >type=SYSCALL msg=audit(1392036597.361:10585): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3fffd6129208 a3=0 items=0 ppid=57144 pid=57592 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1120 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1392036597.361:10586): dev=vdsmtest-1XDOz prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=1120 >type=SYSCALL msg=audit(1392036597.361:10586): arch=80000015 syscall=54 success=yes exit=0 a0=8 a1=89a2 a2=3ffff3594d88 a3=0 items=0 ppid=57144 pid=57593 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1120 tty=pts0 comm="brctl" exe="/usr/sbin/brctl" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1392036597.391:10587): dev=src-v3CsA prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=1120 >type=SYSCALL msg=audit(1392036597.391:10587): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3fffc9a00bc0 a3=1143 items=0 ppid=57143 pid=57144 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1120 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1392036597.571:10588): dev=src-v3CsA prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=1120 >type=SYSCALL msg=audit(1392036597.571:10588): arch=80000015 syscall=54 success=yes exit=0 a0=57 a1=8914 a2=3fffc9a00bc0 a3=1043 items=0 ppid=57143 pid=57144 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1120 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1392036597.581:10589): dev=vdsmtest-6FzAQ prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=1120 >type=ANOM_PROMISCUOUS msg=audit(1392036597.651:10590): dev=vdsmtest-CtvT0 prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=1120 >type=ANOM_PROMISCUOUS msg=audit(1392036597.721:10591): dev=vdsmtest-1XDOz prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=1120 >type=ANOM_PROMISCUOUS msg=audit(1392036598.921:10592): dev=vdsmtest-124nZ prom=256 old_prom=0 auid=0 uid=0 gid=0 ses=1120 >type=SYSCALL msg=audit(1392036598.921:10592): arch=80000015 syscall=54 success=yes exit=0 a0=4a a1=8914 a2=3fffc9a00da0 a3=1143 items=0 ppid=57143 pid=57144 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1120 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1392036598.931:10593): dev=vdsmtest-124nZ prom=0 old_prom=256 auid=0 uid=0 gid=0 ses=1120 >type=SYSCALL msg=audit(1392036598.931:10593): arch=80000015 syscall=54 success=yes exit=0 a0=4a a1=8914 a2=3fffc9a00da0 a3=1043 items=0 ppid=57143 pid=57144 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1120 tty=pts0 comm="python" exe="/usr/bin/python2.7" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_START msg=audit(1392036676.031:10594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392036676.031:10595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392036676.101:10596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392036676.101:10597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=MAC_POLICY_LOAD msg=audit(1392036702.061:10598): policy loaded auid=0 ses=1120 >type=SYSCALL msg=audit(1392036702.061:10598): arch=80000015 syscall=4 success=yes exit=6373906 a0=4 a1=1ffffef60010 a2=614212 a3=10 items=0 ppid=63366 pid=63367 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1120 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1392036703.431:10599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=4) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=SERVICE_START msg=audit(1392036703.431:10600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-modules-load" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392036703.431:10601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-modules-load" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392036703.441:10602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-modules-load" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392036894.551:10603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392036895.111:10604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1392036895.211:10605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392036895.211:10606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392036895.581:10607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1392036895.681:10608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392036895.681:10609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392036896.051:10610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1392036896.151:10611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392036896.151:10612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392036896.511:10613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1392036896.611:10614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392036896.611:10615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392036896.991:10616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1392036897.091:10617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392036897.091:10618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1392036901.741:10619): pid=63670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392036901.741:10620): pid=63670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392036901.741:10621): login pid=63670 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1124 >type=USER_START msg=audit(1392036901.751:10622): pid=63670 uid=0 auid=0 ses=1124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392036901.751:10623): pid=63670 uid=0 auid=0 ses=1124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392036901.761:10624): pid=63670 uid=0 auid=0 ses=1124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392036901.761:10625): pid=63670 uid=0 auid=0 ses=1124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1392036964.201:10626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392036964.201:10627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392036964.211:10628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392036977.741:10629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1392036980.351:10630): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1392036980.351:10630): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1392036980.351:10630): arch=80000015 syscall=120 success=yes exit=63912 a0=6c020011 a1=1fffe81274c0 a2=1fffe80ad580 a3=7 items=0 ppid=1 pid=63788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_START msg=audit(1392036982.641:10631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392036984.351:10632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392036984.591:10633): pid=64000 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D70554A49614379 terminal=? res=success' >type=CRED_ACQ msg=audit(1392036984.601:10634): pid=64000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392036984.601:10635): pid=64000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392036984.601:10636): pid=64000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392036984.601:10637): pid=64000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392036985.181:10638): pid=64020 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1392036985.181:10639): pid=64020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392036985.181:10640): pid=64020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392036985.201:10641): pid=64020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392036985.201:10642): pid=64020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392036985.251:10643): pid=64024 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392036985.251:10644): pid=64024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392036985.251:10645): pid=64024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392036985.251:10646): pid=64024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392036985.251:10647): pid=64024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392036985.291:10648): pid=64033 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392036985.291:10649): pid=64033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392036985.291:10650): pid=64033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392036985.331:10651): pid=64033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392036985.331:10652): pid=64033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392036985.481:10653): pid=64068 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20707673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C73697A652C76675F6E616D652C76675F757569642C70655F73' >type=CRED_ACQ msg=audit(1392036985.481:10654): pid=64068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392036985.481:10655): pid=64068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392036985.501:10656): pid=64068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392036985.501:10657): pid=64068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392036985.531:10658): pid=64075 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392036985.531:10659): pid=64075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392036985.531:10660): pid=64075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392036985.541:10661): pid=64075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392036985.541:10662): pid=64075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392036985.571:10663): pid=64078 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C7673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C76675F6E616D652C617474722C73697A652C7365675F737461' >type=CRED_ACQ msg=audit(1392036985.571:10664): pid=64078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392036985.571:10665): pid=64078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392036985.581:10666): pid=64078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392036985.581:10667): pid=64078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392036985.611:10668): pid=64081 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A' >type=CRED_ACQ msg=audit(1392036985.611:10669): pid=64081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392036985.611:10670): pid=64081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392036985.621:10671): pid=64081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392036985.621:10672): pid=64081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392037065.221:10673): pid=64139 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D332031302E31302E32372E36383A2F73746F72616765202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1392037065.221:10674): pid=64139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392037065.221:10675): pid=64139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392037065.251:10676): pid=64139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392037065.251:10677): pid=64139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392037065.471:10678): pid=64150 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392037065.471:10679): pid=64150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392037065.471:10680): pid=64150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392037065.481:10681): pid=64150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392037065.481:10682): pid=64150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392037065.491:10683): pid=64152 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392037065.491:10684): pid=64152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392037065.491:10685): pid=64152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392037065.521:10686): pid=64152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392037065.521:10687): pid=64152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392037065.931:10688): pid=64183 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A' >type=CRED_ACQ msg=audit(1392037065.931:10689): pid=64183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392037065.931:10690): pid=64183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392037065.941:10691): pid=64183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392037065.941:10692): pid=64183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1392037261.771:10693): pid=64345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392037261.771:10694): pid=64345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392037261.771:10695): login pid=64345 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1125 >type=USER_START msg=audit(1392037261.781:10696): pid=64345 uid=0 auid=0 ses=1125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392037261.781:10697): pid=64345 uid=0 auid=0 ses=1125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392037261.801:10698): avc: denied { read } for pid=64361 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392037261.801:10698): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdb971990 a2=84800 a3=0 items=0 ppid=64359 pid=64361 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1125 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392037261.821:10699): pid=64345 uid=0 auid=0 ses=1125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392037261.821:10700): pid=64345 uid=0 auid=0 ses=1125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_STOP msg=audit(1392037307.211:10701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392037307.241:10702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392037542.081:10703): pid=64529 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=726D202D72206C696276697274 terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1392037542.081:10704): pid=64529 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1392037542.081:10705): pid=64529 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1392037542.381:10706): pid=64529 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1392037542.381:10707): pid=64529 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1392037840.111:10708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392037840.111:10709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392037840.111:10710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1392037842.751:10711): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1392037842.751:10711): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1392037842.751:10711): arch=80000015 syscall=120 success=yes exit=49453 a0=6c020011 a1=1fffe81ce9b0 a2=15e1 a3=5 items=0 ppid=1 pid=49311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=MAC_POLICY_LOAD msg=audit(1392037865.301:10712): policy loaded auid=0 ses=1120 >type=SYSCALL msg=audit(1392037865.301:10712): arch=80000015 syscall=4 success=yes exit=6373906 a0=4 a1=1ffffef60010 a2=614212 a3=10 items=0 ppid=49485 pid=49486 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1120 tty=pts0 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) >type=USER_AVC msg=audit(1392037866.671:10713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received policyload notice (seqno=5) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=SERVICE_START msg=audit(1392037866.671:10714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-modules-load" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392037866.671:10715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-modules-load" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392037866.691:10716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-modules-load" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392037915.701:10717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392037915.701:10718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392037938.951:10719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1392037941.751:10720): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1392037941.751:10720): table=filter family=10 entries=0 >type=SERVICE_START msg=audit(1392037941.771:10721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SYSCALL msg=audit(1392037941.751:10720): arch=80000015 syscall=120 success=yes exit=49787 a0=6c020011 a1=1fffe81cd900 a2=2691 a3=f items=0 ppid=1 pid=49659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_START msg=audit(1392037943.471:10722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392037943.731:10723): pid=49871 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D704C3634576A38 terminal=? res=success' >type=CRED_ACQ msg=audit(1392037943.731:10724): pid=49871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392037943.731:10725): pid=49871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392037943.731:10726): pid=49871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392037943.731:10727): pid=49871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392037944.201:10728): pid=49892 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1392037944.201:10729): pid=49892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392037944.201:10730): pid=49892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392037944.211:10731): pid=49892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392037944.211:10732): pid=49892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392037944.261:10733): pid=49896 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392037944.261:10734): pid=49896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392037944.261:10735): pid=49896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392037944.271:10736): pid=49896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392037944.271:10737): pid=49896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392037944.331:10738): pid=49906 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392037944.331:10739): pid=49906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392037944.331:10740): pid=49906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392037944.381:10741): pid=49906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392037944.381:10742): pid=49906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392037944.651:10743): pid=49939 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392037944.651:10744): pid=49939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392037944.651:10745): pid=49939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392037944.671:10746): pid=49939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392037944.671:10747): pid=49939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392037944.701:10748): pid=49942 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392037944.701:10749): pid=49942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392037944.701:10750): pid=49942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392037944.711:10751): pid=49942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392037944.711:10752): pid=49942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392037944.731:10753): pid=49945 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392037944.731:10754): pid=49945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392037944.731:10755): pid=49945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392037944.751:10756): pid=49945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392037944.751:10757): pid=49945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392037944.771:10758): pid=49948 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392037944.771:10759): pid=49948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392037944.771:10760): pid=49948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392037944.781:10761): pid=49948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392037944.781:10762): pid=49948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392037972.621:10763): pid=49988 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392037972.621:10764): pid=49988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392037972.621:10765): pid=49988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392037972.621:10766): pid=49988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392037972.621:10767): pid=49988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392037972.631:10768): pid=49990 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392037972.631:10769): pid=49990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392037972.631:10770): pid=49990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392037972.671:10771): pid=49990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392037972.671:10772): pid=49990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392037973.171:10773): pid=50024 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392037973.171:10774): pid=50024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392037973.171:10775): pid=50024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392037973.181:10776): pid=50024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392037973.181:10777): pid=50024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1392038701.912:10778): pid=50993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392038701.912:10779): pid=50993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392038701.912:10780): login pid=50993 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1126 >type=USER_START msg=audit(1392038701.922:10781): pid=50993 uid=0 auid=0 ses=1126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392038701.922:10782): pid=50993 uid=0 auid=0 ses=1126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392038701.932:10783): pid=50993 uid=0 auid=0 ses=1126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392038701.932:10784): pid=50993 uid=0 auid=0 ses=1126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392039601.942:10785): pid=52165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392039601.942:10786): pid=52165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392039601.942:10787): login pid=52165 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1127 >type=USER_START msg=audit(1392039601.952:10788): pid=52165 uid=0 auid=0 ses=1127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392039601.952:10789): pid=52165 uid=0 auid=0 ses=1127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392039601.952:10790): pid=52165 uid=0 auid=0 ses=1127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392039601.962:10791): pid=52165 uid=0 auid=0 ses=1127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392040501.973:10792): pid=53342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392040501.973:10793): pid=53342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392040501.973:10794): login pid=53342 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1128 >type=USER_START msg=audit(1392040501.973:10795): pid=53342 uid=0 auid=0 ses=1128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392040501.973:10796): pid=53342 uid=0 auid=0 ses=1128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392040501.983:10797): pid=53342 uid=0 auid=0 ses=1128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392040501.983:10798): pid=53342 uid=0 auid=0 ses=1128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392040861.993:10799): pid=53813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392040861.993:10800): pid=53813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392040861.993:10801): login pid=53813 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1129 >type=USER_START msg=audit(1392040861.993:10802): pid=53813 uid=0 auid=0 ses=1129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392040861.993:10803): pid=53813 uid=0 auid=0 ses=1129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392040862.013:10804): avc: denied { read } for pid=53829 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392040862.013:10804): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffa956510 a2=84800 a3=0 items=0 ppid=53827 pid=53829 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1129 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392040862.023:10805): pid=53813 uid=0 auid=0 ses=1129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392040862.023:10806): pid=53813 uid=0 auid=0 ses=1129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392041401.033:10807): pid=54544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392041401.043:10808): pid=54544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392041401.043:10809): login pid=54544 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1130 >type=USER_START msg=audit(1392041401.043:10810): pid=54544 uid=0 auid=0 ses=1130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392041401.043:10811): pid=54544 uid=0 auid=0 ses=1130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392041401.053:10812): pid=54544 uid=0 auid=0 ses=1130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392041401.053:10813): pid=54544 uid=0 auid=0 ses=1130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392042301.064:10814): pid=55715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392042301.064:10815): pid=55715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392042301.064:10816): login pid=55715 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1131 >type=USER_START msg=audit(1392042301.064:10817): pid=55715 uid=0 auid=0 ses=1131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392042301.064:10818): pid=55715 uid=0 auid=0 ses=1131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392042301.074:10819): pid=55715 uid=0 auid=0 ses=1131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392042301.074:10820): pid=55715 uid=0 auid=0 ses=1131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392043201.084:10821): pid=56888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392043201.084:10822): pid=56888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392043201.084:10823): login pid=56888 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1132 >type=USER_START msg=audit(1392043201.084:10824): pid=56888 uid=0 auid=0 ses=1132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392043201.094:10825): pid=56888 uid=0 auid=0 ses=1132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392043201.094:10826): pid=56888 uid=0 auid=0 ses=1132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392043201.094:10827): pid=56888 uid=0 auid=0 ses=1132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392044101.105:10828): pid=58064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392044101.105:10829): pid=58064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392044101.105:10830): login pid=58064 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1133 >type=USER_START msg=audit(1392044101.115:10831): pid=58064 uid=0 auid=0 ses=1133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392044101.115:10832): pid=58064 uid=0 auid=0 ses=1133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392044101.115:10833): pid=58064 uid=0 auid=0 ses=1133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392044101.125:10834): pid=58064 uid=0 auid=0 ses=1133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392044461.115:10835): pid=58534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392044461.115:10836): pid=58534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392044461.115:10837): login pid=58534 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1134 >type=USER_START msg=audit(1392044461.125:10838): pid=58534 uid=0 auid=0 ses=1134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392044461.125:10839): pid=58534 uid=0 auid=0 ses=1134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392044461.135:10840): avc: denied { read } for pid=58550 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392044461.135:10840): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdc09c3f0 a2=84800 a3=0 items=0 ppid=58548 pid=58550 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=1134 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392044461.155:10841): pid=58534 uid=0 auid=0 ses=1134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392044461.155:10842): pid=58534 uid=0 auid=0 ses=1134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392045001.166:10843): pid=59264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392045001.166:10844): pid=59264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392045001.166:10845): login pid=59264 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1135 >type=USER_START msg=audit(1392045001.166:10846): pid=59264 uid=0 auid=0 ses=1135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392045001.166:10847): pid=59264 uid=0 auid=0 ses=1135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392045001.176:10848): pid=59264 uid=0 auid=0 ses=1135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392045001.176:10849): pid=59264 uid=0 auid=0 ses=1135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1392045210.406:10850): pid=59547 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F756D6F756E74202D66202D6C202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1392045210.406:10851): pid=59547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392045210.406:10852): pid=59547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392045210.486:10853): pid=59547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392045210.486:10854): pid=59547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392045210.496:10855): pid=59551 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392045210.496:10856): pid=59551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392045210.496:10857): pid=59551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392045210.496:10858): pid=59551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392045210.496:10859): pid=59551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392045210.506:10860): pid=59553 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392045210.506:10861): pid=59553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392045210.506:10862): pid=59553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392045210.546:10863): pid=59553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392045210.546:10864): pid=59553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392045465.696:10865): pid=59736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=59736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392045465.696:10866): pid=59736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=59736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392045465.696:10867): pid=59736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=59736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392045465.696:10868): pid=59735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=59736 suid=74 rport=49998 laddr=10 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392045465.696:10869): pid=59735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=59736 suid=74 rport=49998 laddr=10 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=USER_AUTH msg=audit(1392045465.766:10870): pid=59735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_ACCT msg=audit(1392045465.766:10871): pid=59735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392045465.766:10872): pid=59735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=59736 suid=74 rport=49998 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=USER_AUTH msg=audit(1392045465.766:10873): pid=59735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1392045465.766:10874): pid=59735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=LOGIN msg=audit(1392045465.766:10875): login pid=59735 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1136 >type=CRYPTO_KEY_USER msg=audit(1392045465.786:10876): pid=59740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=59740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392045465.786:10877): pid=59740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=59740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392045465.786:10878): pid=59740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=59740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392045465.786:10879): pid=59739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=blowfish-cbc ksize=128 mac=hmac-sha1 spid=59740 suid=74 rport=49999 laddr=10.10.27.64 lpo exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392045465.786:10880): pid=59739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=blowfish-cbc ksize=128 mac=hmac-sha1 spid=59740 suid=74 rport=49999 laddr=10.10.27.64 lpo exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1392045465.806:10881): pid=59735 uid=0 auid=0 ses=1136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_START msg=audit(1392045465.806:10882): pid=59735 uid=0 auid=0 ses=1136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_AUTH msg=audit(1392045465.836:10883): pid=59739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_ACCT msg=audit(1392045465.836:10884): pid=59739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392045465.836:10885): pid=59739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=59740 suid=74 rport=49999 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=USER_AUTH msg=audit(1392045465.836:10886): pid=59739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1392045465.836:10887): pid=59739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=LOGIN msg=audit(1392045465.836:10888): login pid=59739 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1137 >type=USER_ROLE_CHANGE msg=audit(1392045465.866:10889): pid=59739 uid=0 auid=0 ses=1137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_START msg=audit(1392045465.876:10890): pid=59739 uid=0 auid=0 ses=1137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1392045465.876:10891): pid=59739 uid=0 auid=0 ses=1137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_START msg=audit(1392045465.876:10892): pid=59739 uid=0 auid=0 ses=1137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392045465.886:10893): pid=59743 uid=0 auid=0 ses=1137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=59743 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392045465.886:10894): pid=59743 uid=0 auid=0 ses=1137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=59743 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392045465.886:10895): pid=59743 uid=0 auid=0 ses=1137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=59743 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRED_REFR msg=audit(1392045465.886:10896): pid=59743 uid=0 auid=0 ses=1137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1392045466.056:10897): pid=59753 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=/dev/pts/1 res=success' >type=USER_START msg=audit(1392045466.056:10898): pid=59753 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=/dev/pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1392045466.056:10899): pid=59753 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=59753 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1392045466.056:10900): pid=59753 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=59753 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1392045466.056:10901): pid=59753 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=59753 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=pts/1 res=success' >type=CRED_REFR msg=audit(1392045466.056:10902): pid=59753 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_CMD msg=audit(1392045485.256:10903): pid=59832 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=7365727669636520676C757374657264207374617274 terminal=pts/1 res=success' >type=CRED_ACQ msg=audit(1392045485.266:10904): pid=59832 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_START msg=audit(1392045485.266:10905): pid=59832 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_END msg=audit(1392045485.286:10906): pid=59832 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=CRED_DISP msg=audit(1392045485.286:10907): pid=59832 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_CMD msg=audit(1392045492.846:10908): pid=59847 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=7365727669636520676C7573746572642072657374617274 terminal=pts/1 res=success' >type=CRED_ACQ msg=audit(1392045492.846:10909): pid=59847 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_START msg=audit(1392045492.846:10910): pid=59847 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=SERVICE_START msg=audit(1392045492.866:10911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392045492.866:10912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392045492.916:10913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392045492.916:10914): pid=59847 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=CRED_DISP msg=audit(1392045492.916:10915): pid=59847 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_CMD msg=audit(1392045497.796:10916): pid=59869 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73657276696365207664736D642072657374617274 terminal=pts/1 res=success' >type=CRED_ACQ msg=audit(1392045497.796:10917): pid=59869 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_START msg=audit(1392045497.796:10918): pid=59869 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=SERVICE_STOP msg=audit(1392045508.376:10919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392045510.026:10920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392045510.026:10921): pid=59869 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=CRED_DISP msg=audit(1392045510.026:10922): pid=59869 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_CMD msg=audit(1392045510.276:10923): pid=59957 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D703951464A5161 terminal=? res=success' >type=CRED_ACQ msg=audit(1392045510.276:10924): pid=59957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392045510.276:10925): pid=59957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392045510.286:10926): pid=59957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392045510.286:10927): pid=59957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392045510.816:10928): pid=59977 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1392045510.816:10929): pid=59977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392045510.816:10930): pid=59977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392045510.826:10931): pid=59977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392045510.826:10932): pid=59977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392045510.856:10933): pid=59981 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392045510.856:10934): pid=59981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392045510.856:10935): pid=59981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392045510.856:10936): pid=59981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392045510.856:10937): pid=59981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392045512.876:10938): pid=60000 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392045512.876:10939): pid=60000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392045512.876:10940): pid=60000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392045512.926:10941): pid=60000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392045512.926:10942): pid=60000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392045512.936:10943): pid=60028 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20707673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C73697A652C76675F6E616D652C76675F757569642C70655F73' >type=CRED_ACQ msg=audit(1392045512.946:10944): pid=60028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392045512.946:10945): pid=60028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392045512.956:10946): pid=60028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392045512.956:10947): pid=60028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392045512.966:10948): pid=60031 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392045512.966:10949): pid=60031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392045512.966:10950): pid=60031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392045512.976:10951): pid=60031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392045512.976:10952): pid=60031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392045512.986:10953): pid=60034 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392045512.986:10954): pid=60034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392045512.986:10955): pid=60034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392045512.996:10956): pid=60034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392045512.996:10957): pid=60034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392045513.006:10958): pid=60037 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392045513.006:10959): pid=60037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392045513.006:10960): pid=60037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392045513.016:10961): pid=60037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392045513.016:10962): pid=60037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1392045901.186:10963): pid=60911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392045901.186:10964): pid=60911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392045901.186:10965): login pid=60911 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1138 >type=USER_START msg=audit(1392045901.196:10966): pid=60911 uid=0 auid=0 ses=1138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392045901.196:10967): pid=60911 uid=0 auid=0 ses=1138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392045901.206:10968): pid=60911 uid=0 auid=0 ses=1138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392045901.206:10969): pid=60911 uid=0 auid=0 ses=1138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1392046008.586:10970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1392046008.596:10971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046008.676:10972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-server" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046008.706:10973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-idmap" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046008.706:10974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-rquotad" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046008.746:10975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046008.746:10976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-mountd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046013.976:10977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046015.686:10978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046015.936:10979): pid=61300 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D70326D52654C32 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046015.936:10980): pid=61300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046015.936:10981): pid=61300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046015.936:10982): pid=61300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046015.936:10983): pid=61300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046016.506:10984): pid=61320 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046016.506:10985): pid=61320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046016.516:10986): pid=61320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046016.516:10987): pid=61320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046016.516:10988): pid=61320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046016.566:10989): pid=61324 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046016.566:10990): pid=61324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046016.566:10991): pid=61324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046016.566:10992): pid=61324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046016.566:10993): pid=61324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046016.606:10994): pid=61333 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046016.606:10995): pid=61333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046016.606:10996): pid=61333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046016.656:10997): pid=61333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046016.656:10998): pid=61333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046016.916:10999): pid=61373 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20707673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C73697A652C76675F6E616D652C76675F757569642C70655F73' >type=CRED_ACQ msg=audit(1392046016.916:11000): pid=61373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046016.916:11001): pid=61373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046016.926:11002): pid=61373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046016.926:11003): pid=61373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046016.956:11004): pid=61377 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392046016.956:11005): pid=61377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046016.956:11006): pid=61377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046016.976:11007): pid=61377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046016.976:11008): pid=61377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046016.996:11009): pid=61380 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392046016.996:11010): pid=61380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046016.996:11011): pid=61380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046017.006:11012): pid=61380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046017.006:11013): pid=61380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046017.036:11014): pid=61383 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392046017.036:11015): pid=61383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046017.036:11016): pid=61383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046017.046:11017): pid=61383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046017.046:11018): pid=61383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1392046147.056:11019): pid=61688 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="vdsm" exe="/usr/bin/su" hostname=? addr=? terminal=pts/1 res=success' >type=USER_ACCT msg=audit(1392046147.056:11020): pid=61688 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="vdsm" exe="/usr/bin/su" hostname=? addr=? terminal=pts/1 res=success' >type=CRED_ACQ msg=audit(1392046147.056:11021): pid=61688 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="vdsm" exe="/usr/bin/su" hostname=? addr=? terminal=pts/1 res=success' >type=USER_START msg=audit(1392046147.066:11022): pid=61688 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="vdsm" exe="/usr/bin/su" hostname=? addr=? terminal=pts/1 res=success' >type=USER_END msg=audit(1392046147.076:11023): pid=61688 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="vdsm" exe="/usr/bin/su" hostname=? addr=? terminal=pts/1 res=success' >type=CRED_DISP msg=audit(1392046147.076:11024): pid=61688 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="vdsm" exe="/usr/bin/su" hostname=? addr=? terminal=pts/1 res=success' >type=USER_AUTH msg=audit(1392046147.086:11025): pid=61690 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="vdsm" exe="/usr/bin/su" hostname=? addr=? terminal=pts/1 res=success' >type=USER_ACCT msg=audit(1392046147.086:11026): pid=61690 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="vdsm" exe="/usr/bin/su" hostname=? addr=? terminal=pts/1 res=success' >type=CRED_ACQ msg=audit(1392046147.086:11027): pid=61690 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="vdsm" exe="/usr/bin/su" hostname=? addr=? terminal=pts/1 res=success' >type=USER_START msg=audit(1392046147.096:11028): pid=61690 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="vdsm" exe="/usr/bin/su" hostname=? addr=? terminal=pts/1 res=success' >type=USER_END msg=audit(1392046147.096:11029): pid=61690 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="vdsm" exe="/usr/bin/su" hostname=? addr=? terminal=pts/1 res=success' >type=CRED_DISP msg=audit(1392046147.096:11030): pid=61690 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="vdsm" exe="/usr/bin/su" hostname=? addr=? terminal=pts/1 res=success' >type=USER_CMD msg=audit(1392046190.576:11031): pid=61802 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/vitor/nfs-check/vdsm/contrib" cmd=7365727669636520676C7573746572642072657374617274 terminal=pts/1 res=success' >type=CRED_ACQ msg=audit(1392046190.576:11032): pid=61802 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_START msg=audit(1392046190.576:11033): pid=61802 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=SERVICE_STOP msg=audit(1392046190.596:11034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046190.646:11035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046190.646:11036): pid=61802 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=CRED_DISP msg=audit(1392046190.646:11037): pid=61802 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_CMD msg=audit(1392046254.506:11038): pid=61957 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/vitor/nfs-check/vdsm/contrib" cmd=6375726C2068747470733A2F2F7261772E6769746875622E636F6D2F676C75737465722F676C757374657266732F6D61737465722F6578747261732F67726F75702D766972742E6578616D706C65202D6F202F7661722F6C69622F676C7573746572642F67726F7570732F76697274 terminal=pts/1 res=success' >type=CRED_ACQ msg=audit(1392046254.516:11039): pid=61957 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_START msg=audit(1392046254.516:11040): pid=61957 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_END msg=audit(1392046255.666:11041): pid=61957 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=CRED_DISP msg=audit(1392046255.666:11042): pid=61957 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_CMD msg=audit(1392046264.186:11043): pid=61983 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/vitor/nfs-check/vdsm/contrib" cmd=7365727669636520676C7573746572642072657374617274 terminal=pts/1 res=success' >type=CRED_ACQ msg=audit(1392046264.186:11044): pid=61983 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_START msg=audit(1392046264.186:11045): pid=61983 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=SERVICE_STOP msg=audit(1392046264.206:11046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046264.256:11047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046264.256:11048): pid=61983 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=CRED_DISP msg=audit(1392046264.256:11049): pid=61983 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_CMD msg=audit(1392046269.056:11050): pid=62013 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/vitor/nfs-check/vdsm/contrib" cmd=73657276696365207664736D642072657374617274 terminal=pts/1 res=success' >type=CRED_ACQ msg=audit(1392046269.056:11051): pid=62013 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_START msg=audit(1392046269.056:11052): pid=62013 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=SERVICE_STOP msg=audit(1392046277.996:11053): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046279.656:11054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046279.656:11055): pid=62013 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=CRED_DISP msg=audit(1392046279.656:11056): pid=62013 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_CMD msg=audit(1392046279.906:11057): pid=62099 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D70536970474549 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046279.906:11058): pid=62099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046279.906:11059): pid=62099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046279.906:11060): pid=62099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046279.906:11061): pid=62099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046280.436:11062): pid=62119 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046280.436:11063): pid=62119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046280.436:11064): pid=62119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046280.446:11065): pid=62119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046280.446:11066): pid=62119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046280.506:11067): pid=62123 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046280.506:11068): pid=62123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046280.506:11069): pid=62123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046280.506:11070): pid=62123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046280.506:11071): pid=62123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046280.576:11072): pid=62132 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046280.576:11073): pid=62132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046280.576:11074): pid=62132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046280.616:11075): pid=62132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046280.616:11076): pid=62132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046280.846:11077): pid=62164 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20707673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C73697A652C76675F6E616D652C76675F757569642C70655F73' >type=CRED_ACQ msg=audit(1392046280.846:11078): pid=62164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046280.856:11079): pid=62164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046280.866:11080): pid=62164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046280.866:11081): pid=62164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046280.896:11082): pid=62167 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392046280.896:11083): pid=62167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046280.896:11084): pid=62167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046280.906:11085): pid=62167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046280.906:11086): pid=62167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046280.926:11087): pid=62170 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392046280.926:11088): pid=62170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046280.936:11089): pid=62170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046280.946:11090): pid=62170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046280.946:11091): pid=62170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046281.156:11092): pid=62175 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392046281.156:11093): pid=62175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046281.156:11094): pid=62175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046281.166:11095): pid=62175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046281.166:11096): pid=62175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046433.436:11097): pid=62593 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/var/lib/exports" cmd=676C757374657220766F6C756D65207365742064617461207365727665722E616C6C6F772D696E736563757265206F6E terminal=pts/1 res=success' >type=CRED_ACQ msg=audit(1392046433.436:11098): pid=62593 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_START msg=audit(1392046433.436:11099): pid=62593 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_END msg=audit(1392046433.456:11100): pid=62593 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=CRED_DISP msg=audit(1392046433.456:11101): pid=62593 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_CMD msg=audit(1392046457.136:11102): pid=62652 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/var/lib/exports" cmd=676C757374657220766F6C756D6520736574203634207365727665722E616C6C6F772D696E736563757265206F6E terminal=pts/1 res=success' >type=CRED_ACQ msg=audit(1392046457.136:11103): pid=62652 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_START msg=audit(1392046457.136:11104): pid=62652 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_END msg=audit(1392046457.606:11105): pid=62652 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=CRED_DISP msg=audit(1392046457.606:11106): pid=62652 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=SERVICE_STOP msg=audit(1392046476.626:11107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_CMD msg=audit(1392046522.546:11108): pid=62822 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D7420676C757374657266732031302E31302E32372E36343A3634202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A3634 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046522.546:11109): pid=62822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046522.546:11110): pid=62822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046522.606:11111): pid=62822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046522.606:11112): pid=62822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046523.346:11113): pid=62886 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046523.346:11114): pid=62886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046523.346:11115): pid=62886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046523.346:11116): pid=62886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046523.346:11117): pid=62886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046523.356:11118): pid=62888 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046523.356:11119): pid=62888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046523.356:11120): pid=62888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046523.396:11121): pid=62888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046523.396:11122): pid=62888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046523.416:11123): pid=62914 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392046523.416:11124): pid=62914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046523.416:11125): pid=62914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046523.426:11126): pid=62914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046523.426:11127): pid=62914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046525.566:11128): pid=62937 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046525.566:11129): pid=62937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046525.566:11130): pid=62937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046525.566:11131): pid=62937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046525.566:11132): pid=62937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046525.576:11133): pid=62939 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046525.576:11134): pid=62939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046525.576:11135): pid=62939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046525.666:11136): pid=62939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046525.666:11137): pid=62939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046546.866:11138): pid=63009 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392046546.866:11139): pid=63009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046546.866:11140): pid=63009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046546.886:11141): pid=63009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046546.886:11142): pid=63009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046551.186:11143): pid=63030 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046551.186:11144): pid=63030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046551.186:11145): pid=63030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046551.186:11146): pid=63030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046551.186:11147): pid=63030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046551.196:11148): pid=63032 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046551.196:11149): pid=63032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046551.196:11150): pid=63032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046551.236:11151): pid=63032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046551.236:11152): pid=63032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046551.356:11153): pid=63057 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392046551.356:11154): pid=63057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046551.356:11155): pid=63057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046551.366:11156): pid=63057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046551.366:11157): pid=63057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046572.876:11158): pid=63142 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046572.876:11159): pid=63142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046572.876:11160): pid=63142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046572.886:11161): pid=63142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046572.886:11162): pid=63142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046572.896:11163): pid=63144 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046572.896:11164): pid=63144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046572.896:11165): pid=63144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046572.926:11166): pid=63144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046572.926:11167): pid=63144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392046572.986:11168): pid=63171 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030307C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A' >type=CRED_ACQ msg=audit(1392046572.986:11169): pid=63171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046572.986:11170): pid=63171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046572.996:11171): pid=63171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046572.996:11172): pid=63171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1392046578.376:11173): avc: denied { execute } for pid=63198 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392046578.376:11173): arch=80000015 syscall=11 success=no exit=-13 a0=100364d4858 a1=1fffe4000c70 a2=100362bd980 a3=6269 items=0 ppid=61997 pid=63198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=VIRT_MACHINE_ID msg=audit(1392046645.067:11174): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 vm-ctx=system_u:system_r:svirt_tcg_t:s0:c181,c599 img-ctx=system_u:object_r:svirt_image_t:s0:c181,c599 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1392046645.067:11175): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392046645.257:11176): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1392046645.257:11176): arch=80000015 syscall=54 success=yes exit=0 a0=1b a1=89a2 a2=1ffff5bdd000 a3=0 items=0 ppid=1 pid=49652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1392046645.357:11177): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=open vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 net=00:1a:4a:16:01:53 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046645.687:11178): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=deny vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 cgroup="/sys/fs/cgroup/devices/machine/vm3.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046645.687:11179): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 cgroup="/sys/fs/cgroup/devices/machine/vm3.libvirt-qemu/" class=path path="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/6771e655-096c-43f6-ac96-0a800939bc1b/images/7c80237f-7171-4f20-a84f-389d299ccf97/2ee7090a-c787-4d7e-9a7f-8db30e0c4f75" rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046645.687:11180): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 cgroup="/sys/fs/cgroup/devices/machine/vm3.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392046645.717:11181): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_RESOURCE msg=audit(1392046645.977:11182): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=disk reason=start vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 old-disk="?" new-disk="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/6771e655-096c-43f6-ac96-0a800939bc1b/images/7c80237f-7171-4f20-a84f-389d299ccf97/2ee7090a-c787-4d7e-9a7f-8db30e0c4f75" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046645.977:11183): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=start vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 old-net=? new-net=00:1a:4a:16:01:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046645.977:11184): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=mem reason=start vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046645.977:11185): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=vcpu reason=start vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1392046645.977:11186): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=start reason=booted vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=USER_CMD msg=audit(1392046648.567:11187): pid=63553 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F736572766963652076686F73746D642073746F70 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046648.567:11188): pid=63553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046648.567:11189): pid=63553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046648.597:11190): pid=63553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046648.597:11191): pid=63553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1392046660.977:11192): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 vm-ctx=system_u:system_r:svirt_tcg_t:s0:c569,c628 img-ctx=system_u:object_r:svirt_image_t:s0:c569,c628 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1392046660.977:11193): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392046661.147:11194): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1392046661.147:11194): arch=80000015 syscall=54 success=yes exit=0 a0=1b a1=89a2 a2=1ffff6bdd000 a3=0 items=0 ppid=1 pid=49650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1392046661.237:11195): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=open vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 net=00:1a:4a:16:01:53 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046661.587:11196): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=deny vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 cgroup="/sys/fs/cgroup/devices/machine/vm3.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046661.587:11197): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 cgroup="/sys/fs/cgroup/devices/machine/vm3.libvirt-qemu/" class=path path="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/6771e655-096c-43f6-ac96-0a800939bc1b/images/7c80237f-7171-4f20-a84f-389d299ccf97/2ee7090a-c787-4d7e-9a7f-8db30e0c4f75" rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046661.587:11198): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 cgroup="/sys/fs/cgroup/devices/machine/vm3.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392046661.617:11199): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_RESOURCE msg=audit(1392046661.877:11200): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=disk reason=start vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 old-disk="?" new-disk="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/6771e655-096c-43f6-ac96-0a800939bc1b/images/7c80237f-7171-4f20-a84f-389d299ccf97/2ee7090a-c787-4d7e-9a7f-8db30e0c4f75" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046661.877:11201): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=start vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 old-net=? new-net=00:1a:4a:16:01:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046661.877:11202): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=mem reason=start vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046661.877:11203): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=vcpu reason=start vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1392046661.877:11204): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=start reason=booted vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=USER_CMD msg=audit(1392046664.197:11205): pid=63783 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F736572766963652076686F73746D642073746F70 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046664.197:11206): pid=63783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046664.207:11207): pid=63783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046664.227:11208): pid=63783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046664.227:11209): pid=63783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1392046689.037:11210): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 vm-ctx=system_u:system_r:svirt_tcg_t:s0:c52,c869 img-ctx=system_u:object_r:svirt_image_t:s0:c52,c869 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1392046689.037:11211): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392046689.237:11212): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1392046689.237:11212): arch=80000015 syscall=54 success=yes exit=0 a0=1b a1=89a2 a2=1ffff53dd000 a3=0 items=0 ppid=1 pid=49653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1392046689.317:11213): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=open vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 net=00:1a:4a:16:01:53 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046689.657:11214): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=deny vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 cgroup="/sys/fs/cgroup/devices/machine/vm3.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046689.657:11215): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 cgroup="/sys/fs/cgroup/devices/machine/vm3.libvirt-qemu/" class=path path="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/6771e655-096c-43f6-ac96-0a800939bc1b/images/7c80237f-7171-4f20-a84f-389d299ccf97/2ee7090a-c787-4d7e-9a7f-8db30e0c4f75" rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046689.657:11216): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 cgroup="/sys/fs/cgroup/devices/machine/vm3.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392046689.687:11217): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_RESOURCE msg=audit(1392046689.957:11218): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=disk reason=start vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 old-disk="?" new-disk="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/6771e655-096c-43f6-ac96-0a800939bc1b/images/7c80237f-7171-4f20-a84f-389d299ccf97/2ee7090a-c787-4d7e-9a7f-8db30e0c4f75" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046689.957:11219): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=start vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 old-net=? new-net=00:1a:4a:16:01:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046689.957:11220): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=mem reason=start vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046689.957:11221): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=vcpu reason=start vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1392046689.957:11222): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=start reason=booted vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=USER_CMD msg=audit(1392046691.777:11223): pid=64043 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F736572766963652076686F73746D642073746F70 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046691.777:11224): pid=64043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046691.777:11225): pid=64043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046691.807:11226): pid=64043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046691.807:11227): pid=64043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1392046698.927:11228): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 vm-ctx=system_u:system_r:svirt_tcg_t:s0:c447,c969 img-ctx=system_u:object_r:svirt_image_t:s0:c447,c969 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1392046698.927:11229): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392046699.117:11230): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1392046699.117:11230): arch=80000015 syscall=54 success=yes exit=0 a0=1b a1=89a2 a2=1ffff63dd000 a3=0 items=0 ppid=1 pid=49651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1392046699.207:11231): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=open vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 net=00:1a:4a:16:01:53 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046699.507:11232): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=deny vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 cgroup="/sys/fs/cgroup/devices/machine/vm3.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046699.507:11233): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 cgroup="/sys/fs/cgroup/devices/machine/vm3.libvirt-qemu/" class=path path="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/6771e655-096c-43f6-ac96-0a800939bc1b/images/7c80237f-7171-4f20-a84f-389d299ccf97/2ee7090a-c787-4d7e-9a7f-8db30e0c4f75" rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046699.507:11234): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 cgroup="/sys/fs/cgroup/devices/machine/vm3.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392046699.537:11235): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_RESOURCE msg=audit(1392046699.797:11236): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=disk reason=start vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 old-disk="?" new-disk="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/6771e655-096c-43f6-ac96-0a800939bc1b/images/7c80237f-7171-4f20-a84f-389d299ccf97/2ee7090a-c787-4d7e-9a7f-8db30e0c4f75" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046699.797:11237): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=start vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 old-net=? new-net=00:1a:4a:16:01:53 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046699.797:11238): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=mem reason=start vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392046699.797:11239): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=vcpu reason=start vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1392046699.797:11240): pid=49648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=start reason=booted vm="vm3" uuid=9a3e6147-0fa6-4621-84fa-1139ea483ee2 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=USER_CMD msg=audit(1392046701.137:11241): pid=64249 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F736572766963652076686F73746D642073746F70 terminal=? res=success' >type=CRED_ACQ msg=audit(1392046701.137:11242): pid=64249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392046701.137:11243): pid=64249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392046701.167:11244): pid=64249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392046701.167:11245): pid=64249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1392046801.227:11246): pid=64457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392046801.227:11247): pid=64457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392046801.227:11248): login pid=64457 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1139 >type=USER_START msg=audit(1392046801.237:11249): pid=64457 uid=0 auid=0 ses=1139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392046801.237:11250): pid=64457 uid=0 auid=0 ses=1139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392046801.247:11251): pid=64457 uid=0 auid=0 ses=1139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392046801.247:11252): pid=64457 uid=0 auid=0 ses=1139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1392046828.067:11253): pid=33188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=33188 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392046828.067:11254): pid=33188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=33188 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392046828.067:11255): pid=33188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=33188 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.097:11256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="irqbalance" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.097:11257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="irqbalance" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.097:11258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="smartd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.097:11259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="smartd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.097:11260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rngd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.097:11261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rngd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.097:11262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="chronyd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.097:11263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="chronyd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.107:11264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="accounts-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.107:11265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="accounts-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.107:11266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.107:11267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.107:11268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="polkit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.107:11269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="polkit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.117:11270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="serial-getty@hvc0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.117:11271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="serial-getty@hvc0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.117:11272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sm-client" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.117:11273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sm-client" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.117:11274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="bluetooth" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.117:11275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="bluetooth" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.117:11276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="upower" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.117:11277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="upower" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.127:11278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="udisks2" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.127:11279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="udisks2" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.127:11280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.127:11281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.127:11282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.127:11283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.137:11284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.137:11285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.137:11286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-xorg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.137:11287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-xorg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.137:11288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-oops" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.137:11289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-oops" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.147:11290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.147:11291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="gdm" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.147:11292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="gdm" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.147:11293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.147:11294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.147:11295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="colord" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.147:11296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="colord" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.147:11297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cups" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.147:11298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cups" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.147:11299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.147:11300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-idmap" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.147:11301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-rquotad" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.147:11302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-mountd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.157:11303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="alsa-state" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.157:11304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="alsa-state" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.157:11305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-ccpp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.157:11306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-ccpp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.187:11307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rtkit-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.187:11308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rtkit-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.187:11309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sendmail" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.187:11310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sendmail" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.187:11311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-reboot" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.197:11312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.197:11313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.207:11314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-server" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.217:11315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsid" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.217:11316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsid" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.217:11317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsiuio" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.217:11318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsiuio" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.237:11319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="tuned" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=USER_END msg=audit(1392046828.237:11320): pid=38963 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=failed' >type=USER_END msg=audit(1392046828.237:11321): pid=59735 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=failed' >type=CRED_DISP msg=audit(1392046828.237:11322): pid=38963 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRED_DISP msg=audit(1392046828.237:11323): pid=59735 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_END msg=audit(1392046828.237:11324): pid=59739 uid=0 auid=0 ses=1137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=failed' >type=CRED_DISP msg=audit(1392046828.237:11325): pid=59739 uid=0 auid=0 ses=1137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_END msg=audit(1392046828.237:11326): pid=38967 uid=0 auid=0 ses=1121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=failed' >type=CRED_DISP msg=audit(1392046828.247:11327): pid=38967 uid=0 auid=0 ses=1121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_END msg=audit(1392046828.247:11328): pid=59739 uid=0 auid=0 ses=1137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1392046828.247:11329): pid=59739 uid=0 auid=0 ses=1137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_END msg=audit(1392046828.247:11330): pid=38967 uid=0 auid=0 ses=1121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1392046828.247:11331): pid=38967 uid=0 auid=0 ses=1121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392046828.247:11332): pid=59739 uid=0 auid=0 ses=1137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=59739 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392046828.247:11333): pid=38967 uid=0 auid=0 ses=1121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=38967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392046828.247:11334): pid=59739 uid=0 auid=0 ses=1137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=59739 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392046828.247:11335): pid=38967 uid=0 auid=0 ses=1121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=38967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392046828.247:11336): pid=59739 uid=0 auid=0 ses=1137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=59739 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392046828.247:11337): pid=38967 uid=0 auid=0 ses=1121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=38967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392046828.247:11338): pid=59739 uid=0 auid=0 ses=1137 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=59739 suid=0 rport=49999 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392046828.247:11339): pid=38967 uid=0 auid=0 ses=1121 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=38967 suid=0 rport=59564 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_END msg=audit(1392046828.357:11340): pid=38963 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1392046828.357:11341): pid=38963 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1392046828.357:11342): pid=38963 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=38963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392046828.357:11343): pid=38963 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=38963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392046828.357:11344): pid=38963 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=38963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392046828.357:11345): pid=38963 uid=0 auid=0 ses=1120 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=38963 suid=0 rport=59563 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_END msg=audit(1392046828.357:11346): pid=59735 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_LOGOUT msg=audit(1392046828.357:11347): pid=59735 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1392046828.357:11348): pid=59735 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=59735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392046828.357:11349): pid=59735 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=59735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392046828.357:11350): pid=59735 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=59735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392046828.357:11351): pid=59735 uid=0 auid=0 ses=1136 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=59735 suid=0 rport=49998 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.387:11352): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="multipathd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.387:11353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="multipathd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.387:11354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="avahi-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.387:11355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="avahi-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.397:11356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.397:11357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.587:11358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046828.587:11359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046828.707:11360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dracut-shutdown" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046830.097:11361): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterfsd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046830.097:11362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterfsd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046830.097:11363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046830.107:11364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=ANOM_PROMISCUOUS msg=audit(1392046830.647:11365): dev=eth0 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1392046830.647:11365): arch=80000015 syscall=54 success=yes exit=0 a0=3 a1=89a3 a2=3ffff574ef78 a3=0 items=0 ppid=64681 pid=64722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:brctl_t:s0 key=(null) >type=SERVICE_START msg=audit(1392046831.117:11366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046831.117:11367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046832.617:11368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046928.117:11369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="wdmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1392046928.117:11370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sanlock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1392046928.127:11371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="fedora-loadmodules" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046928.127:11372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="fedora-loadmodules" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=DAEMON_END msg=audit(1392046928.138:9317): auditd normal halt, sending auid=0 pid=1 subj=system_u:system_r:init_t:s0 res=success >type=DAEMON_START msg=audit(1392046990.933:6468): auditd start, ver=2.3.2 format=raw kernel=3.12.6-200.fc19.ppc64p7 auid=4294967295 pid=686 subj=system_u:system_r:auditd_t:s0 res=success >type=SERVICE_START msg=audit(1392046991.000:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="alsa-state" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046991.020:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="irqbalance" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046991.030:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="smartd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046991.030:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046991.050:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046991.140:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-oops" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046991.140:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-xorg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046991.172:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rngd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1392046991.312:14): table=filter family=2 entries=0 >type=SYSCALL msg=audit(1392046991.312:14): arch=80000015 syscall=282 success=yes exit=0 a0=40000000 a1=ffffffffffffffff a2=0 a3=0 items=0 ppid=1 pid=784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="(t-daemon)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null) >type=SERVICE_START msg=audit(1392046991.372:15): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046991.382:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046991.392:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="wdmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046991.392:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sanlock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046991.392:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="abrt-ccpp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046991.392:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046991.402:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046991.432:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046991.462:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="chronyd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046991.582:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046992.412:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046992.412:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rtkit-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046992.412:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="NetworkManager-dispatcher" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046992.412:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="gdm" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046995.332:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="tuned" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046995.542:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="avahi-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392046995.562:31): dev=eth0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1392046995.562:31): arch=80000015 syscall=54 success=yes exit=0 a0=3 a1=89a2 a2=3ffffeb540a8 a3=0 items=0 ppid=979 pid=1005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:brctl_t:s0 key=(null) >type=SERVICE_START msg=audit(1392046995.582:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="polkit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046995.642:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="accounts-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046995.782:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit-wait" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046995.782:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit-wait" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046995.782:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-start" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392046995.782:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-start" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392046995.792:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="serial-getty@hvc0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392047002.252:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="NetworkManager-dispatcher" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392047005.812:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1392047005.912:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392047005.912:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392047008.252:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392047008.302:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392047008.422:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsid" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392047008.432:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392047008.462:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sendmail" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392047008.522:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sm-client" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1392047009.732:49): table=filter family=10 entries=0 >type=NETFILTER_CFG msg=audit(1392047009.732:49): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1392047009.732:49): arch=80000015 syscall=353 success=yes exit=0 a0=0 a1=80f87b8330 a2=0 a3=0 items=0 ppid=1332 pid=1333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1392047013.692:50): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1392047013.692:50): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1392047013.692:50): arch=80000015 syscall=120 success=yes exit=1439 a0=6c020011 a1=3fff841a9f60 a2=6031 a3=b items=0 ppid=1 pid=1304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_START msg=audit(1392047014.612:51): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047014.992:52): pid=1465 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D7075494A4E6E36 terminal=? res=success' >type=CRED_ACQ msg=audit(1392047014.992:53): pid=1465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047014.992:54): pid=1465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047014.992:55): pid=1465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047014.992:56): pid=1465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047015.482:57): pid=1485 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1392047015.482:58): pid=1485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047015.482:59): pid=1485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047015.492:60): pid=1485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047015.492:61): pid=1485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047015.612:62): pid=1489 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392047015.612:63): pid=1489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047015.612:64): pid=1489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047015.642:65): pid=1489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047015.642:66): pid=1489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047015.692:67): pid=1497 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392047015.692:68): pid=1497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047015.692:69): pid=1497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047015.742:70): pid=1497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047015.742:71): pid=1497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047015.982:72): pid=1527 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392047015.982:73): pid=1527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047015.982:74): pid=1527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047015.992:75): pid=1527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047015.992:76): pid=1527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047016.012:77): pid=1531 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392047016.012:78): pid=1531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047016.012:79): pid=1531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047016.022:80): pid=1531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047016.022:81): pid=1531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047016.052:82): pid=1534 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392047016.052:83): pid=1534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047016.052:84): pid=1534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047016.062:85): pid=1534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047016.062:86): pid=1534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047016.082:87): pid=1537 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030317C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A' >type=CRED_ACQ msg=audit(1392047016.082:88): pid=1537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047016.082:89): pid=1537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047016.092:90): pid=1537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047016.092:91): pid=1537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392047039.442:92): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392047039.452:93): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterfsd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SYSTEM_BOOT msg=audit(1392047039.472:94): pid=1570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='init exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SYSTEM_RUNLEVEL msg=audit(1392047039.472:95): pid=1570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=5 exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392047039.472:96): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392047039.472:97): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392047069.472:98): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392047069.472:99): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047133.242:100): pid=1782 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D7420676C757374657266732031302E31302E32372E36343A3634202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A3634 terminal=? res=success' >type=CRED_ACQ msg=audit(1392047133.252:101): pid=1782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047133.252:102): pid=1782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047133.422:103): pid=1782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047133.422:104): pid=1782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1392047212.632:105): avc: denied { execute } for pid=2012 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392047212.632:105): arch=80000015 syscall=11 success=no exit=-13 a0=1001ad16788 a1=3fff84000ef0 a2=1001aafd960 a3=6269 items=0 ppid=1258 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_CMD msg=audit(1392047219.562:106): pid=2038 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D7420676C757374657266732031302E31302E32372E36343A3634202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A3634 terminal=? res=success' >type=CRED_ACQ msg=audit(1392047219.562:107): pid=2038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047219.562:108): pid=2038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047219.612:109): pid=2038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047219.622:110): pid=2038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392047459.562:111): pid=2576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=2576 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392047459.562:112): pid=2576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=2576 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392047459.562:113): pid=2576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=2576 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392047459.562:114): pid=2575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2576 suid=74 rport=53393 laddr=10. exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392047459.562:115): pid=2575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2576 suid=74 rport=53393 laddr=10. exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=USER_AUTH msg=audit(1392047459.712:116): pid=2575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_ACCT msg=audit(1392047459.712:117): pid=2575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392047459.712:118): pid=2575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2576 suid=74 rport=53393 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=USER_AUTH msg=audit(1392047459.722:119): pid=2575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1392047459.722:120): pid=2575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=LOGIN msg=audit(1392047459.722:121): login pid=2575 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1 >type=CRYPTO_KEY_USER msg=audit(1392047459.742:122): pid=2580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=2580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392047459.742:123): pid=2580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=2580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392047459.742:124): pid=2580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=2580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392047459.742:125): pid=2579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=blowfish-cbc ksize=128 mac=hmac-sha1 spid=2580 suid=74 rport=53394 laddr=10.10.27.64 lpor exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392047459.742:126): pid=2579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=blowfish-cbc ksize=128 mac=hmac-sha1 spid=2580 suid=74 rport=53394 laddr=10.10.27.64 lpor exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1392047459.772:127): pid=2575 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_AUTH msg=audit(1392047459.792:128): pid=2579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_ACCT msg=audit(1392047459.802:129): pid=2579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392047459.802:130): pid=2579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2580 suid=74 rport=53394 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=USER_AUTH msg=audit(1392047459.802:131): pid=2579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1392047459.802:132): pid=2579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=LOGIN msg=audit(1392047459.802:133): login pid=2579 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 >type=USER_START msg=audit(1392047459.812:134): pid=2575 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_ROLE_CHANGE msg=audit(1392047459.832:135): pid=2579 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_START msg=audit(1392047459.842:136): pid=2579 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1392047459.852:137): pid=2579 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_START msg=audit(1392047459.852:138): pid=2579 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392047459.852:139): pid=2583 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=2583 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392047459.852:140): pid=2583 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=2583 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392047459.852:141): pid=2583 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=2583 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRED_REFR msg=audit(1392047459.852:142): pid=2583 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1392047460.082:143): pid=2593 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1392047460.082:144): pid=2593 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1392047460.082:145): pid=2593 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=2593 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1392047460.092:146): pid=2593 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=2593 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1392047460.092:147): pid=2593 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=2593 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1392047460.092:148): pid=2593 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_CMD msg=audit(1392047527.412:149): pid=2814 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/var/lib/exports" cmd=7365727669636520676C7573746572642072657374617274 terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1392047527.412:150): pid=2814 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1392047527.412:151): pid=2814 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_STOP msg=audit(1392047527.442:152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392047527.492:153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glusterd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047527.502:154): pid=2814 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1392047527.502:155): pid=2814 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1392047532.582:156): pid=2843 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/var/lib/exports" cmd=73657276696365207664736D642072657374617274 terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1392047532.582:157): pid=2843 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1392047532.582:158): pid=2843 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_STOP msg=audit(1392047537.952:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1392047539.582:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047539.582:161): pid=2843 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1392047539.582:162): pid=2843 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1392047539.812:163): pid=2929 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D70365A35446A6E terminal=? res=success' >type=CRED_ACQ msg=audit(1392047539.812:164): pid=2929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047539.822:165): pid=2929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047539.822:166): pid=2929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047539.822:167): pid=2929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047540.262:168): pid=2949 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=CRED_ACQ msg=audit(1392047540.262:169): pid=2949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047540.262:170): pid=2949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047540.272:171): pid=2949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047540.272:172): pid=2949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047540.312:173): pid=2953 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392047540.312:174): pid=2953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047540.312:175): pid=2953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047540.322:176): pid=2953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047540.322:177): pid=2953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047540.452:178): pid=2963 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392047540.452:179): pid=2963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047540.452:180): pid=2963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047540.492:181): pid=2963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047540.492:182): pid=2963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047540.562:183): pid=2996 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392047540.562:184): pid=2996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047540.562:185): pid=2996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047540.572:186): pid=2996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047540.572:187): pid=2996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047540.592:188): pid=2999 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030317C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A' >type=CRED_ACQ msg=audit(1392047540.592:189): pid=2999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047540.592:190): pid=2999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047540.602:191): pid=2999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047540.602:192): pid=2999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047540.622:193): pid=3002 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392047540.622:194): pid=3002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047540.622:195): pid=3002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047540.632:196): pid=3002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047540.632:197): pid=3002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047540.672:198): pid=3005 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392047540.672:199): pid=3005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047540.672:200): pid=3005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047540.682:201): pid=3005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047540.682:202): pid=3005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047555.082:203): pid=3056 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/var/lib/exports" cmd=676C757374657220766F6C756D65207365742064617461207365727665722E616C6C6F772D696E736563757265206F6E terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1392047555.082:204): pid=3056 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1392047555.092:205): pid=3056 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1392047555.102:206): pid=3056 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1392047555.102:207): pid=3056 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1392047595.052:208): pid=3210 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/var/lib/exports" cmd=676C757374657220766F6C756D6520736574203634207365727665722E616C6C6F772D696E736563757265206F6E terminal=pts/0 res=success' >type=CRED_ACQ msg=audit(1392047595.052:209): pid=3210 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1392047595.052:210): pid=3210 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1392047595.642:211): pid=3210 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRED_DISP msg=audit(1392047595.642:212): pid=3210 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1392047615.202:213): pid=3256 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D7420676C757374657266732031302E31302E32372E36343A3634202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A3634 terminal=? res=success' >type=CRED_ACQ msg=audit(1392047615.202:214): pid=3256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047615.202:215): pid=3256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047615.262:216): pid=3256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047615.262:217): pid=3256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047615.812:218): pid=3321 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392047615.812:219): pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047615.812:220): pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047615.812:221): pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047615.812:222): pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047615.822:223): pid=3323 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392047615.822:224): pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047615.822:225): pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047615.862:226): pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047615.862:227): pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047615.872:228): pid=3348 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030317C2F6465762F6D61707065722F3336303035303736333030383038303430623030303030303030303030303030327C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D31207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A' >type=CRED_ACQ msg=audit(1392047615.872:229): pid=3348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047615.872:230): pid=3348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047615.882:231): pid=3348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047615.882:232): pid=3348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047616.892:233): pid=3361 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392047616.892:234): pid=3361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047616.892:235): pid=3361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047616.892:236): pid=3361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047616.892:237): pid=3361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047616.902:238): pid=3363 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392047616.902:239): pid=3363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047616.902:240): pid=3363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047616.942:241): pid=3363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047616.942:242): pid=3363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047638.102:243): pid=3431 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392047638.102:244): pid=3431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047638.102:245): pid=3431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047638.112:246): pid=3431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047638.112:247): pid=3431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047641.632:248): pid=3453 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392047641.632:249): pid=3453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047641.632:250): pid=3453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047641.632:251): pid=3453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047641.632:252): pid=3453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047641.652:253): pid=3455 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392047641.652:254): pid=3455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047641.652:255): pid=3455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047641.682:256): pid=3455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047641.682:257): pid=3455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047641.772:258): pid=3481 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392047641.772:259): pid=3481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047641.772:260): pid=3481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047641.782:261): pid=3481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047641.782:262): pid=3481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047663.962:263): pid=3558 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392047663.962:264): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047663.962:265): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047663.962:266): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047663.962:267): pid=3558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047663.982:268): pid=3560 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392047663.982:269): pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047663.982:270): pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047664.502:271): pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047664.502:272): pid=3560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392047664.542:273): pid=3583 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392047664.542:274): pid=3583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047664.542:275): pid=3583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047664.542:276): pid=3583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047664.542:277): pid=3583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1392047701.672:278): pid=3676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392047701.672:279): pid=3676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392047701.672:280): login pid=3676 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 >type=USER_START msg=audit(1392047701.672:281): pid=3676 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392047701.672:282): pid=3676 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392047701.702:283): pid=3676 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392047701.702:284): pid=3676 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392047813.182:285): avc: denied { execute } for pid=3941 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392047813.182:285): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9801b320 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=3941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=SERVICE_START msg=audit(1392047883.422:286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1392047883.422:287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1392047902.602:288): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-ctx=system_u:system_r:svirt_tcg_t:s0:c944,c1021 img-ctx=system_u:object_r:svirt_image_t:s0:c944,c1021 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1392047902.602:289): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392047902.762:290): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1392047902.762:290): arch=80000015 syscall=54 success=yes exit=0 a0=1a a1=89a2 a2=3fff907ad000 a3=0 items=0 ppid=1 pid=1296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1392047902.832:291): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=open vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f net=00:1a:4a:16:01:51 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392047903.202:292): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=deny vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392047903.202:293): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=path path="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/cca3de27-e612-4931-b211-db805b7ac993/images/318b6ec6-06cd-42aa-bb1b-f006b21b1a15/0855494d-e7f7-4181-9fe0-8962f503ee23" rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392047903.202:294): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392047903.242:295): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_RESOURCE msg=audit(1392047903.492:296): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=disk reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-disk="?" new-disk="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/cca3de27-e612-4931-b211-db805b7ac993/images/318b6ec6-06cd-42aa-bb1b-f006b21b1a15/0855494d-e7f7-4181-9fe0-8962f503ee23" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392047903.492:297): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-net=? new-net=00:1a:4a:16:01:51 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392047903.492:298): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=mem reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392047903.492:299): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=vcpu reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1392047903.492:300): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=start reason=booted vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=USER_CMD msg=audit(1392047906.382:301): pid=4335 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F736572766963652076686F73746D642073746F70 terminal=? res=success' >type=CRED_ACQ msg=audit(1392047906.382:302): pid=4335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392047906.382:303): pid=4335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392047906.412:304): pid=4335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392047906.412:305): pid=4335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1392048061.712:306): pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392048061.712:307): pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392048061.712:308): login pid=4697 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 >type=USER_START msg=audit(1392048061.722:309): pid=4697 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392048061.722:310): pid=4697 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392048061.772:311): avc: denied { read } for pid=4713 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392048061.772:311): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdd296a80 a2=84800 a3=0 items=0 ppid=4711 pid=4713 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392048061.802:312): pid=4697 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392048061.802:313): pid=4697 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392048113.482:314): avc: denied { execute } for pid=4854 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392048113.482:314): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98019b40 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=4854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392048413.782:315): avc: denied { execute } for pid=5542 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392048413.782:315): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98019fb0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=5542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392048601.812:316): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392048601.812:317): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392048601.812:318): login pid=5977 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5 >type=USER_START msg=audit(1392048601.822:319): pid=5977 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392048601.822:320): pid=5977 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392048601.832:321): pid=5977 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392048601.832:322): pid=5977 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392048714.132:323): avc: denied { execute } for pid=6238 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392048714.132:323): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98019050 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=6238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=VIRT_MACHINE_ID msg=audit(1392048970.183:324): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-ctx=system_u:system_r:svirt_tcg_t:s0:c68,c916 img-ctx=system_u:object_r:svirt_image_t:s0:c68,c916 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1392048970.183:325): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392048970.343:326): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1392048970.343:326): arch=80000015 syscall=54 success=yes exit=0 a0=1a a1=89a2 a2=3fff917ad000 a3=0 items=0 ppid=1 pid=1294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1392048970.413:327): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=open vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f net=00:1a:4a:16:01:51 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392048970.733:328): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=deny vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392048970.733:329): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=path path="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/cca3de27-e612-4931-b211-db805b7ac993/images/318b6ec6-06cd-42aa-bb1b-f006b21b1a15/0855494d-e7f7-4181-9fe0-8962f503ee23" rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392048970.733:330): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392048970.763:331): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_RESOURCE msg=audit(1392048971.053:332): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=disk reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-disk="?" new-disk="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/cca3de27-e612-4931-b211-db805b7ac993/images/318b6ec6-06cd-42aa-bb1b-f006b21b1a15/0855494d-e7f7-4181-9fe0-8962f503ee23" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392048971.053:333): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-net=? new-net=00:1a:4a:16:01:51 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392048971.053:334): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=mem reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392048971.053:335): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=vcpu reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1392048971.053:336): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=start reason=booted vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=USER_CMD msg=audit(1392048973.223:337): pid=7001 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F736572766963652076686F73746D642073746F70 terminal=? res=success' >type=CRED_ACQ msg=audit(1392048973.223:338): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392048973.223:339): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392048973.253:340): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392048973.253:341): pid=7001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1392048991.253:342): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-ctx=system_u:system_r:svirt_tcg_t:s0:c792,c842 img-ctx=system_u:object_r:svirt_image_t:s0:c792,c842 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1392048991.253:343): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392048991.393:344): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1392048991.393:344): arch=80000015 syscall=54 success=yes exit=0 a0=1a a1=89a2 a2=3fff927ad000 a3=0 items=0 ppid=1 pid=1292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1392048991.473:345): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=open vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f net=00:1a:4a:16:01:51 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392048991.793:346): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=deny vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392048991.793:347): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=path path="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/cca3de27-e612-4931-b211-db805b7ac993/images/318b6ec6-06cd-42aa-bb1b-f006b21b1a15/0855494d-e7f7-4181-9fe0-8962f503ee23" rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392048991.793:348): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392048991.823:349): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_RESOURCE msg=audit(1392048992.083:350): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=disk reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-disk="?" new-disk="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/cca3de27-e612-4931-b211-db805b7ac993/images/318b6ec6-06cd-42aa-bb1b-f006b21b1a15/0855494d-e7f7-4181-9fe0-8962f503ee23" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392048992.083:351): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-net=? new-net=00:1a:4a:16:01:51 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392048992.083:352): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=mem reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392048992.083:353): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=vcpu reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1392048992.083:354): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=start reason=booted vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=USER_CMD msg=audit(1392048994.853:355): pid=7234 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F736572766963652076686F73746D642073746F70 terminal=? res=success' >type=CRED_ACQ msg=audit(1392048994.853:356): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392048994.853:357): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392048994.883:358): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392048994.883:359): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1392049002.143:360): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-ctx=system_u:system_r:svirt_tcg_t:s0:c542,c695 img-ctx=system_u:object_r:svirt_image_t:s0:c542,c695 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1392049002.143:361): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392049002.283:362): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1392049002.283:362): arch=80000015 syscall=54 success=yes exit=0 a0=1a a1=89a2 a2=3fff90fad000 a3=0 items=0 ppid=1 pid=1295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1392049002.363:363): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=open vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f net=00:1a:4a:16:01:51 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392049002.663:364): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=deny vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392049002.663:365): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=path path="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/cca3de27-e612-4931-b211-db805b7ac993/images/318b6ec6-06cd-42aa-bb1b-f006b21b1a15/0855494d-e7f7-4181-9fe0-8962f503ee23" rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392049002.663:366): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392049002.693:367): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_RESOURCE msg=audit(1392049002.963:368): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=disk reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-disk="?" new-disk="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/cca3de27-e612-4931-b211-db805b7ac993/images/318b6ec6-06cd-42aa-bb1b-f006b21b1a15/0855494d-e7f7-4181-9fe0-8962f503ee23" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392049002.963:369): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-net=? new-net=00:1a:4a:16:01:51 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392049002.963:370): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=mem reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392049002.963:371): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=vcpu reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1392049002.963:372): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=start reason=booted vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=USER_CMD msg=audit(1392049004.273:373): pid=7445 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F736572766963652076686F73746D642073746F70 terminal=? res=success' >type=CRED_ACQ msg=audit(1392049004.273:374): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392049004.273:375): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392049004.293:376): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392049004.293:377): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1392049013.623:378): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-ctx=system_u:system_r:svirt_tcg_t:s0:c265,c686 img-ctx=system_u:object_r:svirt_image_t:s0:c265,c686 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1392049013.623:379): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392049013.763:380): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1392049013.763:380): arch=80000015 syscall=54 success=yes exit=0 a0=1a a1=89a2 a2=3fff91fad000 a3=0 items=0 ppid=1 pid=1293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1392049013.833:381): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=open vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f net=00:1a:4a:16:01:51 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392049014.123:382): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=deny vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392049014.123:383): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=path path="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/cca3de27-e612-4931-b211-db805b7ac993/images/318b6ec6-06cd-42aa-bb1b-f006b21b1a15/0855494d-e7f7-4181-9fe0-8962f503ee23" rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392049014.123:384): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392049014.153:385): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=AVC msg=audit(1392049014.383:386): avc: denied { execute } for pid=7638 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392049014.383:386): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98017e70 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=7638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=VIRT_RESOURCE msg=audit(1392049014.443:387): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=disk reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-disk="?" new-disk="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/cca3de27-e612-4931-b211-db805b7ac993/images/318b6ec6-06cd-42aa-bb1b-f006b21b1a15/0855494d-e7f7-4181-9fe0-8962f503ee23" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392049014.443:388): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-net=? new-net=00:1a:4a:16:01:51 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392049014.443:389): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=mem reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392049014.443:390): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=vcpu reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1392049014.443:391): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=start reason=booted vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=USER_CMD msg=audit(1392049016.803:392): pid=7670 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F736572766963652076686F73746D642073746F70 terminal=? res=success' >type=CRED_ACQ msg=audit(1392049016.803:393): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392049016.803:394): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392049016.823:395): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392049016.823:396): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1392049062.683:397): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-ctx=system_u:system_r:svirt_tcg_t:s0:c676,c900 img-ctx=system_u:object_r:svirt_image_t:s0:c676,c900 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1392049062.683:398): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392049062.833:399): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1392049062.833:399): arch=80000015 syscall=54 success=yes exit=0 a0=1a a1=89a2 a2=3fff907ad000 a3=0 items=0 ppid=1 pid=1296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1392049062.913:400): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=open vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f net=00:1a:4a:16:01:51 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392049063.223:401): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=deny vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392049063.223:402): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=path path="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/cca3de27-e612-4931-b211-db805b7ac993/images/318b6ec6-06cd-42aa-bb1b-f006b21b1a15/0855494d-e7f7-4181-9fe0-8962f503ee23" rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392049063.223:403): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392049063.253:404): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_RESOURCE msg=audit(1392049063.533:405): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=disk reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-disk="?" new-disk="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/cca3de27-e612-4931-b211-db805b7ac993/images/318b6ec6-06cd-42aa-bb1b-f006b21b1a15/0855494d-e7f7-4181-9fe0-8962f503ee23" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392049063.533:406): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-net=? new-net=00:1a:4a:16:01:51 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392049063.533:407): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=mem reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392049063.533:408): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=vcpu reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1392049063.533:409): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=start reason=booted vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=USER_CMD msg=audit(1392049065.753:410): pid=7964 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F736572766963652076686F73746D642073746F70 terminal=? res=success' >type=CRED_ACQ msg=audit(1392049065.753:411): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392049065.753:412): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392049065.783:413): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392049065.783:414): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392049125.523:415): pid=2575 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=CRED_DISP msg=audit(1392049125.523:416): pid=2575 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_END msg=audit(1392049125.523:417): pid=2575 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1392049125.523:418): pid=2575 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1392049125.523:419): pid=2575 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=2575 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392049125.523:420): pid=2575 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=2575 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392049125.523:421): pid=2575 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=2575 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392049125.523:422): pid=2575 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2575 suid=0 rport=53393 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=USER_END msg=audit(1392049125.803:423): pid=2579 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1392049125.803:424): pid=2579 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_END msg=audit(1392049125.803:425): pid=2579 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=CRED_DISP msg=audit(1392049125.803:426): pid=2579 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392049125.803:427): pid=2579 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2579 suid=0 rport=53394 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392049125.803:428): pid=2579 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=2579 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392049125.803:429): pid=2579 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=2579 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392049125.803:430): pid=2579 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=2579 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=AVC msg=audit(1392049314.683:431): avc: denied { execute } for pid=8552 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392049314.683:431): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980182c0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=8552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392049501.843:432): pid=8978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392049501.843:433): pid=8978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392049501.843:434): login pid=8978 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6 >type=USER_START msg=audit(1392049501.853:435): pid=8978 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392049501.853:436): pid=8978 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392049501.873:437): pid=8978 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392049501.873:438): pid=8978 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392049615.013:439): avc: denied { execute } for pid=9248 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392049615.013:439): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98018710 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=9248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392049915.323:440): avc: denied { execute } for pid=9934 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392049915.323:440): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98018920 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=9934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392050215.603:441): avc: denied { execute } for pid=10628 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392050215.603:441): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9801bb80 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=10628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392050401.883:442): pid=11054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392050401.893:443): pid=11054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392050401.893:444): login pid=11054 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 >type=USER_START msg=audit(1392050401.893:445): pid=11054 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392050401.893:446): pid=11054 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392050401.913:447): pid=11054 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392050401.913:448): pid=11054 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392050515.873:449): avc: denied { execute } for pid=11321 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392050515.873:449): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9801bfd0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=11321 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392050816.173:450): avc: denied { execute } for pid=12015 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392050816.173:450): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9801c420 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=12015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=CRYPTO_KEY_USER msg=audit(1392051042.664:451): pid=12531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=12531 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392051042.664:452): pid=12531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=12531 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392051042.664:453): pid=12531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=12531 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392051042.664:454): pid=12530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12531 suid=74 rport=53558 laddr=10 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392051042.664:455): pid=12530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12531 suid=74 rport=53558 laddr=10 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=USER_AUTH msg=audit(1392051042.754:456): pid=12530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_ACCT msg=audit(1392051042.764:457): pid=12530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392051042.764:458): pid=12530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12531 suid=74 rport=53558 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=USER_AUTH msg=audit(1392051042.764:459): pid=12530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1392051042.764:460): pid=12530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=LOGIN msg=audit(1392051042.764:461): login pid=12530 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8 >type=CRYPTO_KEY_USER msg=audit(1392051042.794:462): pid=12535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=12535 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392051042.794:463): pid=12535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=12535 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392051042.794:464): pid=12535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=12535 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392051042.794:465): pid=12534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=blowfish-cbc ksize=128 mac=hmac-sha1 spid=12535 suid=74 rport=53559 laddr=10.10.27.64 lpo exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392051042.794:466): pid=12534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=blowfish-cbc ksize=128 mac=hmac-sha1 spid=12535 suid=74 rport=53559 laddr=10.10.27.64 lpo exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=USER_ROLE_CHANGE msg=audit(1392051042.844:467): pid=12530 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_START msg=audit(1392051042.854:468): pid=12530 uid=0 auid=0 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_AUTH msg=audit(1392051042.874:469): pid=12534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_ACCT msg=audit(1392051042.874:470): pid=12534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392051042.884:471): pid=12534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12535 suid=74 rport=53559 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=USER_AUTH msg=audit(1392051042.884:472): pid=12534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1392051042.884:473): pid=12534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=LOGIN msg=audit(1392051042.884:474): login pid=12534 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9 >type=USER_ROLE_CHANGE msg=audit(1392051042.944:475): pid=12534 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_START msg=audit(1392051042.954:476): pid=12534 uid=0 auid=0 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1392051042.964:477): pid=12534 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_START msg=audit(1392051042.964:478): pid=12534 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392051042.974:479): pid=12538 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=12538 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392051042.974:480): pid=12538 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=12538 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392051042.974:481): pid=12538 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=12538 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=? res=success' >type=CRED_REFR msg=audit(1392051042.974:482): pid=12538 uid=0 auid=0 ses=9 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1392051043.114:483): pid=12549 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1392051043.114:484): pid=12549 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1392051043.114:485): pid=12549 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=12549 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1392051043.114:486): pid=12549 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=12549 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1392051043.114:487): pid=12549 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=12549 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.3 terminal=pts/0 res=success' >type=CRED_REFR msg=audit(1392051043.124:488): pid=12549 uid=0 auid=0 ses=8 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.3 addr=10.10.27.3 terminal=ssh res=success' >type=AVC msg=audit(1392051116.434:489): avc: denied { execute } for pid=12804 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392051116.434:489): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9801c870 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=12804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392051301.924:490): pid=13222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392051301.924:491): pid=13222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392051301.924:492): login pid=13222 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10 >type=USER_START msg=audit(1392051301.934:493): pid=13222 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392051301.934:494): pid=13222 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392051301.944:495): pid=13222 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392051301.944:496): pid=13222 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392051416.754:497): avc: denied { execute } for pid=13499 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392051416.754:497): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9801ccc0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=13499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=CRYPTO_KEY_USER msg=audit(1392051660.824:498): pid=14059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=14059 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.74 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392051660.824:499): pid=14059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=14059 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.74 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392051660.824:500): pid=14059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=14059 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.74 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392051660.824:501): pid=14058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14059 suid=74 rport=54424 laddr=10 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.74 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392051660.824:502): pid=14058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=14059 suid=74 rport=54424 laddr=10 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.74 terminal=? res=success' >type=USER_ACCT msg=audit(1392051661.954:503): pid=14060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392051661.954:504): pid=14060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392051661.954:505): login pid=14060 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11 >type=USER_START msg=audit(1392051661.964:506): pid=14060 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392051661.964:507): pid=14060 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392051661.984:508): avc: denied { read } for pid=14076 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392051661.984:508): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc9f723f0 a2=84800 a3=0 items=0 ppid=14074 pid=14076 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=11 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392051661.994:509): pid=14060 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392051661.994:510): pid=14060 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_AUTH msg=audit(1392051670.964:511): pid=14058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.74 addr=10.10.27.74 terminal=ssh res=success' >type=USER_ACCT msg=audit(1392051670.964:512): pid=14058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.74 addr=10.10.27.74 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392051670.964:513): pid=14058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14059 suid=74 rport=54424 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.74 terminal=? res=success' >type=USER_AUTH msg=audit(1392051670.964:514): pid=14058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.74 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1392051670.964:515): pid=14058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.74 addr=10.10.27.74 terminal=ssh res=success' >type=LOGIN msg=audit(1392051670.964:516): login pid=14058 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12 >type=USER_ROLE_CHANGE msg=audit(1392051671.004:517): pid=14058 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.10.27.74 addr=10.10.27.74 terminal=ssh res=success' >type=USER_START msg=audit(1392051671.004:518): pid=14058 uid=0 auid=0 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.74 addr=10.10.27.74 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1392051671.014:519): pid=14058 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.74 addr=10.10.27.74 terminal=ssh res=success' >type=USER_START msg=audit(1392051671.014:520): pid=14058 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.74 addr=10.10.27.74 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392051671.014:521): pid=14116 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=14116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.74 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392051671.014:522): pid=14116 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=14116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.74 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392051671.014:523): pid=14116 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=14116 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.74 terminal=? res=success' >type=CRED_REFR msg=audit(1392051671.014:524): pid=14116 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.74 addr=10.10.27.74 terminal=ssh res=success' >type=AVC msg=audit(1392051717.044:525): avc: denied { execute } for pid=14238 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392051717.044:525): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9801d110 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=14238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_END msg=audit(1392051721.704:526): pid=14058 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.74 addr=10.10.27.74 terminal=ssh res=success' >type=CRED_DISP msg=audit(1392051721.704:527): pid=14058 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.74 addr=10.10.27.74 terminal=ssh res=success' >type=USER_END msg=audit(1392051721.704:528): pid=14058 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.74 addr=10.10.27.74 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1392051721.704:529): pid=14058 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.74 addr=10.10.27.74 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392051721.714:530): pid=14058 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=14058 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.74 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392051721.714:531): pid=14058 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=14058 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.74 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392051721.714:532): pid=14058 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=14058 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.74 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392051721.714:533): pid=14058 uid=0 auid=0 ses=12 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14058 suid=0 rport=54424 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.74 terminal=? res=success' >type=AVC msg=audit(1392052017.414:534): avc: denied { execute } for pid=14933 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392052017.414:534): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9801d560 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=14933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392052201.004:535): pid=15348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392052201.004:536): pid=15348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392052201.014:537): login pid=15348 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13 >type=USER_START msg=audit(1392052201.014:538): pid=15348 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392052201.014:539): pid=15348 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392052201.024:540): pid=15348 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392052201.024:541): pid=15348 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392052317.704:542): avc: denied { execute } for pid=15624 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392052317.704:542): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9801d9b0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=15624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392052617.984:543): avc: denied { execute } for pid=16318 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392052617.984:543): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9801de00 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=16318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392052918.294:544): avc: denied { execute } for pid=17004 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392052918.294:544): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9801e250 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=17004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392053101.035:545): pid=17394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392053101.035:546): pid=17394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392053101.035:547): login pid=17394 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14 >type=USER_START msg=audit(1392053101.045:548): pid=17394 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392053101.045:549): pid=17394 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392053101.055:550): pid=17394 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392053101.055:551): pid=17394 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392053372.465:552): avc: denied { execute } for pid=18022 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392053372.465:552): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9801e6a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=18022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392053672.755:553): avc: denied { execute } for pid=18708 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392053672.755:553): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9801eaf0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=18708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392053973.025:554): avc: denied { execute } for pid=19393 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392053973.025:554): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9801ef60 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=19393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392054001.065:555): pid=19463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392054001.065:556): pid=19463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392054001.065:557): login pid=19463 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15 >type=USER_START msg=audit(1392054001.075:558): pid=19463 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392054001.075:559): pid=19463 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392054001.075:560): pid=19463 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392054001.085:561): pid=19463 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392054273.295:562): avc: denied { execute } for pid=20087 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392054273.295:562): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9801f420 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=20087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=VIRT_MACHINE_ID msg=audit(1392054433.425:563): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-ctx=system_u:system_r:svirt_tcg_t:s0:c140,c241 img-ctx=system_u:object_r:svirt_image_t:s0:c140,c241 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1392054433.425:564): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-ctx=+107:+107 img-ctx=+107:+107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392054433.555:565): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1392054433.555:565): arch=80000015 syscall=54 success=yes exit=0 a0=1a a1=89a2 a2=3fff907ad000 a3=0 items=0 ppid=1 pid=1296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1392054433.655:566): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=open vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f net=00:1a:4a:16:01:51 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392054433.975:567): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=deny vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392054433.975:568): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=path path="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/cca3de27-e612-4931-b211-db805b7ac993/images/318b6ec6-06cd-42aa-bb1b-f006b21b1a15/0855494d-e7f7-4181-9fe0-8962f503ee23" rdev=? acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392054433.975:569): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=cgroup reason=allow vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f cgroup="/sys/fs/cgroup/devices/machine/vm64.libvirt-qemu/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1392054434.005:570): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_RESOURCE msg=audit(1392054434.295:571): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=disk reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-disk="?" new-disk="/rhev/data-center/mnt/glusterSD/10.10.27.64:64/cca3de27-e612-4931-b211-db805b7ac993/images/318b6ec6-06cd-42aa-bb1b-f006b21b1a15/0855494d-e7f7-4181-9fe0-8962f503ee23" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392054434.295:572): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=net reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-net=? new-net=00:1a:4a:16:01:51 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392054434.295:573): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=mem reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1392054434.295:574): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu resrc=vcpu reason=start vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1392054434.295:575): pid=1273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=qemu op=start reason=booted vm="vm64" uuid=6979f43d-67dc-4255-9ade-3ee2797e7f3f vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=failed' >type=USER_CMD msg=audit(1392054436.835:576): pid=20635 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7362696E2F736572766963652076686F73746D642073746F70 terminal=? res=success' >type=CRED_ACQ msg=audit(1392054436.835:577): pid=20635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392054436.835:578): pid=20635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392054436.855:579): pid=20635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392054436.855:580): pid=20635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1392054573.585:581): avc: denied { execute } for pid=20966 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392054573.585:581): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9801ff20 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=20966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392054873.875:582): avc: denied { execute } for pid=21651 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392054873.875:582): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980205a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=21651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392054901.095:583): pid=21718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392054901.095:584): pid=21718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392054901.095:585): login pid=21718 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16 >type=USER_START msg=audit(1392054901.095:586): pid=21718 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392054901.095:587): pid=21718 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392054901.105:588): pid=21718 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392054901.115:589): pid=21718 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392055174.186:590): avc: denied { execute } for pid=22348 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392055174.186:590): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98020ac0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=22348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392055261.116:591): pid=22547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392055261.116:592): pid=22547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392055261.116:593): login pid=22547 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17 >type=USER_START msg=audit(1392055261.126:594): pid=22547 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392055261.126:595): pid=22547 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392055261.146:596): avc: denied { read } for pid=22563 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392055261.146:596): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe9aaf9c0 a2=84800 a3=0 items=0 ppid=22561 pid=22563 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=17 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392055261.156:597): pid=22547 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392055261.156:598): pid=22547 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392055474.486:599): avc: denied { execute } for pid=23071 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392055474.486:599): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98020fc0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=23071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392055774.796:600): avc: denied { execute } for pid=23758 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392055774.796:600): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980214c0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=23758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392055801.166:601): pid=23825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392055801.166:602): pid=23825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392055801.166:603): login pid=23825 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=18 >type=USER_START msg=audit(1392055801.166:604): pid=23825 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392055801.176:605): pid=23825 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392055801.176:606): pid=23825 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392055801.176:607): pid=23825 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392056075.106:608): avc: denied { execute } for pid=24454 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392056075.106:608): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980219c0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=24454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392056375.426:609): avc: denied { execute } for pid=25147 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392056375.426:609): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98021ec0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=25147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392056701.186:610): pid=25642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392056701.186:611): pid=25642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392056701.186:612): login pid=25642 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=19 >type=USER_START msg=audit(1392056701.196:613): pid=25642 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392056701.196:614): pid=25642 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392056701.206:615): pid=25642 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392056701.206:616): pid=25642 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392057601.217:617): pid=26306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392057601.217:618): pid=26306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392057601.227:619): login pid=26306 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=20 >type=USER_START msg=audit(1392057601.227:620): pid=26306 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392057601.227:621): pid=26306 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392057601.237:622): pid=26306 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392057601.247:623): pid=26306 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1392058501.257:624): pid=27046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392058501.257:625): pid=27046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392058501.257:626): login pid=27046 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=21 >type=USER_START msg=audit(1392058501.267:627): pid=27046 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392058501.267:628): pid=27046 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392058501.277:629): pid=27046 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392058501.277:630): pid=27046 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392058648.187:631): avc: denied { execute } for pid=27390 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392058648.187:631): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98022440 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=27390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392058861.287:632): pid=27873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392058861.287:633): pid=27873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392058861.287:634): login pid=27873 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=22 >type=USER_START msg=audit(1392058861.297:635): pid=27873 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392058861.297:636): pid=27873 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392058861.307:637): avc: denied { read } for pid=27889 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392058861.307:637): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffa3d6440 a2=84800 a3=0 items=0 ppid=27887 pid=27889 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=22 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392058861.327:638): pid=27873 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392058861.327:639): pid=27873 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392058948.477:640): avc: denied { execute } for pid=28113 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392058948.477:640): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98022980 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=28113 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392059248.788:641): avc: denied { execute } for pid=28801 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392059248.788:641): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98022e80 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=28801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392059401.338:642): pid=29144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392059401.338:643): pid=29144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392059401.338:644): login pid=29144 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=23 >type=USER_START msg=audit(1392059401.348:645): pid=29144 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392059401.348:646): pid=29144 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392059401.348:647): pid=29144 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392059401.358:648): pid=29144 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392059549.058:649): avc: denied { execute } for pid=29497 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392059549.058:649): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98023380 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=29497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392059849.348:650): avc: denied { execute } for pid=30185 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392059849.348:650): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98023880 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=30185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392060149.648:651): avc: denied { execute } for pid=30875 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392060149.648:651): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98023d80 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=30875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392060301.368:652): pid=31220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392060301.368:653): pid=31220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392060301.368:654): login pid=31220 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=24 >type=USER_START msg=audit(1392060301.368:655): pid=31220 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392060301.368:656): pid=31220 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392060301.378:657): pid=31220 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392060301.378:658): pid=31220 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392060449.928:659): avc: denied { execute } for pid=31573 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392060449.928:659): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98024280 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=31573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392060750.208:660): avc: denied { execute } for pid=32259 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392060750.208:660): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98024780 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=32259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392061050.489:661): avc: denied { execute } for pid=32951 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392061050.489:661): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98024c80 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=32951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392061201.389:662): pid=33294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392061201.389:663): pid=33294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392061201.389:664): login pid=33294 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=25 >type=USER_START msg=audit(1392061201.389:665): pid=33294 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392061201.389:666): pid=33294 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392061201.399:667): pid=33294 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392061201.399:668): pid=33294 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392061350.869:669): avc: denied { execute } for pid=33646 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392061350.869:669): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98025180 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=33646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392061651.159:670): avc: denied { execute } for pid=34338 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392061651.159:670): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98025680 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=34338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392061951.509:671): avc: denied { execute } for pid=35032 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392061951.509:671): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98025b80 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=35032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392062101.409:672): pid=35373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392062101.409:673): pid=35373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392062101.409:674): login pid=35373 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=26 >type=USER_START msg=audit(1392062101.409:675): pid=35373 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392062101.409:676): pid=35373 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392062101.419:677): pid=35373 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392062101.419:678): pid=35373 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392062251.819:679): avc: denied { execute } for pid=35726 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392062251.819:679): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98026080 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=35726 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392062461.429:680): pid=36199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392062461.429:681): pid=36199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392062461.429:682): login pid=36199 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=27 >type=USER_START msg=audit(1392062461.429:683): pid=36199 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392062461.429:684): pid=36199 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392062461.449:685): avc: denied { read } for pid=36215 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392062461.449:685): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffcc123800 a2=84800 a3=0 items=0 ppid=36213 pid=36215 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=27 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392062461.469:686): pid=36199 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392062461.469:687): pid=36199 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392062552.099:688): avc: denied { execute } for pid=36442 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392062552.099:688): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98026580 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=36442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392062852.369:689): avc: denied { execute } for pid=37135 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392062852.369:689): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98026a80 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=37135 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392063001.479:690): pid=37471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392063001.479:691): pid=37471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392063001.479:692): login pid=37471 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=28 >type=USER_START msg=audit(1392063001.489:693): pid=37471 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392063001.489:694): pid=37471 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392063001.499:695): pid=37471 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392063001.499:696): pid=37471 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392063152.640:697): avc: denied { execute } for pid=37824 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392063152.640:697): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98026f80 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=37824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392063452.910:698): avc: denied { execute } for pid=38520 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392063452.910:698): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98027480 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=38520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392063753.170:699): avc: denied { execute } for pid=39213 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392063753.170:699): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98027980 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=39213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392063901.510:700): pid=39548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392063901.510:701): pid=39548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392063901.510:702): login pid=39548 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=29 >type=USER_START msg=audit(1392063901.510:703): pid=39548 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392063901.510:704): pid=39548 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392063901.520:705): pid=39548 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392063901.520:706): pid=39548 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392064053.440:707): avc: denied { execute } for pid=39905 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392064053.440:707): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98027e80 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=39905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392064353.720:708): avc: denied { execute } for pid=40598 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392064353.720:708): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98028380 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=40598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392064653.990:709): avc: denied { execute } for pid=41287 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392064653.990:709): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98028880 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=41287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392064801.530:710): pid=41623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392064801.530:711): pid=41623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392064801.530:712): login pid=41623 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=30 >type=USER_START msg=audit(1392064801.530:713): pid=41623 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392064801.530:714): pid=41623 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392064801.540:715): pid=41623 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392064801.540:716): pid=41623 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392064954.260:717): avc: denied { execute } for pid=41979 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392064954.260:717): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98028d80 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=41979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392065254.531:718): avc: denied { execute } for pid=42673 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392065254.531:718): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98029280 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=42673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392065554.811:719): avc: denied { execute } for pid=43369 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392065554.811:719): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98029780 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=43369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392065701.551:720): pid=43702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392065701.551:721): pid=43702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392065701.551:722): login pid=43702 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=31 >type=USER_START msg=audit(1392065701.551:723): pid=43702 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392065701.561:724): pid=43702 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392065701.561:725): pid=43702 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392065701.561:726): pid=43702 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392065855.081:727): avc: denied { execute } for pid=44061 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392065855.081:727): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98029c80 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=44061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392066061.571:728): pid=44528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392066061.571:729): pid=44528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392066061.571:730): login pid=44528 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=32 >type=USER_START msg=audit(1392066061.581:731): pid=44528 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392066061.581:732): pid=44528 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392066061.591:733): avc: denied { read } for pid=44544 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392066061.591:733): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffc0804920 a2=84800 a3=0 items=0 ppid=44542 pid=44544 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=32 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392066061.611:734): pid=44528 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392066061.611:735): pid=44528 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392066155.341:736): avc: denied { execute } for pid=44784 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392066155.341:736): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9802a180 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=44784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392066455.621:737): avc: denied { execute } for pid=45475 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392066455.621:737): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9802a680 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=45475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392066601.621:738): pid=45807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392066601.621:739): pid=45807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392066601.621:740): login pid=45807 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=33 >type=USER_START msg=audit(1392066601.631:741): pid=45807 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392066601.631:742): pid=45807 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392066601.651:743): pid=45807 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392066601.651:744): pid=45807 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392066755.891:745): avc: denied { execute } for pid=46165 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392066755.891:745): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9802ab80 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=46165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392067056.171:746): avc: denied { execute } for pid=46858 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392067056.171:746): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9802b080 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=46858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392067356.442:747): avc: denied { execute } for pid=47546 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392067356.442:747): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9802b580 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=47546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392067501.662:748): pid=47878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392067501.662:749): pid=47878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392067501.662:750): login pid=47878 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=34 >type=USER_START msg=audit(1392067501.662:751): pid=47878 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392067501.662:752): pid=47878 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392067501.672:753): pid=47878 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392067501.672:754): pid=47878 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392067656.732:755): avc: denied { execute } for pid=48242 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392067656.732:755): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9802ba80 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=48242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392067957.022:756): avc: denied { execute } for pid=48936 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392067957.022:756): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9802bf80 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=48936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392068257.282:757): avc: denied { execute } for pid=49623 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392068257.282:757): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9802c480 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=49623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392068401.682:758): pid=49952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392068401.682:759): pid=49952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392068401.682:760): login pid=49952 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=35 >type=USER_START msg=audit(1392068401.682:761): pid=49952 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392068401.682:762): pid=49952 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392068401.692:763): pid=49952 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392068401.692:764): pid=49952 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392068557.542:765): avc: denied { execute } for pid=50319 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392068557.542:765): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9802c980 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=50319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392068857.812:766): avc: denied { execute } for pid=51013 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392068857.812:766): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9802ce80 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=51013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392069158.093:767): avc: denied { execute } for pid=51700 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392069158.093:767): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9802d380 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=51700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392069301.693:768): pid=52029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392069301.693:769): pid=52029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392069301.693:770): login pid=52029 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=36 >type=USER_START msg=audit(1392069301.703:771): pid=52029 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392069301.703:772): pid=52029 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392069301.703:773): pid=52029 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392069301.713:774): pid=52029 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392069458.533:775): avc: denied { execute } for pid=52398 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392069458.533:775): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9802d880 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=52398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392069661.713:776): pid=52857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392069661.713:777): pid=52857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392069661.713:778): login pid=52857 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=37 >type=USER_START msg=audit(1392069661.723:779): pid=52857 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392069661.723:780): pid=52857 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392069661.733:781): avc: denied { read } for pid=52873 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392069661.733:781): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd2224c90 a2=84800 a3=0 items=0 ppid=52871 pid=52873 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=37 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392069661.753:782): pid=52857 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392069661.753:783): pid=52857 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392069758.793:784): avc: denied { execute } for pid=53119 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392069758.793:784): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9802dd80 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=53119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392070059.073:785): avc: denied { execute } for pid=53812 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392070059.073:785): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9802e280 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=53812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392070201.763:786): pid=54134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392070201.763:787): pid=54134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392070201.763:788): login pid=54134 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=38 >type=USER_START msg=audit(1392070201.773:789): pid=54134 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392070201.773:790): pid=54134 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392070201.773:791): pid=54134 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392070201.783:792): pid=54134 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392070359.383:793): avc: denied { execute } for pid=54504 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392070359.383:793): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9802e780 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=54504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392070659.733:794): avc: denied { execute } for pid=55194 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392070659.733:794): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9802ec80 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=55194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392070960.233:795): avc: denied { execute } for pid=55888 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392070960.233:795): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9802f180 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=55888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392071101.793:796): pid=56209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392071101.793:797): pid=56209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392071101.793:798): login pid=56209 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=39 >type=USER_START msg=audit(1392071101.793:799): pid=56209 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392071101.793:800): pid=56209 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392071101.803:801): pid=56209 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392071101.803:802): pid=56209 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392071260.584:803): avc: denied { execute } for pid=56580 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392071260.584:803): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9802f680 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=56580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392071560.954:804): avc: denied { execute } for pid=57273 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392071560.954:804): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9802fad0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=57273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392071861.244:805): avc: denied { execute } for pid=57959 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392071861.244:805): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9802ff20 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=57959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392072001.814:806): pid=58278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392072001.814:807): pid=58278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392072001.814:808): login pid=58278 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=40 >type=USER_START msg=audit(1392072001.814:809): pid=58278 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392072001.814:810): pid=58278 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392072001.824:811): pid=58278 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392072001.824:812): pid=58278 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392072161.534:813): avc: denied { execute } for pid=58655 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392072161.534:813): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98030370 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=58655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392072461.804:814): avc: denied { execute } for pid=59351 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392072461.804:814): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980307c0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=59351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392072762.104:815): avc: denied { execute } for pid=60041 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392072762.104:815): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98030c10 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=60041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392072901.844:816): pid=60355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392072901.844:817): pid=60355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392072901.844:818): login pid=60355 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=41 >type=USER_START msg=audit(1392072901.844:819): pid=60355 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392072901.844:820): pid=60355 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392072901.854:821): pid=60355 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392072901.854:822): pid=60355 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392073062.384:823): avc: denied { execute } for pid=60734 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392073062.384:823): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98031060 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=60734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392073261.865:824): pid=61185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392073261.865:825): pid=61185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392073261.865:826): login pid=61185 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=42 >type=USER_START msg=audit(1392073261.865:827): pid=61185 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392073261.865:828): pid=61185 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392073261.885:829): avc: denied { read } for pid=61201 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392073261.885:829): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffffe7a8d30 a2=84800 a3=0 items=0 ppid=61199 pid=61201 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=42 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392073265.525:830): pid=61185 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392073265.525:831): pid=61185 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392073362.665:832): avc: denied { execute } for pid=61459 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392073362.665:832): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980314b0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=61459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392073662.995:833): avc: denied { execute } for pid=62146 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392073662.995:833): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98031900 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=62146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392073801.535:834): pid=62463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392073801.535:835): pid=62463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392073801.535:836): login pid=62463 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=43 >type=USER_START msg=audit(1392073801.545:837): pid=62463 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392073801.545:838): pid=62463 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392073801.555:839): pid=62463 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392073801.565:840): pid=62463 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392073963.265:841): avc: denied { execute } for pid=62843 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392073963.265:841): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98031d50 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=62843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392074263.545:842): avc: denied { execute } for pid=63536 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392074263.545:842): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980321a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=63536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392074563.815:843): avc: denied { execute } for pid=64224 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392074563.815:843): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98032660 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=64224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392074701.575:844): pid=64537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392074701.575:845): pid=64537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392074701.575:846): login pid=64537 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=44 >type=USER_START msg=audit(1392074701.585:847): pid=64537 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392074701.585:848): pid=64537 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392074701.595:849): pid=64537 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392074701.605:850): pid=64537 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392074864.095:851): avc: denied { execute } for pid=64919 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392074864.095:851): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98032b20 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=64919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392075164.375:852): avc: denied { execute } for pid=389 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392075164.375:852): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4006cd0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392075464.656:853): avc: denied { execute } for pid=1168 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392075464.656:853): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa40011d0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=1168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392075601.616:854): pid=1500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392075601.616:855): pid=1500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392075601.616:856): login pid=1500 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=45 >type=USER_START msg=audit(1392075601.616:857): pid=1500 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392075601.616:858): pid=1500 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392075601.626:859): pid=1500 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392075601.626:860): pid=1500 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392075764.936:861): avc: denied { execute } for pid=1882 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392075764.936:861): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4001710 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=1882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392076065.216:862): avc: denied { execute } for pid=2579 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392076065.216:862): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4001c10 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392076365.486:863): avc: denied { execute } for pid=3322 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392076365.486:863): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4002110 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=3322 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392076501.636:864): pid=3644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392076501.636:865): pid=3644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392076501.636:866): login pid=3644 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=46 >type=USER_START msg=audit(1392076501.636:867): pid=3644 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392076501.636:868): pid=3644 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392076501.646:869): pid=3644 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392076501.646:870): pid=3644 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392076665.766:871): avc: denied { execute } for pid=4029 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392076665.766:871): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4002610 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=4029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392076861.656:872): pid=4474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392076861.656:873): pid=4474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392076861.656:874): login pid=4474 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=47 >type=USER_START msg=audit(1392076861.656:875): pid=4474 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392076861.656:876): pid=4474 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392076861.676:877): avc: denied { read } for pid=4490 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392076861.676:877): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffdf3133e0 a2=84800 a3=0 items=0 ppid=4488 pid=4490 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=47 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392076861.696:878): pid=4474 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392076861.696:879): pid=4474 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392076966.036:880): avc: denied { execute } for pid=4751 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392076966.036:880): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980330a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=4751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392077266.307:881): avc: denied { execute } for pid=5437 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392077266.307:881): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980334f0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=5437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392077401.707:882): pid=5747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392077401.707:883): pid=5747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392077401.707:884): login pid=5747 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=48 >type=USER_START msg=audit(1392077401.717:885): pid=5747 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392077401.717:886): pid=5747 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392077401.727:887): pid=5747 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392077401.727:888): pid=5747 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392077566.597:889): avc: denied { execute } for pid=6136 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392077566.597:889): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98033940 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=6136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392077866.907:890): avc: denied { execute } for pid=6829 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392077866.907:890): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98033d90 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=6829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392078167.167:891): avc: denied { execute } for pid=7516 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392078167.167:891): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980341e0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=7516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392078301.737:892): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392078301.737:893): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392078301.737:894): login pid=7823 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=49 >type=USER_START msg=audit(1392078301.737:895): pid=7823 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392078301.737:896): pid=7823 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392078301.747:897): pid=7823 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392078301.747:898): pid=7823 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392078467.487:899): avc: denied { execute } for pid=8215 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392078467.487:899): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98034630 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=8215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392078767.787:900): avc: denied { execute } for pid=8910 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392078767.787:900): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98034a80 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=8910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392079068.107:901): avc: denied { execute } for pid=9598 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392079068.107:901): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98034f80 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=9598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392079201.757:902): pid=9899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392079201.757:903): pid=9899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392079201.757:904): login pid=9899 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=50 >type=USER_START msg=audit(1392079201.757:905): pid=9899 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392079201.757:906): pid=9899 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392079201.767:907): pid=9899 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392079201.767:908): pid=9899 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392079368.418:909): avc: denied { execute } for pid=10293 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392079368.418:909): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98035480 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=10293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392079668.708:910): avc: denied { execute } for pid=10989 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392079668.708:910): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98035980 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=10989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392079969.058:911): avc: denied { execute } for pid=11680 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392079969.058:911): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4002a60 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=11680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392080101.778:912): pid=11981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392080101.778:913): pid=11981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392080101.778:914): login pid=11981 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=51 >type=USER_START msg=audit(1392080101.788:915): pid=11981 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392080101.788:916): pid=11981 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392080101.788:917): pid=11981 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392080101.788:918): pid=11981 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392080269.328:919): avc: denied { execute } for pid=12378 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392080269.328:919): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4002f60 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=12378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392080461.798:920): pid=12818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392080461.798:921): pid=12818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392080461.798:922): login pid=12818 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=52 >type=USER_START msg=audit(1392080461.808:923): pid=12818 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392080461.808:924): pid=12818 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392080461.818:925): avc: denied { read } for pid=12834 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392080461.818:925): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe88da170 a2=84800 a3=0 items=0 ppid=12832 pid=12834 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=52 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392080461.838:926): pid=12818 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392080461.838:927): pid=12818 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392080569.598:928): avc: denied { execute } for pid=13107 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392080569.598:928): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa40033b0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=13107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392080869.868:929): avc: denied { execute } for pid=13795 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392080869.868:929): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4003870 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=13795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392081001.848:930): pid=14097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392081001.848:931): pid=14097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392081001.848:932): login pid=14097 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=53 >type=USER_START msg=audit(1392081001.848:933): pid=14097 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392081001.848:934): pid=14097 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392081001.858:935): pid=14097 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392081001.858:936): pid=14097 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392081170.158:937): avc: denied { execute } for pid=14491 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392081170.158:937): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4003d90 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=14491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392081470.429:938): avc: denied { execute } for pid=15185 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392081470.429:938): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4004290 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=15185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392081770.759:939): avc: denied { execute } for pid=15872 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392081770.759:939): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4004790 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=15872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392081901.869:940): pid=16169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392081901.869:941): pid=16169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392081901.869:942): login pid=16169 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=54 >type=USER_START msg=audit(1392081901.869:943): pid=16169 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392081901.879:944): pid=16169 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392081901.879:945): pid=16169 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392081901.879:946): pid=16169 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392082071.049:947): avc: denied { execute } for pid=16571 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392082071.049:947): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4004c90 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=16571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392082371.339:948): avc: denied { execute } for pid=17266 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392082371.339:948): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4005190 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=17266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392082671.639:949): avc: denied { execute } for pid=17950 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392082671.639:949): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4005690 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=17950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392082801.899:950): pid=18247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392082801.899:951): pid=18247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392082801.899:952): login pid=18247 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=55 >type=USER_START msg=audit(1392082801.899:953): pid=18247 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392082801.899:954): pid=18247 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392082801.919:955): pid=18247 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392082801.919:956): pid=18247 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392082971.949:957): avc: denied { execute } for pid=18649 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392082971.949:957): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4005b90 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=18649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392083272.240:958): avc: denied { execute } for pid=19344 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392083272.240:958): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4186f40 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=19344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392083572.510:959): avc: denied { execute } for pid=20031 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392083572.510:959): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98035dd0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=20031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392083701.930:960): pid=20328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392083701.930:961): pid=20328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392083701.930:962): login pid=20328 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=56 >type=USER_START msg=audit(1392083701.930:963): pid=20328 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392083701.940:964): pid=20328 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392083701.940:965): pid=20328 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392083701.940:966): pid=20328 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392083872.760:967): avc: denied { execute } for pid=20730 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392083872.760:967): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98036220 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=20730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392084061.950:968): pid=21158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392084061.950:969): pid=21158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392084061.950:970): login pid=21158 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=57 >type=USER_START msg=audit(1392084061.960:971): pid=21158 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392084061.960:972): pid=21158 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392084061.990:973): avc: denied { read } for pid=21177 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392084061.990:973): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff813a8e0 a2=84800 a3=0 items=0 ppid=21175 pid=21177 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=57 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392084062.010:974): pid=21158 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392084062.010:975): pid=21158 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392084173.030:976): avc: denied { execute } for pid=21450 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392084173.030:976): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98036670 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=21450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392084473.320:977): avc: denied { execute } for pid=22145 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392084473.320:977): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98036ae0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=22145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392084601.020:978): pid=22439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392084601.020:979): pid=22439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392084601.020:980): login pid=22439 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=58 >type=USER_START msg=audit(1392084601.030:981): pid=22439 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392084601.030:982): pid=22439 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392084601.030:983): pid=22439 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392084601.040:984): pid=22439 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392084773.610:985): avc: denied { execute } for pid=22842 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392084773.610:985): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98037060 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=22842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392085073.990:986): avc: denied { execute } for pid=23531 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392085073.990:986): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98037560 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=23531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392085374.271:987): avc: denied { execute } for pid=24225 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392085374.271:987): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98037a60 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=24225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392085501.051:988): pid=24510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392085501.051:989): pid=24510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392085501.051:990): login pid=24510 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=59 >type=USER_START msg=audit(1392085501.051:991): pid=24510 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392085501.051:992): pid=24510 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392085501.061:993): pid=24510 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392085501.061:994): pid=24510 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392085674.561:995): avc: denied { execute } for pid=24914 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392085674.561:995): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98037f60 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=24914 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392085974.851:996): avc: denied { execute } for pid=25608 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392085974.851:996): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98038460 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=25608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392086275.211:997): avc: denied { execute } for pid=26302 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392086275.211:997): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98038960 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=26302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392086401.071:998): pid=26585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392086401.071:999): pid=26585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392086401.071:1000): login pid=26585 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=60 >type=USER_START msg=audit(1392086401.071:1001): pid=26585 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392086401.071:1002): pid=26585 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392086401.081:1003): pid=26585 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392086401.081:1004): pid=26585 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392086575.651:1005): avc: denied { execute } for pid=26994 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392086575.651:1005): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98038e60 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=26994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392086876.101:1006): avc: denied { execute } for pid=27689 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392086876.101:1006): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98039360 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=27689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392087176.411:1007): avc: denied { execute } for pid=28379 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392087176.411:1007): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98039860 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=28379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392087301.091:1008): pid=28660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392087301.091:1009): pid=28660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392087301.091:1010): login pid=28660 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=61 >type=USER_START msg=audit(1392087301.101:1011): pid=28660 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392087301.101:1012): pid=28660 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392087301.101:1013): pid=28660 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392087301.101:1014): pid=28660 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392087476.732:1015): avc: denied { execute } for pid=29078 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392087476.732:1015): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98039d60 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=29078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392087661.112:1016): pid=29491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392087661.112:1017): pid=29491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392087661.112:1018): login pid=29491 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=62 >type=USER_START msg=audit(1392087661.122:1019): pid=29491 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392087661.122:1020): pid=29491 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392087661.142:1021): avc: denied { read } for pid=29511 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392087661.142:1021): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffde001970 a2=84800 a3=0 items=0 ppid=29509 pid=29511 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=62 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392087664.262:1022): pid=29491 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392087664.262:1023): pid=29491 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392087777.042:1024): avc: denied { execute } for pid=29803 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392087777.042:1024): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9803a260 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=29803 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392088077.372:1025): avc: denied { execute } for pid=30491 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392088077.372:1025): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9803a760 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=30491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392088201.272:1026): pid=30774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392088201.272:1027): pid=30774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392088201.272:1028): login pid=30774 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=63 >type=USER_START msg=audit(1392088201.272:1029): pid=30774 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392088201.272:1030): pid=30774 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392088201.282:1031): pid=30774 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392088201.282:1032): pid=30774 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392088377.692:1033): avc: denied { execute } for pid=31183 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392088377.692:1033): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9803ac60 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=31183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392088677.982:1034): avc: denied { execute } for pid=31876 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392088677.982:1034): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9803b160 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=31876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392088978.262:1035): avc: denied { execute } for pid=32569 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392088978.262:1035): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9803b660 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=32569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392089101.292:1036): pid=32846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392089101.292:1037): pid=32846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392089101.292:1038): login pid=32846 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=64 >type=USER_START msg=audit(1392089101.302:1039): pid=32846 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392089101.302:1040): pid=32846 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392089101.302:1041): pid=32846 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392089101.312:1042): pid=32846 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392089278.582:1043): avc: denied { execute } for pid=33268 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392089278.582:1043): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9803bb60 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=33268 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392089578.833:1044): avc: denied { execute } for pid=33956 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392089578.833:1044): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9803c060 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=33956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392089879.113:1045): avc: denied { execute } for pid=34648 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392089879.113:1045): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9803c560 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=34648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392090001.313:1046): pid=34922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392090001.313:1047): pid=34922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392090001.313:1048): login pid=34922 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=65 >type=USER_START msg=audit(1392090001.313:1049): pid=34922 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392090001.313:1050): pid=34922 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392090001.323:1051): pid=34922 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392090001.323:1052): pid=34922 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392090179.383:1053): avc: denied { execute } for pid=35340 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392090179.383:1053): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9803ca60 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=35340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392090479.723:1054): avc: denied { execute } for pid=36037 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392090479.723:1054): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9803cf60 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=36037 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392090779.993:1055): avc: denied { execute } for pid=36731 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392090779.993:1055): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9803d460 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=36731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392090901.333:1056): pid=37004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392090901.333:1057): pid=37004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392090901.333:1058): login pid=37004 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=66 >type=USER_START msg=audit(1392090901.343:1059): pid=37004 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392090901.343:1060): pid=37004 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392090901.353:1061): pid=37004 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392090901.353:1062): pid=37004 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392091080.243:1063): avc: denied { execute } for pid=37423 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392091080.243:1063): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9803d960 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=37423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392091261.363:1064): pid=37834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392091261.363:1065): pid=37834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392091261.363:1066): login pid=37834 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=67 >type=USER_START msg=audit(1392091261.373:1067): pid=37834 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392091261.373:1068): pid=37834 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392091261.393:1069): avc: denied { read } for pid=37853 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392091261.393:1069): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe2a01640 a2=84800 a3=0 items=0 ppid=37851 pid=37853 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=67 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392091261.403:1070): pid=37834 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392091261.413:1071): pid=37834 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392091380.524:1072): avc: denied { execute } for pid=38150 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392091380.524:1072): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9803de60 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=38150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392091680.804:1073): avc: denied { execute } for pid=38836 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392091680.804:1073): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9803e360 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=38836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392091801.424:1074): pid=39114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392091801.424:1075): pid=39114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392091801.424:1076): login pid=39114 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=68 >type=USER_START msg=audit(1392091801.424:1077): pid=39114 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392091801.434:1078): pid=39114 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392091801.444:1079): pid=39114 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392091801.444:1080): pid=39114 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392091981.084:1081): avc: denied { execute } for pid=39532 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392091981.084:1081): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9803e860 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=39532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392092281.364:1082): avc: denied { execute } for pid=40227 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392092281.364:1082): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9803ed60 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=40227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392092581.654:1083): avc: denied { execute } for pid=40916 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392092581.654:1083): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9803f260 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=40916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392092701.454:1084): pid=41189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392092701.454:1085): pid=41189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392092701.454:1086): login pid=41189 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=69 >type=USER_START msg=audit(1392092701.464:1087): pid=41189 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392092701.464:1088): pid=41189 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392092701.474:1089): pid=41189 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392092701.474:1090): pid=41189 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392092881.944:1091): avc: denied { execute } for pid=41613 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392092881.944:1091): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9803f760 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=41613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392093182.204:1092): avc: denied { execute } for pid=42300 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392093182.204:1092): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9803fbb0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=42300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392093482.495:1093): avc: denied { execute } for pid=42987 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392093482.495:1093): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98040000 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=42987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392093601.485:1094): pid=43258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392093601.485:1095): pid=43258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392093601.485:1096): login pid=43258 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=70 >type=USER_START msg=audit(1392093601.485:1097): pid=43258 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392093601.485:1098): pid=43258 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392093601.495:1099): pid=43258 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392093601.495:1100): pid=43258 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392093782.755:1101): avc: denied { execute } for pid=43684 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392093782.755:1101): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98040450 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=43684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392094083.055:1102): avc: denied { execute } for pid=44379 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392094083.055:1102): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980408a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=44379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392094383.315:1103): avc: denied { execute } for pid=45068 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392094383.315:1103): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98040cf0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=45068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392094501.505:1104): pid=45341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392094501.505:1105): pid=45341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392094501.505:1106): login pid=45341 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=71 >type=USER_START msg=audit(1392094501.505:1107): pid=45341 uid=0 auid=0 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392094501.505:1108): pid=45341 uid=0 auid=0 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392094501.515:1109): pid=45341 uid=0 auid=0 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392094501.515:1110): pid=45341 uid=0 auid=0 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392094683.595:1111): avc: denied { execute } for pid=45767 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392094683.595:1111): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98041140 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=45767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392094861.525:1112): pid=46171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392094861.525:1113): pid=46171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392094861.525:1114): login pid=46171 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=72 >type=USER_START msg=audit(1392094861.535:1115): pid=46171 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392094861.535:1116): pid=46171 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392094861.555:1117): avc: denied { read } for pid=46190 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392094861.555:1117): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff7551050 a2=84800 a3=0 items=0 ppid=46188 pid=46190 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=72 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392094861.575:1118): pid=46171 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392094861.575:1119): pid=46171 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392094983.905:1120): avc: denied { execute } for pid=46494 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392094983.905:1120): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98041590 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=46494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392095284.185:1121): avc: denied { execute } for pid=47181 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392095284.185:1121): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98041a50 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=47181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392095401.585:1122): pid=47445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392095401.585:1123): pid=47445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392095401.585:1124): login pid=47445 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=73 >type=USER_START msg=audit(1392095401.585:1125): pid=47445 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392095401.585:1126): pid=47445 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392095401.595:1127): pid=47445 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392095401.595:1128): pid=47445 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392095584.496:1129): avc: denied { execute } for pid=47872 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392095584.496:1129): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4187390 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=47872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392095884.816:1130): avc: denied { execute } for pid=48565 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392095884.816:1130): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa41877e0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=48565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392096185.106:1131): avc: denied { execute } for pid=49252 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392096185.106:1131): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4187c30 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=49252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392096301.606:1132): pid=49523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392096301.606:1133): pid=49523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392096301.606:1134): login pid=49523 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=74 >type=USER_START msg=audit(1392096301.616:1135): pid=49523 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392096301.616:1136): pid=49523 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392096301.626:1137): pid=49523 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392096301.626:1138): pid=49523 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392096485.446:1139): avc: denied { execute } for pid=49951 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392096485.446:1139): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4188080 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=49951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392096785.776:1140): avc: denied { execute } for pid=50639 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392096785.776:1140): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa41884f0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=50639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392097086.046:1141): avc: denied { execute } for pid=51331 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392097086.046:1141): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa41889f0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=51331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392097201.636:1142): pid=51594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392097201.636:1143): pid=51594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392097201.636:1144): login pid=51594 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=75 >type=USER_START msg=audit(1392097201.636:1145): pid=51594 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392097201.636:1146): pid=51594 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392097201.646:1147): pid=51594 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392097201.646:1148): pid=51594 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392097386.336:1149): avc: denied { execute } for pid=52023 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392097386.336:1149): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4188ef0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=52023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392097681.627:1150): avc: denied { read } for pid=52701 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392097681.627:1150): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff0a5a440 a2=84800 a3=0 items=0 ppid=52699 pid=52701 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=72 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1392097686.617:1151): avc: denied { execute } for pid=53112 comm="glusterd" name="tune2fs" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392097686.617:1151): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa41893f0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=53112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392097986.887:1152): avc: denied { execute } for pid=56899 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392097986.887:1152): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa41898f0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=56899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392098101.657:1153): pid=57163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392098101.657:1154): pid=57163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392098101.657:1155): login pid=57163 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=76 >type=USER_START msg=audit(1392098101.667:1156): pid=57163 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392098101.667:1157): pid=57163 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392098101.677:1158): pid=57163 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392098101.677:1159): pid=57163 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392098287.167:1160): avc: denied { execute } for pid=57598 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392098287.167:1160): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa4189df0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=57598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392098461.687:1161): pid=57991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392098461.687:1162): pid=57991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392098461.687:1163): login pid=57991 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=77 >type=USER_START msg=audit(1392098461.687:1164): pid=57991 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392098461.687:1165): pid=57991 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392098461.707:1166): avc: denied { read } for pid=58007 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392098461.707:1166): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffde08fc20 a2=84800 a3=0 items=0 ppid=58005 pid=58007 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=77 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392098461.717:1167): pid=57991 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392098461.717:1168): pid=57991 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392098587.437:1169): avc: denied { execute } for pid=58315 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392098587.437:1169): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa418a2f0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=58315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392098887.727:1170): avc: denied { execute } for pid=59019 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392098887.727:1170): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa418a7f0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=59019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392099001.737:1171): pid=59278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392099001.737:1172): pid=59278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392099001.737:1173): login pid=59278 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=78 >type=USER_START msg=audit(1392099001.747:1174): pid=59278 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392099001.747:1175): pid=59278 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392099001.757:1176): pid=59278 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392099001.757:1177): pid=59278 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392099188.047:1178): avc: denied { execute } for pid=59717 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392099188.047:1178): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa418acf0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=59717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392099488.318:1179): avc: denied { execute } for pid=60402 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392099488.318:1179): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa418b1f0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=60402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392099788.648:1180): avc: denied { execute } for pid=61097 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392099788.648:1180): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa418b6f0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=61097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392099901.778:1181): pid=61358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392099901.778:1182): pid=61358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392099901.778:1183): login pid=61358 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=79 >type=USER_START msg=audit(1392099901.788:1184): pid=61358 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392099901.788:1185): pid=61358 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392099901.798:1186): pid=61358 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392099901.798:1187): pid=61358 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392100089.138:1188): avc: denied { execute } for pid=61787 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392100089.138:1188): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98041fb0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=61787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392100389.588:1189): avc: denied { execute } for pid=62482 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392100389.588:1189): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98042400 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=62482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392100689.958:1190): avc: denied { execute } for pid=63176 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392100689.958:1190): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98042850 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=63176 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392100801.808:1191): pid=63426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392100801.808:1192): pid=63426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392100801.808:1193): login pid=63426 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=80 >type=USER_START msg=audit(1392100801.818:1194): pid=63426 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392100801.818:1195): pid=63426 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392100801.828:1196): pid=63426 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392100801.828:1197): pid=63426 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392100990.288:1198): avc: denied { execute } for pid=63869 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392100990.288:1198): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98042ca0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=63869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392101290.738:1199): avc: denied { execute } for pid=64563 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392101290.738:1199): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980430f0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=64563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392101591.179:1200): avc: denied { execute } for pid=65250 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392101591.179:1200): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980435a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=65250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392101701.839:1201): pid=65501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392101701.839:1202): pid=65501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392101701.839:1203): login pid=65501 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=81 >type=USER_START msg=audit(1392101701.839:1204): pid=65501 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392101701.839:1205): pid=65501 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392101701.849:1206): pid=65501 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392101701.849:1207): pid=65501 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392101891.629:1208): avc: denied { execute } for pid=774 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392101891.629:1208): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98043aa0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392102061.859:1209): pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392102061.859:1210): pid=1201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392102061.859:1211): login pid=1201 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=82 >type=USER_START msg=audit(1392102061.859:1212): pid=1201 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392102061.859:1213): pid=1201 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392102061.879:1214): avc: denied { read } for pid=1217 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392102061.879:1214): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffce006bf0 a2=84800 a3=0 items=0 ppid=1215 pid=1217 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=82 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392102061.899:1215): pid=1201 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392102061.899:1216): pid=1201 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392102192.009:1217): avc: denied { execute } for pid=1552 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392102192.009:1217): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98043fa0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=1552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392102492.299:1218): avc: denied { execute } for pid=2249 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392102492.299:1218): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980444a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=2249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392102601.909:1219): pid=2492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392102601.909:1220): pid=2492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392102601.909:1221): login pid=2492 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=83 >type=USER_START msg=audit(1392102601.919:1222): pid=2492 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392102601.919:1223): pid=2492 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392102601.929:1224): pid=2492 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392102601.929:1225): pid=2492 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392102792.619:1226): avc: denied { execute } for pid=2966 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392102792.619:1226): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980449a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=2966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392103092.889:1227): avc: denied { execute } for pid=3693 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392103092.889:1227): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98044ea0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=3693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392103393.159:1228): avc: denied { execute } for pid=4386 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392103393.159:1228): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980453a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=4386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392103501.940:1229): pid=4627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392103501.940:1230): pid=4627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392103501.940:1231): login pid=4627 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=84 >type=USER_START msg=audit(1392103501.940:1232): pid=4627 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392103501.940:1233): pid=4627 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392103501.950:1234): pid=4627 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392103501.950:1235): pid=4627 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392103693.430:1236): avc: denied { execute } for pid=5078 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392103693.430:1236): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980458a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=5078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392103993.720:1237): avc: denied { execute } for pid=5767 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392103993.720:1237): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98045da0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=5767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392104294.030:1238): avc: denied { execute } for pid=6461 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392104294.030:1238): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980462a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=6461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392104401.960:1239): pid=6703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392104401.960:1240): pid=6703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392104401.960:1241): login pid=6703 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=85 >type=USER_START msg=audit(1392104401.960:1242): pid=6703 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392104401.960:1243): pid=6703 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392104401.970:1244): pid=6703 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392104401.970:1245): pid=6703 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392104594.330:1246): avc: denied { execute } for pid=7154 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392104594.330:1246): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980467a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=7154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392104894.630:1247): avc: denied { execute } for pid=7851 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392104894.630:1247): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98046ca0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=7851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392105194.930:1248): avc: denied { execute } for pid=8537 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392105194.930:1248): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980471a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=8537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392105301.980:1249): pid=8777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392105301.980:1250): pid=8777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392105301.980:1251): login pid=8777 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=86 >type=USER_START msg=audit(1392105301.990:1252): pid=8777 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392105301.990:1253): pid=8777 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392105301.990:1254): pid=8777 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392105302.000:1255): pid=8777 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392105495.240:1256): avc: denied { execute } for pid=9229 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392105495.240:1256): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980476a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=9229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392105661.001:1257): pid=9609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392105661.001:1258): pid=9609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392105661.001:1259): login pid=9609 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=87 >type=USER_START msg=audit(1392105661.011:1260): pid=9609 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392105661.011:1261): pid=9609 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392105661.021:1262): avc: denied { read } for pid=9625 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392105661.021:1262): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3ffff15fcf80 a2=84800 a3=0 items=0 ppid=9623 pid=9625 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=87 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392105661.041:1263): pid=9609 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392105661.041:1264): pid=9609 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392105795.511:1265): avc: denied { execute } for pid=9956 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392105795.511:1265): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98047ba0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=9956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392106095.791:1266): avc: denied { execute } for pid=10644 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392106095.791:1266): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980480a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=10644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392106201.051:1267): pid=10888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392106201.051:1268): pid=10888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392106201.051:1269): login pid=10888 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=88 >type=USER_START msg=audit(1392106201.051:1270): pid=10888 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392106201.051:1271): pid=10888 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392106201.061:1272): pid=10888 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392106201.061:1273): pid=10888 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392106396.081:1274): avc: denied { execute } for pid=11344 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392106396.081:1274): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980485a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=11344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392106696.441:1275): avc: denied { execute } for pid=12040 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392106696.441:1275): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98048aa0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=12040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392106996.781:1276): avc: denied { execute } for pid=12731 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392106996.781:1276): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98048fa0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=12731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392107101.081:1277): pid=12969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392107101.081:1278): pid=12969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392107101.081:1279): login pid=12969 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=89 >type=USER_START msg=audit(1392107101.081:1280): pid=12969 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392107101.081:1281): pid=12969 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392107101.101:1282): pid=12969 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392107101.101:1283): pid=12969 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392107297.101:1284): avc: denied { execute } for pid=13428 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392107297.101:1284): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980494a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=13428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392107597.432:1285): avc: denied { execute } for pid=14118 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392107597.432:1285): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980499a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=14118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392107897.692:1286): avc: denied { execute } for pid=14811 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392107897.692:1286): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98049ea0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=14811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392108001.112:1287): pid=15042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392108001.112:1288): pid=15042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392108001.112:1289): login pid=15042 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=90 >type=USER_START msg=audit(1392108001.122:1290): pid=15042 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392108001.122:1291): pid=15042 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392108001.142:1292): pid=15042 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392108001.142:1293): pid=15042 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392108197.962:1294): avc: denied { execute } for pid=15504 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392108197.962:1294): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9804a3a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=15504 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392108498.222:1295): avc: denied { execute } for pid=16201 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392108498.222:1295): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9804a8a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=16201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392108798.492:1296): avc: denied { execute } for pid=16893 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392108798.492:1296): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9804ada0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=16893 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392108901.152:1297): pid=17128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392108901.152:1298): pid=17128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392108901.152:1299): login pid=17128 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=91 >type=USER_START msg=audit(1392108901.152:1300): pid=17128 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392108901.152:1301): pid=17128 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392108901.162:1302): pid=17128 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392108901.162:1303): pid=17128 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392109098.752:1304): avc: denied { execute } for pid=17590 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392109098.752:1304): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9804b2a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=17590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392109261.172:1305): pid=17960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392109261.172:1306): pid=17960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392109261.172:1307): login pid=17960 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=92 >type=USER_START msg=audit(1392109261.172:1308): pid=17960 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392109261.172:1309): pid=17960 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392109261.192:1310): avc: denied { read } for pid=17976 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392109261.192:1310): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffd4e0cf40 a2=84800 a3=0 items=0 ppid=17974 pid=17976 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=92 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392109261.212:1311): pid=17960 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392109261.212:1312): pid=17960 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392109399.022:1313): avc: denied { execute } for pid=18314 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392109399.022:1313): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9804b7a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=18314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392109699.283:1314): avc: denied { execute } for pid=19004 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392109699.283:1314): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9804bca0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=19004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392109801.213:1315): pid=19238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392109801.213:1316): pid=19238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392109801.213:1317): login pid=19238 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=93 >type=USER_START msg=audit(1392109801.223:1318): pid=19238 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392109801.223:1319): pid=19238 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392109801.223:1320): pid=19238 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392109801.233:1321): pid=19238 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392109999.543:1322): avc: denied { execute } for pid=19702 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392109999.543:1322): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9804c1a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=19702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392110299.813:1323): avc: denied { execute } for pid=20399 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392110299.813:1323): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9804c6a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=20399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392110600.083:1324): avc: denied { execute } for pid=21086 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392110600.083:1324): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9804cba0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=21086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392110701.243:1325): pid=21322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392110701.243:1326): pid=21322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392110701.243:1327): login pid=21322 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=94 >type=USER_START msg=audit(1392110701.243:1328): pid=21322 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392110701.243:1329): pid=21322 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392110701.253:1330): pid=21322 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392110701.253:1331): pid=21322 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392110900.383:1332): avc: denied { execute } for pid=21777 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392110900.383:1332): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9804d0a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=21777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392111200.663:1333): avc: denied { execute } for pid=22471 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392111200.663:1333): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9804d5a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=22471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392111500.933:1334): avc: denied { execute } for pid=23167 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392111500.933:1334): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9804daa0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=23167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392111601.264:1335): pid=23394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392111601.264:1336): pid=23394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392111601.264:1337): login pid=23394 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=95 >type=USER_START msg=audit(1392111601.274:1338): pid=23394 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392111601.274:1339): pid=23394 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392111601.274:1340): pid=23394 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392111601.274:1341): pid=23394 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392111801.194:1342): avc: denied { execute } for pid=23860 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392111801.194:1342): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9804dfa0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=23860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392112101.474:1343): avc: denied { execute } for pid=24556 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392112101.474:1343): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9804e4a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=24556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392112401.754:1344): avc: denied { execute } for pid=25252 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392112401.754:1344): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9804e9a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=25252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392112501.294:1345): pid=25478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392112501.294:1346): pid=25478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392112501.294:1347): login pid=25478 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=96 >type=USER_START msg=audit(1392112501.294:1348): pid=25478 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392112501.294:1349): pid=25478 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392112501.304:1350): pid=25478 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392112501.304:1351): pid=25478 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392112702.064:1352): avc: denied { execute } for pid=25944 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392112702.064:1352): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9804eea0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=25944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392112861.314:1353): pid=26306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392112861.314:1354): pid=26306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392112861.314:1355): login pid=26306 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=97 >type=USER_START msg=audit(1392112861.314:1356): pid=26306 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392112861.314:1357): pid=26306 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392112861.334:1358): avc: denied { read } for pid=26323 comm="logrotate" name="core" dev="dm-1" ino=2514494 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1392112861.334:1358): arch=80000015 syscall=286 success=no exit=-13 a0=ffffffffffffff9c a1=3fffe1e16600 a2=84800 a3=0 items=0 ppid=26321 pid=26323 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=97 tty=(none) comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1392112864.354:1359): pid=26306 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392112864.354:1360): pid=26306 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392113002.324:1361): avc: denied { execute } for pid=26668 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392113002.324:1361): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9804f3a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=26668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=CRYPTO_KEY_USER msg=audit(1392113108.774:1362): pid=26909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=26909 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392113108.774:1363): pid=26909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=26909 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392113108.774:1364): pid=26909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=26909 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392113108.774:1365): pid=26908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=26909 suid=74 rport=63613 laddr=10 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392113108.774:1366): pid=26908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=26909 suid=74 rport=63613 laddr=10 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_AUTH msg=audit(1392113108.884:1367): pid=26908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_ACCT msg=audit(1392113108.884:1368): pid=26908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392113108.884:1369): pid=26908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26909 suid=74 rport=63613 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_AUTH msg=audit(1392113108.884:1370): pid=26908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1392113108.884:1371): pid=26908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=LOGIN msg=audit(1392113108.884:1372): login pid=26908 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=98 >type=USER_ROLE_CHANGE msg=audit(1392113108.924:1373): pid=26908 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_START msg=audit(1392113108.924:1374): pid=26908 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392113108.954:1375): pid=26913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=26913 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392113108.954:1376): pid=26913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=26913 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392113108.954:1377): pid=26913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=26913 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392113108.954:1378): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=blowfish-cbc ksize=128 mac=hmac-sha1 spid=26913 suid=74 rport=63614 laddr=10.10.27.64 lpo exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392113108.954:1379): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=blowfish-cbc ksize=128 mac=hmac-sha1 spid=26913 suid=74 rport=63614 laddr=10.10.27.64 lpo exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_AUTH msg=audit(1392113108.984:1380): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_ACCT msg=audit(1392113108.994:1381): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392113108.994:1382): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26913 suid=74 rport=63614 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_AUTH msg=audit(1392113108.994:1383): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1392113108.994:1384): pid=26912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=LOGIN msg=audit(1392113108.994:1385): login pid=26912 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=99 >type=USER_ROLE_CHANGE msg=audit(1392113109.024:1386): pid=26912 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_START msg=audit(1392113109.034:1387): pid=26912 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1392113109.034:1388): pid=26912 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_START msg=audit(1392113109.034:1389): pid=26912 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392113109.034:1390): pid=26916 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=26916 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392113109.044:1391): pid=26916 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=26916 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392113109.044:1392): pid=26916 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=26916 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRED_REFR msg=audit(1392113109.044:1393): pid=26916 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1392113109.344:1394): pid=26927 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=/dev/pts/1 res=success' >type=USER_START msg=audit(1392113109.344:1395): pid=26927 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=/dev/pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1392113109.344:1396): pid=26927 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=26927 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1392113109.344:1397): pid=26927 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=26927 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1392113109.344:1398): pid=26927 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=26927 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=pts/1 res=success' >type=CRED_REFR msg=audit(1392113109.344:1399): pid=26927 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=AVC msg=audit(1392113302.604:1400): avc: denied { execute } for pid=27449 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392113302.604:1400): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9804f8a0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=27449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392113401.364:1401): pid=27721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392113401.364:1402): pid=27721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392113401.364:1403): login pid=27721 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=100 >type=USER_START msg=audit(1392113401.374:1404): pid=27721 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392113401.374:1405): pid=27721 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392113401.384:1406): pid=27721 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392113401.384:1407): pid=27721 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392113602.874:1408): avc: denied { execute } for pid=28266 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392113602.874:1408): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff9804fcf0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=28266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392113903.165:1409): avc: denied { execute } for pid=29073 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392113903.165:1409): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98050140 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=29073 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=AVC msg=audit(1392114203.565:1410): avc: denied { execute } for pid=29888 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392114203.565:1410): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98050590 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=29888 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392114301.395:1411): pid=30150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392114301.395:1412): pid=30150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392114301.395:1413): login pid=30150 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=101 >type=USER_START msg=audit(1392114301.395:1414): pid=30150 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392114301.395:1415): pid=30150 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392114301.405:1416): pid=30150 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392114301.415:1417): pid=30150 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1392114504.075:1418): avc: denied { execute } for pid=30699 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392114504.075:1418): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff980509e0 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=30699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_CMD msg=audit(1392114695.275:1419): pid=31213 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D332031302E31302E32372E36383A2F73746F72616765202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1392114695.285:1420): pid=31213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392114695.285:1421): pid=31213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392114695.345:1422): pid=31213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392114695.345:1423): pid=31213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392114695.735:1424): pid=31229 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392114695.735:1425): pid=31229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392114695.735:1426): pid=31229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392114695.745:1427): pid=31229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392114695.745:1428): pid=31229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392114695.755:1429): pid=31231 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392114695.755:1430): pid=31231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392114695.755:1431): pid=31231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392114695.795:1432): pid=31231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392114695.795:1433): pid=31231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392114695.805:1434): pid=31256 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392114695.805:1435): pid=31256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392114695.805:1436): pid=31256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392114695.815:1437): pid=31256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392114695.815:1438): pid=31256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392114696.715:1439): pid=31268 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F756D6F756E74202D66202D6C202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1392114696.715:1440): pid=31268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392114696.715:1441): pid=31268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392114696.785:1442): pid=31268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392114696.785:1443): pid=31268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392114696.795:1444): pid=31271 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392114696.795:1445): pid=31271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392114696.795:1446): pid=31271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392114696.795:1447): pid=31271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392114696.795:1448): pid=31271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392114696.805:1449): pid=31273 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392114696.805:1450): pid=31273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392114696.805:1451): pid=31273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392114696.835:1452): pid=31273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392114696.835:1453): pid=31273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392114697.365:1454): pid=31296 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D332031302E31302E32372E36383A2F73746F72616765202F726865762F646174612D63656E7465722F6D6E742F31302E31302E32372E36383A5F73746F72616765 terminal=? res=success' >type=CRED_ACQ msg=audit(1392114697.365:1455): pid=31296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392114697.365:1456): pid=31296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392114697.375:1457): pid=31296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392114697.375:1458): pid=31296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392114697.425:1459): pid=31304 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392114697.425:1460): pid=31304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392114697.425:1461): pid=31304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392114697.425:1462): pid=31304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392114697.425:1463): pid=31304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392114697.435:1464): pid=31306 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392114697.435:1465): pid=31306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392114697.435:1466): pid=31306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392114697.465:1467): pid=31306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392114697.465:1468): pid=31306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392114718.675:1469): pid=31396 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392114718.675:1470): pid=31396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392114718.675:1471): pid=31396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392114718.685:1472): pid=31396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392114718.685:1473): pid=31396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1392114804.645:1474): avc: denied { execute } for pid=31671 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392114804.645:1474): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98050e30 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=31671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_CMD msg=audit(1392115025.835:1475): pid=32337 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392115025.835:1476): pid=32337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392115025.835:1477): pid=32337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392115025.835:1478): pid=32337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392115025.835:1479): pid=32337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392115025.845:1480): pid=32339 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392115025.845:1481): pid=32339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392115025.845:1482): pid=32339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392115025.885:1483): pid=32339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392115025.885:1484): pid=32339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1392115104.945:1485): avc: denied { execute } for pid=32628 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392115104.945:1485): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fff98051280 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=32628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_ACCT msg=audit(1392115201.425:1486): pid=32921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392115201.425:1487): pid=32921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392115201.425:1488): login pid=32921 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=102 >type=USER_START msg=audit(1392115201.425:1489): pid=32921 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392115201.425:1490): pid=32921 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392115201.435:1491): pid=32921 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392115201.445:1492): pid=32921 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1392115259.895:1493): pid=33108 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F756D6F756E74202D66202D6C202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A3634 terminal=? res=success' >type=CRED_ACQ msg=audit(1392115259.895:1494): pid=33108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392115259.895:1495): pid=33108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392115259.905:1496): pid=33108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392115259.905:1497): pid=33108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392115259.915:1498): pid=33114 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392115259.915:1499): pid=33114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392115259.915:1500): pid=33114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392115259.915:1501): pid=33114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392115259.915:1502): pid=33114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392115259.935:1503): pid=33119 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392115259.935:1504): pid=33119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392115259.935:1505): pid=33119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392115259.965:1506): pid=33119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392115259.965:1507): pid=33119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392115260.025:1508): pid=33143 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F756D6F756E74202D66202D6C202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A3634 terminal=? res=success' >type=CRED_ACQ msg=audit(1392115260.025:1509): pid=33143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392115260.025:1510): pid=33143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392115260.025:1511): pid=33143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392115260.025:1512): pid=33143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392115260.055:1513): pid=33145 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392115260.055:1514): pid=33145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392115260.055:1515): pid=33145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392115260.055:1516): pid=33145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392115260.055:1517): pid=33145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392115260.065:1518): pid=33147 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392115260.065:1519): pid=33147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392115260.065:1520): pid=33147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392115260.095:1521): pid=33147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392115260.095:1522): pid=33147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392115265.985:1523): pid=33186 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392115265.985:1524): pid=33186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392115265.985:1525): pid=33186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392115265.985:1526): pid=33186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392115265.985:1527): pid=33186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392115266.005:1528): pid=33188 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392115266.005:1529): pid=33188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392115266.005:1530): pid=33188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392115266.025:1531): pid=33188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392115266.025:1532): pid=33188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392115266.115:1533): pid=33217 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392115266.115:1534): pid=33217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392115266.115:1535): pid=33217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392115266.135:1536): pid=33217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392115266.135:1537): pid=33217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392115283.485:1538): pid=33288 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D7420676C757374657266732031302E31302E32372E36343A3634202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A3634 terminal=? res=success' >type=CRED_ACQ msg=audit(1392115283.485:1539): pid=33288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392115283.485:1540): pid=33288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392115283.535:1541): pid=33288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392115283.535:1542): pid=33288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392115287.295:1543): pid=33360 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392115287.295:1544): pid=33360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392115287.295:1545): pid=33360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392115287.295:1546): pid=33360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392115287.295:1547): pid=33360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392115287.315:1548): pid=33362 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392115287.315:1549): pid=33362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392115287.315:1550): pid=33362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392115287.345:1551): pid=33362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392115287.345:1552): pid=33362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1392115405.395:1553): avc: denied { execute } for pid=33736 comm="glusterd" name="e2label" dev="dm-1" ino=2240351 scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:object_r:fsadm_exec_t:s0 tclass=file >type=SYSCALL msg=audit(1392115405.395:1553): arch=80000015 syscall=11 success=no exit=-13 a0=10011994838 a1=3fffa418bb40 a2=1001177d960 a3=6269 items=0 ppid=2826 pid=33736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="glusterd" exe="/usr/sbin/glusterfsd" subj=system_u:system_r:glusterd_t:s0 key=(null) >type=USER_CMD msg=audit(1392115488.715:1554): pid=34104 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=756D6F756E74202F726865762F646174612D63656E7465722F6D6E742F676C757374657253442F31302E31302E32372E36343A3634 terminal=pts/1 res=success' >type=CRED_ACQ msg=audit(1392115488.715:1555): pid=34104 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_START msg=audit(1392115488.715:1556): pid=34104 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_END msg=audit(1392115488.725:1557): pid=34104 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=CRED_DISP msg=audit(1392115488.725:1558): pid=34104 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_CMD msg=audit(1392115506.805:1559): pid=34129 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=CRED_ACQ msg=audit(1392115506.805:1560): pid=34129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392115506.805:1561): pid=34129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392115506.805:1562): pid=34129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392115506.805:1563): pid=34129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392115506.815:1564): pid=34131 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=CRED_ACQ msg=audit(1392115506.815:1565): pid=34131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392115506.815:1566): pid=34131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392115507.555:1567): pid=34131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392115507.555:1568): pid=34131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392115507.575:1569): pid=34160 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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type=CRED_ACQ msg=audit(1392115507.575:1570): pid=34160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392115507.575:1571): pid=34160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392115507.585:1572): pid=34160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392115507.585:1573): pid=34160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392115507.615:1574): pid=34167 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=CRED_ACQ msg=audit(1392115507.615:1575): pid=34167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392115507.615:1576): pid=34167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392115507.615:1577): pid=34167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392115507.615:1578): pid=34167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392115520.715:1579): pid=34190 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D20646973636F766572796462202D742073656E6474617267657473202D492064656661756C74202D702031302E31302E32372E36383A33323630202D2D6F703D6E6577 terminal=? res=success' >type=CRED_ACQ msg=audit(1392115520.715:1580): pid=34190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392115520.715:1581): pid=34190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1392115520.725:1582): avc: denied { write } for pid=34191 comm="iscsiadm" name="st_config" dev="dm-1" ino=2514858 scontext=system_u:system_r:iscsid_t:s0 tcontext=unconfined_u:object_r:iscsi_var_lib_t:s0 tclass=file >type=SYSCALL msg=audit(1392115520.725:1582): arch=80000015 syscall=5 success=no exit=-13 a0=10010492450 a1=241 a2=1b6 a3=1 items=0 ppid=34190 pid=34191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iscsiadm" exe="/usr/sbin/iscsiadm" subj=system_u:system_r:iscsid_t:s0 key=(null) >type=USER_END msg=audit(1392115520.725:1583): pid=34190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392115520.725:1584): pid=34190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1392115520.735:1585): pid=34194 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=CRED_ACQ msg=audit(1392115520.735:1586): pid=34194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1392115520.735:1587): pid=34194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1392115520.745:1588): pid=34194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1392115520.745:1589): pid=34194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1392116101.456:1590): pid=34887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1392116101.456:1591): pid=34887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1392116101.456:1592): login pid=34887 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=103 >type=USER_START msg=audit(1392116101.456:1593): pid=34887 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1392116101.456:1594): pid=34887 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1392116101.466:1595): pid=34887 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1392116101.476:1596): pid=34887 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1392116260.666:1597): pid=35068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=35068 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392116260.666:1598): pid=35068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=35068 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392116260.666:1599): pid=35068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=35068 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392116260.666:1600): pid=35067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 spid=35068 suid=74 rport=63772 laddr=10.10.27.64 lport exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1392116260.666:1601): pid=35067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 spid=35068 suid=74 rport=63772 laddr=10.10.27.64 lport exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_AUTH msg=audit(1392116261.006:1602): pid=35067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_ACCT msg=audit(1392116261.006:1603): pid=35067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392116261.006:1604): pid=35067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=35068 suid=74 rport=63772 laddr=10.10.27.64 lport=22 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=USER_AUTH msg=audit(1392116261.006:1605): pid=35067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1392116261.006:1606): pid=35067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=LOGIN msg=audit(1392116261.006:1607): login pid=35067 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=104 >type=USER_ROLE_CHANGE msg=audit(1392116261.046:1608): pid=35067 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_START msg=audit(1392116261.056:1609): pid=35067 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1392116261.056:1610): pid=35067 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=USER_START msg=audit(1392116261.056:1611): pid=35067 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1392116261.056:1612): pid=35071 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=5b:69:68:3a:d6:64:5a:2b:6b:96:b1:26:0c:49:57:80 direction=? spid=35071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392116261.056:1613): pid=35071 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=1d:3e:9d:50:4d:f0:de:67:44:e7:76:f4:b2:a8:18:68 direction=? spid=35071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1392116261.056:1614): pid=35071 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=e6:b9:13:01:84:ed:db:aa:f5:64:30:d4:86:e9:ec:1b direction=? spid=35071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=10.10.27.153 terminal=? res=success' >type=CRED_REFR msg=audit(1392116261.056:1615): pid=35071 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=10.10.27.153 addr=10.10.27.153 terminal=ssh res=success'
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=861768">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 1057761
: 861768 |
861769