Attachment 888383 Details for Bug 1083566 – the audit.log when running openstack-service restart

the audit.log when running openstack-service restart

audit02.log (text/x-log), 47.52 KB, created by Yogev Rabl on 2014-04-22 08:33:51 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Yogev Rabl

Created: 2014-04-22 08:33:51 UTC

Size: 47.52 KB

patch

obsolete

>type=DAEMON_ROTATE msg=audit(1398155493.758:4491): auditd sending auid=0 pid=6609 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
>type=SERVICE_STOP msg=audit(1398155503.242:1028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1398155503.245:1029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1398155503.341:1030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-scheduler" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1398155503.343:1031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-scheduler" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1398155503.419:1032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-volume" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1398155503.420:1033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-cinder-volume" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1398155503.522:1034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-glance-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1398155503.524:1035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-glance-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1398155503.615:1036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-glance-registry" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1398155503.618:1037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-glance-registry" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1398155503.676:1038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-keystone" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1398155504.112:1039): pid=6749 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D6F206E616D652063696E6465722D766F6C756D6573 terminal=? res=success'
>type=CRED_ACQ msg=audit(1398155504.112:1040): pid=6749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1398155504.114:1041): pid=6749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398155504.213:1042): pid=6749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398155504.213:1043): pid=6749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1398155504.228:1044): pid=6753 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320707673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A652C66726565202D2D736570617261746F72203A202D2D6E6F737566666978 terminal=? res=success'
>type=CRED_ACQ msg=audit(1398155504.230:1045): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1398155504.230:1046): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398155504.316:1047): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398155504.316:1048): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1398155504.332:1049): pid=6761 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success'
>type=CRED_ACQ msg=audit(1398155504.332:1050): pid=6761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1398155504.332:1051): pid=6761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398155504.403:1052): pid=6761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398155504.403:1053): pid=6761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1398155504.641:1054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-keystone" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1398155504.680:1055): avc:  denied  { signal } for  pid=6299 comm="nova-api" scontext=system_u:system_r:nova_api_t:s0 tcontext=system_u:system_r:nova_api_t:s0 tclass=process
>type=SYSCALL msg=audit(1398155504.680:1055): arch=c000003e syscall=62 success=no exit=-13 a0=1955 a1=f a2=0 a3=7fffd1cca670 items=0 ppid=1 pid=6299 auid=4294967295 uid=162 gid=162 euid=162 suid=162 fsuid=162 egid=162 sgid=162 fsgid=162 tty=(none) ses=4294967295 comm="nova-api" exe="/usr/bin/python2.7" subj=system_u:system_r:nova_api_t:s0 key=(null)
>type=SERVICE_STOP msg=audit(1398155504.806:1056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
>type=USER_CMD msg=audit(1398155504.807:1057): pid=6784 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success'
>type=CRED_ACQ msg=audit(1398155504.807:1058): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1398155504.807:1059): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1398155504.809:1060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398155504.880:1061): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398155504.880:1062): pid=6784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1398155504.962:1063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-cert" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1398155504.964:1064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-cert" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1398155505.070:1065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-compute" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1398155505.072:1066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-compute" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1398155505.199:1067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-conductor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1398155505.200:1068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-conductor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1398155505.350:1069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-consoleauth" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1398155505.352:1070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-consoleauth" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1398155505.389:1071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1398155505.549:1072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-novncproxy" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1398155505.550:1073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-novncproxy" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1398155505.553:1074): avc:  denied  { read } for  pid=6889 comm="sh" name="passwd" dev="sda5" ino=25035828 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1398155505.553:1074): arch=c000003e syscall=2 success=no exit=-13 a0=7f27430e0d8a a1=80000 a2=1b6 a3=0 items=0 ppid=6872 pid=6889 auid=4294967295 uid=162 gid=162 euid=162 suid=162 fsuid=162 egid=162 sgid=162 fsgid=162 tty=(none) ses=4294967295 comm="sh" exe="/usr/bin/bash" subj=system_u:system_r:nova_network_t:s0 key=(null)
>type=AVC msg=audit(1398155505.583:1075): avc:  denied  { read } for  pid=6899 comm="sh" name="passwd" dev="sda5" ino=25035828 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1398155505.583:1075): arch=c000003e syscall=2 success=no exit=-13 a0=7ffd724a9d8a a1=80000 a2=1b6 a3=0 items=0 ppid=6872 pid=6899 auid=4294967295 uid=162 gid=162 euid=162 suid=162 fsuid=162 egid=162 sgid=162 fsgid=162 tty=(none) ses=4294967295 comm="sh" exe="/usr/bin/bash" subj=system_u:system_r:nova_network_t:s0 key=(null)
>type=SERVICE_STOP msg=audit(1398155505.860:1076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-scheduler" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1398155505.862:1077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-scheduler" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1398155506.148:1078): avc:  denied  { read } for  pid=6925 comm="sh" name="passwd" dev="sda5" ino=25035828 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1398155506.148:1078): arch=c000003e syscall=2 success=no exit=-13 a0=7fec29c99d8a a1=80000 a2=1b6 a3=0 items=0 ppid=6872 pid=6925 auid=4294967295 uid=162 gid=162 euid=162 suid=162 fsuid=162 egid=162 sgid=162 fsgid=162 tty=(none) ses=4294967295 comm="sh" exe="/usr/bin/bash" subj=system_u:system_r:nova_network_t:s0 key=(null)
>type=AVC msg=audit(1398155506.204:1079): avc:  denied  { read } for  pid=6927 comm="sh" name="passwd" dev="sda5" ino=25035828 scontext=system_u:system_r:nova_scheduler_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1398155506.204:1079): arch=c000003e syscall=2 success=no exit=-13 a0=7f98f7aacd8a a1=80000 a2=1b6 a3=0 items=0 ppid=6919 pid=6927 auid=4294967295 uid=162 gid=162 euid=162 suid=162 fsuid=162 egid=162 sgid=162 fsgid=162 tty=(none) ses=4294967295 comm="sh" exe="/usr/bin/bash" subj=system_u:system_r:nova_scheduler_t:s0 key=(null)
>type=AVC msg=audit(1398155506.250:1080): avc:  denied  { read } for  pid=6929 comm="sh" name="passwd" dev="sda5" ino=25035828 scontext=system_u:system_r:nova_scheduler_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1398155506.250:1080): arch=c000003e syscall=2 success=no exit=-13 a0=7fbfcc672d8a a1=80000 a2=1b6 a3=0 items=0 ppid=6919 pid=6929 auid=4294967295 uid=162 gid=162 euid=162 suid=162 fsuid=162 egid=162 sgid=162 fsgid=162 tty=(none) ses=4294967295 comm="sh" exe="/usr/bin/bash" subj=system_u:system_r:nova_scheduler_t:s0 key=(null)
>type=USER_CMD msg=audit(1398155507.036:1081): pid=6947 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E662069707461626C65732D73617665202D63 terminal=? res=success'
>type=CRED_ACQ msg=audit(1398155507.036:1082): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1398155507.037:1083): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1398155507.175:1084): avc:  denied  { read } for  pid=6950 comm="sh" name="passwd" dev="sda5" ino=25035828 scontext=system_u:system_r:nova_scheduler_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1398155507.175:1084): arch=c000003e syscall=2 success=no exit=-13 a0=7f8bea7e6d8a a1=80000 a2=1b6 a3=0 items=0 ppid=6919 pid=6950 auid=4294967295 uid=162 gid=162 euid=162 suid=162 fsuid=162 egid=162 sgid=162 fsgid=162 tty=(none) ses=4294967295 comm="sh" exe="/usr/bin/bash" subj=system_u:system_r:nova_scheduler_t:s0 key=(null)
>type=USER_END msg=audit(1398155507.199:1085): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398155507.199:1086): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1398155507.240:1087): pid=6953 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E662069707461626C65732D726573746F7265202D63 terminal=? res=success'
>type=CRED_ACQ msg=audit(1398155507.240:1088): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1398155507.241:1089): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1398155507.358:1090): table=mangle family=2 entries=16
>type=SYSCALL msg=audit(1398155507.358:1090): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=21190c0 items=0 ppid=6954 pid=6957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=NETFILTER_CFG msg=audit(1398155507.359:1091): table=nat family=2 entries=57
>type=SYSCALL msg=audit(1398155507.359:1091): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=211d820 items=0 ppid=6954 pid=6957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=NETFILTER_CFG msg=audit(1398155507.361:1092): table=filter family=2 entries=84
>type=SYSCALL msg=audit(1398155507.361:1092): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=21237a0 items=0 ppid=6954 pid=6957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=USER_END msg=audit(1398155507.370:1093): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398155507.370:1094): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:nova_api_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1398155507.427:1095): avc:  denied  { read } for  pid=6960 comm="sudo" name="passwd" dev="sda5" ino=25035828 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1398155507.427:1095): arch=c000003e syscall=2 success=no exit=-13 a0=7f6b7a354d8a a1=80000 a2=1b6 a3=0 items=0 ppid=6872 pid=6960 auid=4294967295 uid=162 gid=162 euid=0 suid=0 fsuid=0 egid=162 sgid=162 fsgid=162 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:nova_network_t:s0 key=(null)
>type=AVC msg=audit(1398155507.427:1096): avc:  denied  { read } for  pid=6960 comm="sudo" name="utmp" dev="tmpfs" ino=18497 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1398155507.427:1096): arch=c000003e syscall=2 success=no exit=-13 a0=7f6b8129ef04 a1=80000 a2=7f6b8129eef5 a3=7f6b827f9f50 items=0 ppid=6872 pid=6960 auid=4294967295 uid=162 gid=162 euid=0 suid=0 fsuid=0 egid=162 sgid=162 fsgid=162 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:nova_network_t:s0 key=(null)
>type=USER_CMD msg=audit(1398155507.869:1097): pid=6992 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E6620627263746C20616464696620627231303020656E703273306631 terminal=? res=success'
>type=CRED_ACQ msg=audit(1398155507.870:1098): pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1398155507.872:1099): pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398155507.933:1100): pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398155507.933:1101): pid=6992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1398155507.953:1102): pid=6995 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E66206970206C696E6B2073657420656E703273306631207570 terminal=? res=success'
>type=CRED_ACQ msg=audit(1398155507.954:1103): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1398155507.954:1104): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398155508.015:1105): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398155508.016:1106): pid=6995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=AVC msg=audit(1398155508.148:1107): avc:  denied  { read } for  pid=7000 comm="sudo" name="passwd" dev="sda5" ino=25035828 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1398155508.148:1107): arch=c000003e syscall=2 success=no exit=-13 a0=7f792625cd8a a1=80000 a2=1b6 a3=0 items=0 ppid=6872 pid=7000 auid=4294967295 uid=162 gid=162 euid=0 suid=0 fsuid=0 egid=162 sgid=162 fsgid=162 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:nova_network_t:s0 key=(null)
>type=AVC msg=audit(1398155508.148:1108): avc:  denied  { read } for  pid=7000 comm="sudo" name="utmp" dev="tmpfs" ino=18497 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1398155508.148:1108): arch=c000003e syscall=2 success=no exit=-13 a0=7f792d1a6f04 a1=80000 a2=7f792d1a6ef5 a3=7f792f1c2f50 items=0 ppid=6872 pid=7000 auid=4294967295 uid=162 gid=162 euid=0 suid=0 fsuid=0 egid=162 sgid=162 fsgid=162 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:nova_network_t:s0 key=(null)
>type=AVC msg=audit(1398155509.627:1109): avc:  denied  { read } for  pid=7003 comm="sudo" name="passwd" dev="sda5" ino=25035828 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1398155509.627:1109): arch=c000003e syscall=2 success=no exit=-13 a0=7f076bcced8a a1=80000 a2=1b6 a3=0 items=0 ppid=6872 pid=7003 auid=4294967295 uid=162 gid=162 euid=0 suid=0 fsuid=0 egid=162 sgid=162 fsgid=162 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:nova_network_t:s0 key=(null)
>type=AVC msg=audit(1398155509.627:1110): avc:  denied  { read } for  pid=7003 comm="sudo" name="utmp" dev="tmpfs" ino=18497 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1398155509.627:1110): arch=c000003e syscall=2 success=no exit=-13 a0=7f0772c18f04 a1=80000 a2=7f0772c18ef5 a3=7f0774ca4f50 items=0 ppid=6872 pid=7003 auid=4294967295 uid=162 gid=162 euid=0 suid=0 fsuid=0 egid=162 sgid=162 fsgid=162 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:nova_network_t:s0 key=(null)
>type=AVC msg=audit(1398155510.216:1111): avc:  denied  { read } for  pid=7004 comm="sudo" name="passwd" dev="sda5" ino=25035828 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1398155510.216:1111): arch=c000003e syscall=2 success=no exit=-13 a0=7f3bb46e7d8a a1=80000 a2=1b6 a3=0 items=0 ppid=6872 pid=7004 auid=4294967295 uid=162 gid=162 euid=0 suid=0 fsuid=0 egid=162 sgid=162 fsgid=162 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:nova_network_t:s0 key=(null)
>type=AVC msg=audit(1398155510.216:1112): avc:  denied  { read } for  pid=7004 comm="sudo" name="utmp" dev="tmpfs" ino=18497 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1398155510.216:1112): arch=c000003e syscall=2 success=no exit=-13 a0=7f3bbb631f04 a1=80000 a2=7f3bbb631ef5 a3=7f3bbe339f50 items=0 ppid=6872 pid=7004 auid=4294967295 uid=162 gid=162 euid=0 suid=0 fsuid=0 egid=162 sgid=162 fsgid=162 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:nova_network_t:s0 key=(null)
>type=AVC msg=audit(1398155510.905:1113): avc:  denied  { read } for  pid=7005 comm="sudo" name="passwd" dev="sda5" ino=25035828 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=SYSCALL msg=audit(1398155510.905:1113): arch=c000003e syscall=2 success=no exit=-13 a0=7f7b6df7bd8a a1=80000 a2=1b6 a3=0 items=0 ppid=6872 pid=7005 auid=4294967295 uid=162 gid=162 euid=0 suid=0 fsuid=0 egid=162 sgid=162 fsgid=162 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:nova_network_t:s0 key=(null)
>type=AVC msg=audit(1398155510.905:1114): avc:  denied  { read } for  pid=7005 comm="sudo" name="utmp" dev="tmpfs" ino=18497 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:initrc_var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1398155510.905:1114): arch=c000003e syscall=2 success=no exit=-13 a0=7f7b74ec5f04 a1=80000 a2=7f7b74ec5ef5 a3=7f7b770f4f50 items=0 ppid=6872 pid=7005 auid=4294967295 uid=162 gid=162 euid=0 suid=0 fsuid=0 egid=162 sgid=162 fsgid=162 tty=(none) ses=4294967295 comm="sudo" exe="/usr/bin/sudo" subj=system_u:system_r:nova_network_t:s0 key=(null)
>type=USER_CMD msg=audit(1398155510.961:1115): pid=7006 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E662069707461626C65732D73617665202D63 terminal=? res=success'
>type=CRED_ACQ msg=audit(1398155510.962:1116): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1398155510.962:1117): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1398155510.986:1118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openstack-nova-network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398155511.027:1119): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398155511.028:1120): pid=7006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1398155511.049:1121): pid=7009 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E662069707461626C65732D726573746F7265202D63 terminal=? res=success'
>type=CRED_ACQ msg=audit(1398155511.050:1122): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1398155511.050:1123): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1398155511.104:1124): table=mangle family=2 entries=16
>type=SYSCALL msg=audit(1398155511.104:1124): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=f560f0 items=0 ppid=7010 pid=7011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398155511.105:1125): table=nat family=2 entries=57
>type=SYSCALL msg=audit(1398155511.105:1125): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=f5a580 items=0 ppid=7010 pid=7011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398155511.107:1126): table=filter family=2 entries=84
>type=SYSCALL msg=audit(1398155511.107:1126): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=f5fa60 items=0 ppid=7010 pid=7011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1398155511.115:1127): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398155511.115:1128): pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1398155511.229:1129): pid=7012 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E662069707461626C65732D73617665202D63 terminal=? res=success'
>type=CRED_ACQ msg=audit(1398155511.229:1130): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1398155511.230:1131): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398155511.291:1132): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398155511.291:1133): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1398155511.312:1134): pid=7015 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E662069707461626C65732D726573746F7265202D63 terminal=? res=success'
>type=CRED_ACQ msg=audit(1398155511.313:1135): pid=7015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1398155511.313:1136): pid=7015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1398155511.366:1137): table=mangle family=2 entries=16
>type=SYSCALL msg=audit(1398155511.366:1137): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=9580f0 items=0 ppid=7016 pid=7017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398155511.367:1138): table=nat family=2 entries=57
>type=SYSCALL msg=audit(1398155511.367:1138): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=95c580 items=0 ppid=7016 pid=7017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398155511.370:1139): table=filter family=2 entries=73
>type=SYSCALL msg=audit(1398155511.370:1139): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=961df0 items=0 ppid=7016 pid=7017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1398155511.377:1140): pid=7015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398155511.377:1141): pid=7015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1398155511.399:1142): pid=7018 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E662069707461626C65732D73617665202D63 terminal=? res=success'
>type=CRED_ACQ msg=audit(1398155511.400:1143): pid=7018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1398155511.400:1144): pid=7018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398155511.462:1145): pid=7018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398155511.462:1146): pid=7018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1398155511.483:1147): pid=7021 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E662069707461626C65732D726573746F7265202D63 terminal=? res=success'
>type=CRED_ACQ msg=audit(1398155511.484:1148): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1398155511.484:1149): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1398155511.537:1150): table=mangle family=2 entries=16
>type=SYSCALL msg=audit(1398155511.537:1150): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1d030f0 items=0 ppid=7022 pid=7023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398155511.538:1151): table=nat family=2 entries=57
>type=SYSCALL msg=audit(1398155511.538:1151): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1d07580 items=0 ppid=7022 pid=7023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)
>type=NETFILTER_CFG msg=audit(1398155511.542:1152): table=filter family=2 entries=82
>type=SYSCALL msg=audit(1398155511.542:1152): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1d0d5f0 items=0 ppid=7022 pid=7023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1398155511.549:1153): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398155511.549:1154): pid=7021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_ACCT msg=audit(1398155521.863:1155): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1398155521.863:1156): pid=7044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1398155521.865:1157): pid=7044 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=403 res=1
>type=USER_START msg=audit(1398155521.879:1158): pid=7044 uid=0 auid=0 ses=403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_REFR msg=audit(1398155521.880:1159): pid=7044 uid=0 auid=0 ses=403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1398155522.496:1160): pid=7044 uid=0 auid=0 ses=403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1398155522.497:1161): pid=7044 uid=0 auid=0 ses=403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_CMD msg=audit(1398155555.960:1162): pid=7069 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success'
>type=CRED_ACQ msg=audit(1398155555.961:1163): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1398155555.962:1164): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1398155556.038:1165): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=CRED_DISP msg=audit(1398155556.038:1166): pid=7069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_ACCT msg=audit(1398155581.506:1167): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_ACQ msg=audit(1398155581.506:1168): pid=7088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=LOGIN msg=audit(1398155581.507:1169): pid=7088 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=404 res=1
>type=USER_START msg=audit(1398155581.517:1170): pid=7088 uid=0 auid=0 ses=404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_REFR msg=audit(1398155581.517:1171): pid=7088 uid=0 auid=0 ses=404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRED_DISP msg=audit(1398155582.129:1172): pid=7088 uid=0 auid=0 ses=404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=USER_END msg=audit(1398155582.131:1173): pid=7088 uid=0 auid=0 ses=404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
>type=CRYPTO_KEY_USER msg=audit(1398155594.258:1174): pid=7103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=9b:0d:90:c9:e3:6d:14:37:94:65:f3:b7:37:89:b5:2a direction=? spid=7103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.35.2.229 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1398155594.258:1175): pid=7103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=30:5d:8c:58:19:47:d6:d4:58:f2:07:6d:4b:2d:14:02 direction=? spid=7103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.35.2.229 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398155594.260:1176): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7103 suid=74 rport=36114 laddr=10. exe="/usr/sbin/sshd" hostname=? addr=10.35.2.229 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1398155594.260:1177): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=7103 suid=74 rport=36114 laddr=10. exe="/usr/sbin/sshd" hostname=? addr=10.35.2.229 terminal=? res=success'
>type=USER_AUTH msg=audit(1398155594.317:1178): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.2.229 terminal=ssh res=failed'
>type=USER_AUTH msg=audit(1398155594.318:1179): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.2.229 terminal=ssh res=failed'
>type=USER_AUTH msg=audit(1398155595.947:1180): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=dhcp-2-229.tlv.redhat.com addr=10.35.2.229 terminal=ssh res=success'
>type=USER_ACCT msg=audit(1398155595.951:1181): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=dhcp-2-229.tlv.redhat.com addr=10.35.2.229 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398155595.952:1182): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7103 suid=74 rport=36114 laddr=10.35.160.113 lport=22  exe="/usr/sbin/sshd" hostname=? addr=10.35.2.229 terminal=? res=success'
>type=USER_AUTH msg=audit(1398155595.953:1183): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=10.35.2.229 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1398155595.954:1184): pid=7102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=dhcp-2-229.tlv.redhat.com addr=10.35.2.229 terminal=ssh res=success'
>type=LOGIN msg=audit(1398155595.954:1185): pid=7102 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 old-ses=4294967295 ses=405 res=1
>type=USER_ROLE_CHANGE msg=audit(1398155596.033:1186): pid=7102 uid=0 auid=0 ses=405 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=dhcp-2-229.tlv.redhat.com addr=10.35.2.229 terminal=ssh res=success'
>type=USER_START msg=audit(1398155596.050:1187): pid=7102 uid=0 auid=0 ses=405 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=dhcp-2-229.tlv.redhat.com addr=10.35.2.229 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1398155596.054:1188): pid=7102 uid=0 auid=0 ses=405 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=dhcp-2-229.tlv.redhat.com addr=10.35.2.229 terminal=ssh res=success'
>type=USER_START msg=audit(1398155596.055:1189): pid=7102 uid=0 auid=0 ses=405 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=dhcp-2-229.tlv.redhat.com addr=10.35.2.229 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1398155596.057:1190): pid=7106 uid=0 auid=0 ses=405 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=9b:0d:90:c9:e3:6d:14:37:94:65:f3:b7:37:89:b5:2a direction=? spid=7106 suid=0  exe="/usr/sbin/sshd" hostname=? addr=10.35.2.229 terminal=? res=success'

Actions: View

Attachments on bug 1083566: 888379 | 888383 | 889074