Login
[x]
Log in using an account from:
Fedora Account System
Red Hat Associate
Red Hat Customer
Or login using a Red Hat Bugzilla account
Forgot Password
Login:
Hide Forgot
Create an Account
Red Hat Bugzilla – Attachment 901490 Details for
Bug 1102881
virDomainBlockCommit fails with live snapshots on oVirt block storage
[?]
New
Simple Search
Advanced Search
My Links
Browse
Requests
Reports
Current State
Search
Tabular reports
Graphical reports
Duplicates
Other Reports
User Changes
Plotly Reports
Bug Status
Bug Severity
Non-Defaults
|
Product Dashboard
Help
Page Help!
Bug Writing Guidelines
What's new
Browser Support Policy
5.0.4.rh83 Release notes
FAQ
Guides index
User guide
Web Services
Contact
Legal
This site requires JavaScript to be enabled to function correctly, please enable it.
audit.log with selinux enforcing
audit.log (text/plain), 2.31 MB, created by
Adam Litke
on 2014-06-02 15:56:53 UTC
(
hide
)
Description:
audit.log with selinux enforcing
Filename:
MIME Type:
Creator:
Adam Litke
Created:
2014-06-02 15:56:53 UTC
Size:
2.31 MB
patch
obsolete
>type=USER_START msg=audit(1401435730.337:10189): pid=24237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401435730.372:10190): pid=24237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401436030.695:10191): pid=24457 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401436030.695:10192): pid=24457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401436030.730:10193): pid=24457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401436030.739:10194): pid=24459 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401436030.739:10195): pid=24459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401436030.774:10196): pid=24459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401436331.115:10197): pid=24657 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401436331.116:10198): pid=24657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401436331.151:10199): pid=24657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401436331.160:10200): pid=24659 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401436331.160:10201): pid=24659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401436331.194:10202): pid=24659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401436501.061:10203): pid=24767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401436501.061:10204): pid=24767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401436501.061:10205): pid=24767 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=192 res=1 >type=USER_START msg=audit(1401436501.068:10206): pid=24767 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401436501.068:10207): pid=24767 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401436501.110:10208): pid=24767 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401436501.111:10209): pid=24767 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401436631.548:10210): pid=24854 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401436631.549:10211): pid=24854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401436631.584:10212): pid=24854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401436631.593:10213): pid=24856 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401436631.594:10214): pid=24856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401436631.627:10215): pid=24856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401436861.118:10216): pid=25005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401436861.118:10217): pid=25005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401436861.118:10218): pid=25005 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=193 res=1 >type=USER_START msg=audit(1401436861.123:10219): pid=25005 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401436861.124:10220): pid=25005 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401436861.137:10221): avc: denied { read } for pid=25027 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401436861.137:10221): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff6206c600 a2=90800 a3=0 items=0 ppid=25025 pid=25027 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=193 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401436861.185:10222): pid=25005 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401436861.186:10223): pid=25005 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401436931.965:10224): pid=25078 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401436931.965:10225): pid=25078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401436932.031:10226): pid=25078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401436932.039:10227): pid=25080 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401436932.039:10228): pid=25080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401436932.074:10229): pid=25080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401437232.480:10230): pid=25294 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401437232.481:10231): pid=25294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401437232.519:10232): pid=25294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401437232.527:10233): pid=25296 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401437232.528:10234): pid=25296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401437232.563:10235): pid=25296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401437401.192:10236): pid=25404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401437401.192:10237): pid=25404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401437401.193:10238): pid=25404 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=194 res=1 >type=USER_START msg=audit(1401437401.199:10239): pid=25404 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401437401.200:10240): pid=25404 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401437401.222:10241): pid=25404 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401437401.223:10242): pid=25404 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401437532.911:10243): pid=25493 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401437532.912:10244): pid=25493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401437532.948:10245): pid=25493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401437532.957:10246): pid=25495 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401437532.957:10247): pid=25495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401437532.992:10248): pid=25495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401437833.328:10249): pid=25685 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401437833.328:10250): pid=25685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401437833.363:10251): pid=25685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401437833.371:10252): pid=25687 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401437833.372:10253): pid=25687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401437833.406:10254): pid=25687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401438133.719:10255): pid=25871 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401438133.719:10256): pid=25871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401438133.754:10257): pid=25871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401438133.762:10258): pid=25873 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401438133.762:10259): pid=25873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401438133.796:10260): pid=25873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401438301.229:10261): pid=25980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401438301.229:10262): pid=25980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401438301.229:10263): pid=25980 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=195 res=1 >type=USER_START msg=audit(1401438301.235:10264): pid=25980 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401438301.235:10265): pid=25980 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401438301.280:10266): pid=25980 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401438301.281:10267): pid=25980 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401438434.242:10268): pid=26072 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401438434.242:10269): pid=26072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401438434.277:10270): pid=26072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401438434.286:10271): pid=26074 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401438434.286:10272): pid=26074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401438434.319:10273): pid=26074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401438734.652:10274): pid=26291 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401438734.653:10275): pid=26291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401438734.691:10276): pid=26291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401438734.699:10277): pid=26293 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401438734.699:10278): pid=26293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401438734.732:10279): pid=26293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401439035.059:10280): pid=26483 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401439035.060:10281): pid=26483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401439035.094:10282): pid=26483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401439035.102:10283): pid=26485 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401439035.103:10284): pid=26485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401439035.136:10285): pid=26485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401439201.289:10286): pid=26590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401439201.289:10287): pid=26590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401439201.289:10288): pid=26590 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=196 res=1 >type=USER_START msg=audit(1401439201.296:10289): pid=26590 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401439201.296:10290): pid=26590 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401439204.003:10291): pid=26590 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401439204.003:10292): pid=26590 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401439335.458:10293): pid=26677 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401439335.458:10294): pid=26677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401439335.495:10295): pid=26677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401439335.503:10296): pid=26679 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401439335.503:10297): pid=26679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401439335.538:10298): pid=26679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401439635.849:10299): pid=26870 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401439635.849:10300): pid=26870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401439635.884:10301): pid=26870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401439635.893:10302): pid=26872 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401439635.893:10303): pid=26872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401439635.927:10304): pid=26872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401439936.240:10305): pid=27100 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401439936.241:10306): pid=27100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401439936.278:10307): pid=27100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401439936.287:10308): pid=27102 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401439936.288:10309): pid=27102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401439936.322:10310): pid=27102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401440101.012:10311): pid=27207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401440101.012:10312): pid=27207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401440101.012:10313): pid=27207 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=197 res=1 >type=USER_START msg=audit(1401440101.018:10314): pid=27207 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401440101.019:10315): pid=27207 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401440101.063:10316): pid=27207 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401440101.064:10317): pid=27207 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401440236.650:10318): pid=27298 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401440236.651:10319): pid=27298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401440236.688:10320): pid=27298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401440236.696:10321): pid=27300 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401440236.697:10322): pid=27300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401440236.731:10323): pid=27300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401440461.069:10324): pid=27435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401440461.069:10325): pid=27435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401440461.069:10326): pid=27435 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=198 res=1 >type=USER_START msg=audit(1401440461.075:10327): pid=27435 uid=0 auid=0 ses=198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401440461.075:10328): pid=27435 uid=0 auid=0 ses=198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401440461.089:10329): avc: denied { read } for pid=27457 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401440461.089:10329): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff7387ba40 a2=90800 a3=0 items=0 ppid=27455 pid=27457 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=198 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401440461.126:10330): pid=27435 uid=0 auid=0 ses=198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401440461.127:10331): pid=27435 uid=0 auid=0 ses=198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401440537.180:10332): pid=27513 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401440537.181:10333): pid=27513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401440537.216:10334): pid=27513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401440537.225:10335): pid=27515 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401440537.225:10336): pid=27515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401440537.258:10337): pid=27515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401440837.572:10338): pid=27704 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401440837.573:10339): pid=27704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401440837.608:10340): pid=27704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401440837.617:10341): pid=27706 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401440837.617:10342): pid=27706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401440837.651:10343): pid=27706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401441001.133:10344): pid=27813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401441001.133:10345): pid=27813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401441001.133:10346): pid=27813 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=199 res=1 >type=USER_START msg=audit(1401441001.138:10347): pid=27813 uid=0 auid=0 ses=199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401441001.138:10348): pid=27813 uid=0 auid=0 ses=199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401441001.192:10349): pid=27813 uid=0 auid=0 ses=199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401441001.192:10350): pid=27813 uid=0 auid=0 ses=199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401441137.967:10351): pid=27905 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401441137.968:10352): pid=27905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401441138.004:10353): pid=27905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401441138.012:10354): pid=27907 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401441138.013:10355): pid=27907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401441138.048:10356): pid=27907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401441438.363:10357): pid=28127 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401441438.363:10358): pid=28127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401441438.400:10359): pid=28127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401441438.408:10360): pid=28129 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401441438.409:10361): pid=28129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401441438.443:10362): pid=28129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401441738.764:10363): pid=28320 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401441738.764:10364): pid=28320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401441738.799:10365): pid=28320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401441738.807:10366): pid=28322 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401441738.807:10367): pid=28322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401441738.842:10368): pid=28322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401441901.200:10369): pid=28425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401441901.200:10370): pid=28425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401441901.201:10371): pid=28425 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=200 res=1 >type=USER_START msg=audit(1401441901.207:10372): pid=28425 uid=0 auid=0 ses=200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401441901.207:10373): pid=28425 uid=0 auid=0 ses=200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401441901.253:10374): pid=28425 uid=0 auid=0 ses=200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401441901.254:10375): pid=28425 uid=0 auid=0 ses=200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401442039.169:10376): pid=28520 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401442039.170:10377): pid=28520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401442039.207:10378): pid=28520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401442039.216:10379): pid=28522 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401442039.217:10380): pid=28522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401442039.251:10381): pid=28522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401442339.583:10382): pid=28712 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401442339.583:10383): pid=28712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401442339.636:10384): pid=28712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401442339.645:10385): pid=28714 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401442339.645:10386): pid=28714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401442339.679:10387): pid=28714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401442639.993:10388): pid=28908 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401442639.993:10389): pid=28908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401442640.028:10390): pid=28908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401442640.036:10391): pid=28910 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401442640.036:10392): pid=28910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401442640.071:10393): pid=28910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401442801.262:10394): pid=29039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401442801.262:10395): pid=29039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401442801.262:10396): pid=29039 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=201 res=1 >type=USER_START msg=audit(1401442801.268:10397): pid=29039 uid=0 auid=0 ses=201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401442801.268:10398): pid=29039 uid=0 auid=0 ses=201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401442801.288:10399): pid=29039 uid=0 auid=0 ses=201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401442801.289:10400): pid=29039 uid=0 auid=0 ses=201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401442940.470:10401): pid=29131 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401442940.472:10402): pid=29131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401442940.510:10403): pid=29131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401442940.520:10404): pid=29133 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401442940.520:10405): pid=29133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401442940.556:10406): pid=29133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401443240.883:10407): pid=29329 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401443240.884:10408): pid=29329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401443240.919:10409): pid=29329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401443240.928:10410): pid=29331 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401443240.928:10411): pid=29331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401443240.962:10412): pid=29331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401443541.275:10413): pid=29530 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401443541.275:10414): pid=29530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401443541.310:10415): pid=29530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401443541.318:10416): pid=29532 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401443541.319:10417): pid=29532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401443541.352:10418): pid=29532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401443701.297:10419): pid=29633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401443701.297:10420): pid=29633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401443701.297:10421): pid=29633 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=202 res=1 >type=USER_START msg=audit(1401443701.303:10422): pid=29633 uid=0 auid=0 ses=202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401443701.303:10423): pid=29633 uid=0 auid=0 ses=202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401443701.559:10424): pid=29633 uid=0 auid=0 ses=202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401443701.560:10425): pid=29633 uid=0 auid=0 ses=202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401443841.682:10426): pid=29732 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401443841.682:10427): pid=29732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401443841.717:10428): pid=29732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401443841.726:10429): pid=29734 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401443841.726:10430): pid=29734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401443841.760:10431): pid=29734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401444061.564:10432): pid=29876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401444061.564:10433): pid=29876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401444061.564:10434): pid=29876 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=203 res=1 >type=USER_START msg=audit(1401444061.569:10435): pid=29876 uid=0 auid=0 ses=203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401444061.570:10436): pid=29876 uid=0 auid=0 ses=203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401444061.583:10437): avc: denied { read } for pid=29898 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401444061.583:10437): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff6e032630 a2=90800 a3=0 items=0 ppid=29896 pid=29898 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=203 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401444061.621:10438): pid=29876 uid=0 auid=0 ses=203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401444061.622:10439): pid=29876 uid=0 auid=0 ses=203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401444142.084:10440): pid=29958 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401444142.084:10441): pid=29958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401444142.121:10442): pid=29958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401444142.130:10443): pid=29960 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401444142.130:10444): pid=29960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401444142.165:10445): pid=29960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401444442.487:10446): pid=30185 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401444442.488:10447): pid=30185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401444442.524:10448): pid=30185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401444442.533:10449): pid=30187 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401444442.533:10450): pid=30187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401444442.567:10451): pid=30187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401444601.630:10452): pid=30290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401444601.630:10453): pid=30290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401444601.630:10454): pid=30290 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=204 res=1 >type=USER_START msg=audit(1401444601.636:10455): pid=30290 uid=0 auid=0 ses=204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401444601.637:10456): pid=30290 uid=0 auid=0 ses=204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401444601.699:10457): pid=30290 uid=0 auid=0 ses=204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401444601.700:10458): pid=30290 uid=0 auid=0 ses=204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401444742.918:10459): pid=30389 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401444742.918:10460): pid=30389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401444742.953:10461): pid=30389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401444742.962:10462): pid=30391 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401444742.962:10463): pid=30391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401444742.995:10464): pid=30391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401445043.310:10465): pid=30589 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401445043.311:10466): pid=30589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401445043.345:10467): pid=30589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401445043.353:10468): pid=30591 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401445043.354:10469): pid=30591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401445043.388:10470): pid=30591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401445343.711:10471): pid=30787 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401445343.711:10472): pid=30787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401445343.746:10473): pid=30787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401445343.755:10474): pid=30789 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401445343.755:10475): pid=30789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401445343.789:10476): pid=30789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401445501.706:10477): pid=30903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401445501.706:10478): pid=30903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401445501.706:10479): pid=30903 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=205 res=1 >type=USER_START msg=audit(1401445501.711:10480): pid=30903 uid=0 auid=0 ses=205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401445501.711:10481): pid=30903 uid=0 auid=0 ses=205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401445501.768:10482): pid=30903 uid=0 auid=0 ses=205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401445501.768:10483): pid=30903 uid=0 auid=0 ses=205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401445644.107:10484): pid=31002 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401445644.107:10485): pid=31002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401445644.143:10486): pid=31002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401445644.152:10487): pid=31004 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401445644.152:10488): pid=31004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401445644.186:10489): pid=31004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401445944.510:10490): pid=31228 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401445944.511:10491): pid=31228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401445944.549:10492): pid=31228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401445944.557:10493): pid=31230 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401445944.558:10494): pid=31230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401445944.592:10495): pid=31230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401446244.911:10496): pid=31424 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401446244.911:10497): pid=31424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401446245.010:10498): pid=31424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401446245.019:10499): pid=31426 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401446245.019:10500): pid=31426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401446245.054:10501): pid=31426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401446401.776:10502): pid=31527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401446401.776:10503): pid=31527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401446401.776:10504): pid=31527 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=206 res=1 >type=USER_START msg=audit(1401446401.782:10505): pid=31527 uid=0 auid=0 ses=206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401446401.783:10506): pid=31527 uid=0 auid=0 ses=206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401446401.830:10507): pid=31527 uid=0 auid=0 ses=206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401446401.830:10508): pid=31527 uid=0 auid=0 ses=206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401446545.565:10509): pid=31627 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401446545.565:10510): pid=31627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401446545.603:10511): pid=31627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401446545.612:10512): pid=31629 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401446545.612:10513): pid=31629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401446545.646:10514): pid=31629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401446845.976:10515): pid=31817 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401446845.977:10516): pid=31817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401446846.012:10517): pid=31817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401446846.020:10518): pid=31819 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401446846.021:10519): pid=31819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401446846.055:10520): pid=31819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401447146.382:10521): pid=32019 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401447146.383:10522): pid=32019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401447146.417:10523): pid=32019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401447146.426:10524): pid=32021 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401447146.426:10525): pid=32021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401447146.460:10526): pid=32021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401447301.837:10527): pid=32121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401447301.837:10528): pid=32121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401447301.837:10529): pid=32121 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=207 res=1 >type=USER_START msg=audit(1401447301.842:10530): pid=32121 uid=0 auid=0 ses=207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401447301.843:10531): pid=32121 uid=0 auid=0 ses=207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401447302.150:10532): pid=32121 uid=0 auid=0 ses=207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401447302.151:10533): pid=32121 uid=0 auid=0 ses=207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401447446.807:10534): pid=32248 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401447446.808:10535): pid=32248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401447446.846:10536): pid=32248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401447446.856:10537): pid=32250 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401447446.856:10538): pid=32250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401447446.891:10539): pid=32250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401447661.158:10540): pid=32388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401447661.158:10541): pid=32388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401447661.158:10542): pid=32388 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=208 res=1 >type=USER_START msg=audit(1401447661.164:10543): pid=32388 uid=0 auid=0 ses=208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401447661.164:10544): pid=32388 uid=0 auid=0 ses=208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401447661.179:10545): avc: denied { read } for pid=32410 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401447661.179:10545): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff2eb9cc10 a2=90800 a3=0 items=0 ppid=32408 pid=32410 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=208 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401447661.204:10546): pid=32388 uid=0 auid=0 ses=208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401447661.205:10547): pid=32388 uid=0 auid=0 ses=208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401447747.281:10548): pid=32469 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401447747.283:10549): pid=32469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401447747.321:10550): pid=32469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401447747.330:10551): pid=32472 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401447747.331:10552): pid=32472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401447747.365:10553): pid=32472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401448047.716:10554): pid=32659 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401448047.716:10555): pid=32659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401448047.750:10556): pid=32659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401448047.759:10557): pid=32661 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401448047.759:10558): pid=32661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401448047.793:10559): pid=32661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401448201.212:10560): pid=32765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401448201.212:10561): pid=32765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401448201.212:10562): pid=32765 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=209 res=1 >type=USER_START msg=audit(1401448201.218:10563): pid=32765 uid=0 auid=0 ses=209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401448201.218:10564): pid=32765 uid=0 auid=0 ses=209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401448201.262:10565): pid=32765 uid=0 auid=0 ses=209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401448201.262:10566): pid=32765 uid=0 auid=0 ses=209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401448348.236:10567): pid=409 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401448348.237:10568): pid=409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401448348.271:10569): pid=409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401448348.280:10570): pid=411 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401448348.280:10571): pid=411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401448348.314:10572): pid=411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401448648.691:10573): pid=663 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401448648.692:10574): pid=663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401448648.729:10575): pid=663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401448648.738:10576): pid=665 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401448648.738:10577): pid=665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401448648.773:10578): pid=665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401448949.125:10579): pid=874 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401448949.126:10580): pid=874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401448949.160:10581): pid=874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401448949.169:10582): pid=876 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401448949.169:10583): pid=876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401448949.203:10584): pid=876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401449101.269:10585): pid=997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401449101.270:10586): pid=997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401449101.270:10587): pid=997 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=210 res=1 >type=USER_START msg=audit(1401449101.277:10588): pid=997 uid=0 auid=0 ses=210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401449101.277:10589): pid=997 uid=0 auid=0 ses=210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401449103.983:10590): pid=997 uid=0 auid=0 ses=210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401449103.984:10591): pid=997 uid=0 auid=0 ses=210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401449249.525:10592): pid=1098 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401449249.526:10593): pid=1098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401449249.563:10594): pid=1098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401449249.573:10595): pid=1100 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401449249.574:10596): pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401449249.608:10597): pid=1100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401449549.945:10598): pid=1294 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401449549.945:10599): pid=1294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401449549.980:10600): pid=1294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401449549.988:10601): pid=1296 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401449549.989:10602): pid=1296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401449550.023:10603): pid=1296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401449850.357:10604): pid=1489 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401449850.357:10605): pid=1489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401449850.392:10606): pid=1489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401449850.400:10607): pid=1491 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401449850.400:10608): pid=1491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401449850.434:10609): pid=1491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401450001.992:10610): pid=1591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401450001.992:10611): pid=1591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401450001.992:10612): pid=1591 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=211 res=1 >type=USER_START msg=audit(1401450001.997:10613): pid=1591 uid=0 auid=0 ses=211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401450001.997:10614): pid=1591 uid=0 auid=0 ses=211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401450002.048:10615): pid=1591 uid=0 auid=0 ses=211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401450002.049:10616): pid=1591 uid=0 auid=0 ses=211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401450150.801:10617): pid=1694 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401450150.801:10618): pid=1694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401450150.838:10619): pid=1694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401450150.846:10620): pid=1696 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401450150.846:10621): pid=1696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401450150.881:10622): pid=1696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401450451.216:10623): pid=1941 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401450451.217:10624): pid=1941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401450451.255:10625): pid=1941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401450451.264:10626): pid=1943 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401450451.264:10627): pid=1943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401450451.299:10628): pid=1943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401450751.626:10629): pid=2141 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401450751.626:10630): pid=2141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401450751.661:10631): pid=2141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401450751.670:10632): pid=2143 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401450751.670:10633): pid=2143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401450751.705:10634): pid=2143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401450901.058:10635): pid=2241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401450901.058:10636): pid=2241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401450901.058:10637): pid=2241 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=212 res=1 >type=USER_START msg=audit(1401450901.064:10638): pid=2241 uid=0 auid=0 ses=212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401450901.065:10639): pid=2241 uid=0 auid=0 ses=212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401450901.108:10640): pid=2241 uid=0 auid=0 ses=212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401450901.108:10641): pid=2241 uid=0 auid=0 ses=212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401451052.052:10642): pid=2343 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401451052.052:10643): pid=2343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401451052.089:10644): pid=2343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401451052.098:10645): pid=2345 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401451052.098:10646): pid=2345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401451052.132:10647): pid=2345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401451261.113:10648): pid=2479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401451261.113:10649): pid=2479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401451261.113:10650): pid=2479 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=213 res=1 >type=USER_START msg=audit(1401451261.118:10651): pid=2479 uid=0 auid=0 ses=213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401451261.119:10652): pid=2479 uid=0 auid=0 ses=213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401451261.134:10653): avc: denied { read } for pid=2501 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401451261.134:10653): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffea91d0f0 a2=90800 a3=0 items=0 ppid=2499 pid=2501 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=213 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401451261.187:10654): pid=2479 uid=0 auid=0 ses=213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401451261.188:10655): pid=2479 uid=0 auid=0 ses=213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401451352.457:10656): pid=2568 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401451352.457:10657): pid=2568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401451352.494:10658): pid=2568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401451352.502:10659): pid=2570 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401451352.503:10660): pid=2570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401451352.537:10661): pid=2570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401451652.872:10662): pid=2792 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401451652.873:10663): pid=2792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401451652.911:10664): pid=2792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401451652.920:10665): pid=2794 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401451652.920:10666): pid=2794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401451652.954:10667): pid=2794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401451801.194:10668): pid=2890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401451801.194:10669): pid=2890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401451801.195:10670): pid=2890 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=214 res=1 >type=USER_START msg=audit(1401451801.201:10671): pid=2890 uid=0 auid=0 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401451801.201:10672): pid=2890 uid=0 auid=0 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401451801.256:10673): pid=2890 uid=0 auid=0 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401451801.257:10674): pid=2890 uid=0 auid=0 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401451953.281:10675): pid=2994 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401451953.281:10676): pid=2994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401451953.317:10677): pid=2994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401451953.326:10678): pid=2996 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401451953.326:10679): pid=2996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401451953.361:10680): pid=2996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401452253.702:10681): pid=3195 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401452253.703:10682): pid=3195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401452253.737:10683): pid=3195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401452253.745:10684): pid=3197 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401452253.745:10685): pid=3197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401452253.780:10686): pid=3197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401452554.112:10687): pid=3389 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401452554.113:10688): pid=3389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401452554.146:10689): pid=3389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401452554.154:10690): pid=3391 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401452554.154:10691): pid=3391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401452554.188:10692): pid=3391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401452701.264:10693): pid=3485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401452701.264:10694): pid=3485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401452701.264:10695): pid=3485 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=215 res=1 >type=USER_START msg=audit(1401452701.269:10696): pid=3485 uid=0 auid=0 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401452701.269:10697): pid=3485 uid=0 auid=0 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401452701.314:10698): pid=3485 uid=0 auid=0 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401452701.315:10699): pid=3485 uid=0 auid=0 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401452854.508:10700): pid=3620 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401452854.509:10701): pid=3620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401452854.546:10702): pid=3620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401452854.555:10703): pid=3622 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401452854.555:10704): pid=3622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401452854.589:10705): pid=3622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401453154.923:10706): pid=3808 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401453154.923:10707): pid=3808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401453154.959:10708): pid=3808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401453154.968:10709): pid=3810 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401453154.968:10710): pid=3810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401453155.002:10711): pid=3810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401453455.423:10712): pid=4003 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401453455.424:10713): pid=4003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401453455.458:10714): pid=4003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401453455.466:10715): pid=4005 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401453455.467:10716): pid=4005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401453455.541:10717): pid=4005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401453601.322:10718): pid=4101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401453601.322:10719): pid=4101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401453601.323:10720): pid=4101 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=216 res=1 >type=USER_START msg=audit(1401453601.329:10721): pid=4101 uid=0 auid=0 ses=216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401453601.329:10722): pid=4101 uid=0 auid=0 ses=216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401453601.380:10723): pid=4101 uid=0 auid=0 ses=216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401453601.380:10724): pid=4101 uid=0 auid=0 ses=216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401453755.884:10725): pid=4205 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401453755.885:10726): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401453755.921:10727): pid=4205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401453755.930:10728): pid=4207 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401453755.930:10729): pid=4207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401453755.965:10730): pid=4207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401454056.289:10731): pid=4404 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401454056.290:10732): pid=4404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401454056.323:10733): pid=4404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401454056.332:10734): pid=4406 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401454056.332:10735): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401454056.365:10736): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401454356.696:10737): pid=4623 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401454356.697:10738): pid=4623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401454356.734:10739): pid=4623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401454356.743:10740): pid=4625 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401454356.743:10741): pid=4625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401454356.777:10742): pid=4625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401454501.389:10743): pid=4713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401454501.389:10744): pid=4713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401454501.389:10745): pid=4713 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=217 res=1 >type=USER_START msg=audit(1401454501.396:10746): pid=4713 uid=0 auid=0 ses=217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401454501.396:10747): pid=4713 uid=0 auid=0 ses=217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401454501.439:10748): pid=4713 uid=0 auid=0 ses=217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401454501.440:10749): pid=4713 uid=0 auid=0 ses=217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401454657.102:10750): pid=4817 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401454657.102:10751): pid=4817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401454657.139:10752): pid=4817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401454657.150:10753): pid=4820 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401454657.150:10754): pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401454657.185:10755): pid=4820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401454861.445:10756): pid=4954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401454861.445:10757): pid=4954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401454861.445:10758): pid=4954 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=218 res=1 >type=USER_START msg=audit(1401454861.450:10759): pid=4954 uid=0 auid=0 ses=218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401454861.450:10760): pid=4954 uid=0 auid=0 ses=218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401454861.464:10761): avc: denied { read } for pid=4976 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401454861.464:10761): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff97aefd70 a2=90800 a3=0 items=0 ppid=4974 pid=4976 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=218 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401454861.521:10762): pid=4954 uid=0 auid=0 ses=218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401454861.522:10763): pid=4954 uid=0 auid=0 ses=218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401454957.525:10764): pid=5044 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401454957.526:10765): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401454957.563:10766): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401454957.571:10767): pid=5046 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401454957.572:10768): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401454957.606:10769): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401455257.955:10770): pid=5244 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401455257.955:10771): pid=5244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401455257.988:10772): pid=5244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401455257.997:10773): pid=5246 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401455257.997:10774): pid=5246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401455258.030:10775): pid=5246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401455401.528:10776): pid=5343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401455401.528:10777): pid=5343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401455401.528:10778): pid=5343 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=219 res=1 >type=USER_START msg=audit(1401455401.533:10779): pid=5343 uid=0 auid=0 ses=219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401455401.533:10780): pid=5343 uid=0 auid=0 ses=219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401455401.751:10781): pid=5343 uid=0 auid=0 ses=219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401455401.751:10782): pid=5343 uid=0 auid=0 ses=219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401455558.360:10783): pid=5448 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401455558.360:10784): pid=5448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401455558.396:10785): pid=5448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401455558.404:10786): pid=5450 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401455558.404:10787): pid=5450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401455558.438:10788): pid=5450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1401455644.440:10789): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1401455644.666:10790): pid=925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="brewer-1" uuid=79a9396d-047d-457b-9a05-3bd216729333 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401455644.679:10791): pid=5594 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C7673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C76675F6E616D652C617474722C73697A652C7365675F73746172745F70652C646576696365732C746167732061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401455644.680:10792): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401455644.718:10793): pid=5594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401455644.727:10794): pid=5596 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=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 terminal=? res=success' >type=USER_START msg=audit(1401455644.727:10795): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401455644.767:10796): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401455658.677:10797): pid=5611 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401455658.677:10798): pid=5611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401455658.714:10799): pid=5611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401455658.722:10800): pid=5613 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401455658.722:10801): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401455658.929:10802): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401455658.938:10803): pid=5625 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401455658.938:10804): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401455659.036:10805): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1401455659.053:10806): pid=925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="brewer-2" uuid=f356f6a7-6c22-48d6-8e33-84eba7521bb1 vm-ctx=system_u:system_r:svirt_t:s0:c374,c622 img-ctx=system_u:object_r:svirt_image_t:s0:c374,c622 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1401455659.053:10807): pid=925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="brewer-2" uuid=f356f6a7-6c22-48d6-8e33-84eba7521bb1 vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1401455659.107:10808): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1401455659.107:10808): arch=c000003e syscall=16 success=yes exit=0 a0=1c a1=89a2 a2=7f0a01ac0f70 a3=11 items=0 ppid=1 pid=947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1401455659.117:10809): pid=925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="brewer-2" uuid=f356f6a7-6c22-48d6-8e33-84eba7521bb1 net=00:1a:4a:3f:44:b5 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401455659.204:10810): pid=925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="brewer-2" uuid=f356f6a7-6c22-48d6-8e33-84eba7521bb1 net=00:1a:4a:3f:44:b5 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401455659.231:10811): pid=925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="brewer-2" uuid=f356f6a7-6c22-48d6-8e33-84eba7521bb1 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d2.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401455659.231:10812): pid=925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="brewer-2" uuid=f356f6a7-6c22-48d6-8e33-84eba7521bb1 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d2.scope/" class=path path="/rhev/data-center/mnt/192.168.2.1:_home_storage_iso/e453999e-ec9f-420b-941c-a9f9cc4432bb/images/11111111-1111-1111-1111-111111111111/CorePlus-current.iso" rdev=? acl=r exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401455659.231:10813): pid=925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="brewer-2" uuid=f356f6a7-6c22-48d6-8e33-84eba7521bb1 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d2.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401455659.451:10814): pid=925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="brewer-2" uuid=f356f6a7-6c22-48d6-8e33-84eba7521bb1 old-disk="?" new-disk="/rhev/data-center/mnt/192.168.2.1:_home_storage_iso/e453999e-ec9f-420b-941c-a9f9cc4432bb/images/11111111-1111-1111-1111-111111111111/CorePlus-current.iso" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401455659.451:10815): pid=925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="brewer-2" uuid=f356f6a7-6c22-48d6-8e33-84eba7521bb1 old-disk="?" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/58cc8d73-0804-41b7-a457-93e7f2280478/0ee5ce39-c24f-4f7d-8067-6fce06a0fdfa" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401455659.451:10816): pid=925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="brewer-2" uuid=f356f6a7-6c22-48d6-8e33-84eba7521bb1 old-net=? new-net=00:1a:4a:3f:44:b5 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401455659.451:10817): pid=925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="brewer-2" uuid=f356f6a7-6c22-48d6-8e33-84eba7521bb1 old-mem=0 new-mem=1048576 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401455659.451:10818): pid=925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="brewer-2" uuid=f356f6a7-6c22-48d6-8e33-84eba7521bb1 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1401455659.451:10819): pid=925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="brewer-2" uuid=f356f6a7-6c22-48d6-8e33-84eba7521bb1 vm-pid=5737 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401455659.513:10820): pid=5743 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401455659.514:10821): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401455659.549:10822): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401455696.745:10823): pid=5784 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401455696.745:10824): pid=5784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401455696.780:10825): pid=5784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401455696.788:10826): pid=5786 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401455696.789:10827): pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401455696.932:10828): pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401455696.948:10829): pid=5799 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C7673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C76675F6E616D652C617474722C73697A652C7365675F73746172745F70652C646576696365732C746167732061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401455696.948:10830): pid=5799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401455696.983:10831): pid=5799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401455706.004:10832): pid=925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=snapshot vm="brewer-2" uuid=f356f6a7-6c22-48d6-8e33-84eba7521bb1 old-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/58cc8d73-0804-41b7-a457-93e7f2280478/0ee5ce39-c24f-4f7d-8067-6fce06a0fdfa" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/58cc8d73-0804-41b7-a457-93e7f2280478/6f455f42-bac4-4439-8f2f-a2044bc5e708" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1401455707.205:10833): avc: denied { read } for pid=5737 comm="qemu-system-x86" path="/dev/dm-11" dev="devtmpfs" ino=6208028 scontext=system_u:system_r:svirt_t:s0:c374,c622 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401455707.205:10833): arch=c000003e syscall=209 success=no exit=-13 a0=7f1e6bf6a000 a1=1 a2=7f1e6f3a6db0 a3=20 items=0 ppid=1 pid=5737 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c374,c622 key=(null) >type=USER_CMD msg=audit(1401455709.781:10834): pid=5816 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401455709.781:10835): pid=5816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401455709.815:10836): pid=5816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401455709.824:10837): pid=5818 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401455709.824:10838): pid=5818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401455709.964:10839): pid=5818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401455709.973:10840): pid=5830 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401455709.974:10841): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401455710.008:10842): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401455720.003:10843): pid=925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=snapshot vm="brewer-2" uuid=f356f6a7-6c22-48d6-8e33-84eba7521bb1 old-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/58cc8d73-0804-41b7-a457-93e7f2280478/6f455f42-bac4-4439-8f2f-a2044bc5e708" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/58cc8d73-0804-41b7-a457-93e7f2280478/2d47ee0c-ccbc-4a54-ad1e-53270861a480" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1401455731.877:10844): pid=5848 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="alitke" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_ACCT msg=audit(1401455731.878:10845): pid=5848 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="alitke" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401455731.879:10846): pid=5848 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/BUILD/qemu-1.6.2" cmd=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 terminal=pts/0 res=success' >type=USER_START msg=audit(1401455731.880:10847): pid=5848 uid=0 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401455737.769:10848): pid=5848 uid=0 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401455767.373:10849): pid=5878 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/BUILD/qemu-1.6.2" cmd=76697273682071656D752D6D6F6E69746F722D636F6D6D616E64202D2D707265747479206272657765722D32207B2265786563757465223A202271756572792D626C6F636B227D terminal=pts/0 res=success' >type=USER_START msg=audit(1401455767.374:10850): pid=5878 uid=0 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401455773.930:10851): pid=5878 uid=0 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401455858.926:10852): pid=5937 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401455858.926:10853): pid=5937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401455858.963:10854): pid=5937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401455858.971:10855): pid=5939 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401455858.972:10856): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401455859.004:10857): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401456159.334:10858): pid=6136 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401456159.334:10859): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401456159.367:10860): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401456159.376:10861): pid=6138 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401456159.377:10862): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401456159.410:10863): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1401456189.436:10864): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1401456189.644:10865): pid=925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="brewer-2" uuid=f356f6a7-6c22-48d6-8e33-84eba7521bb1 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401456189.656:10866): pid=6219 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401456189.657:10867): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401456189.694:10868): pid=6219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401456189.702:10869): pid=6221 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=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 terminal=? res=success' >type=USER_START msg=audit(1401456189.703:10870): pid=6221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401456189.747:10871): pid=6221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401456301.761:10872): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401456301.761:10873): pid=6277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401456301.762:10874): pid=6277 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=220 res=1 >type=USER_START msg=audit(1401456301.769:10875): pid=6277 uid=0 auid=0 ses=220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401456301.769:10876): pid=6277 uid=0 auid=0 ses=220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401456301.804:10877): pid=6277 uid=0 auid=0 ses=220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401456301.805:10878): pid=6277 uid=0 auid=0 ses=220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401456459.760:10879): pid=6352 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401456459.760:10880): pid=6352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401456459.796:10881): pid=6352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401456459.805:10882): pid=6354 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401456459.805:10883): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401456459.839:10884): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401456760.186:10885): pid=6481 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401456760.187:10886): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401456760.220:10887): pid=6481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401456760.228:10888): pid=6483 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401456760.229:10889): pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401456760.261:10890): pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401457060.650:10891): pid=6608 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401457060.650:10892): pid=6608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401457060.757:10893): pid=6608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401457060.766:10894): pid=6610 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401457060.766:10895): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401457060.799:10896): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401457201.814:10897): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401457201.814:10898): pid=6700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401457201.814:10899): pid=6700 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=221 res=1 >type=USER_START msg=audit(1401457201.820:10900): pid=6700 uid=0 auid=0 ses=221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401457201.820:10901): pid=6700 uid=0 auid=0 ses=221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401457201.854:10902): pid=6700 uid=0 auid=0 ses=221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401457201.855:10903): pid=6700 uid=0 auid=0 ses=221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401457361.135:10904): pid=6777 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401457361.136:10905): pid=6777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401457361.175:10906): pid=6777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401457361.183:10907): pid=6779 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401457361.184:10908): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401457361.221:10909): pid=6779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1401457512.595:10910): pid=6894 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="alitke" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_ACCT msg=audit(1401457512.596:10911): pid=6894 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="alitke" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401457512.597:10912): pid=6894 uid=1000 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/BUILD/qemu-1.6.2" cmd=7669202F7661722F6C6F672F6C6962766972742F6C696276697274642E6C6F67 terminal=pts/0 res=success' >type=USER_START msg=audit(1401457512.598:10913): pid=6894 uid=0 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401457661.563:10914): pid=6971 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401457661.563:10915): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401457661.598:10916): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401457661.607:10917): pid=6973 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401457661.607:10918): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401457661.640:10919): pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401457962.027:10920): pid=7098 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401457962.028:10921): pid=7098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401457962.061:10922): pid=7098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401457962.070:10923): pid=7100 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401457962.070:10924): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401457962.103:10925): pid=7100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401458101.862:10926): pid=7158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401458101.862:10927): pid=7158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401458101.862:10928): pid=7158 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=222 res=1 >type=USER_START msg=audit(1401458101.868:10929): pid=7158 uid=0 auid=0 ses=222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401458101.868:10930): pid=7158 uid=0 auid=0 ses=222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401458101.935:10931): pid=7158 uid=0 auid=0 ses=222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401458101.936:10932): pid=7158 uid=0 auid=0 ses=222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401458262.432:10933): pid=7231 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401458262.433:10934): pid=7231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401458262.497:10935): pid=7231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401458262.506:10936): pid=7233 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401458262.506:10937): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401458262.539:10938): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401458461.943:10939): pid=7344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401458461.943:10940): pid=7344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401458461.943:10941): pid=7344 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=223 res=1 >type=USER_START msg=audit(1401458461.950:10942): pid=7344 uid=0 auid=0 ses=223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401458461.950:10943): pid=7344 uid=0 auid=0 ses=223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401458461.964:10944): avc: denied { read } for pid=7366 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401458461.964:10944): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff13864eb0 a2=90800 a3=0 items=0 ppid=7364 pid=7366 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=223 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401458462.027:10945): pid=7344 uid=0 auid=0 ses=223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401458462.028:10946): pid=7344 uid=0 auid=0 ses=223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401458562.864:10947): pid=7416 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401458562.864:10948): pid=7416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401458562.903:10949): pid=7416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401458562.912:10950): pid=7418 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401458562.912:10951): pid=7418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401458562.946:10952): pid=7418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401458863.280:10953): pid=7543 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401458863.281:10954): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401458863.314:10955): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401458863.323:10956): pid=7545 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401458863.323:10957): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401458863.356:10958): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401459001.034:10959): pid=7603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401459001.034:10960): pid=7603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401459001.035:10961): pid=7603 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=224 res=1 >type=USER_START msg=audit(1401459001.040:10962): pid=7603 uid=0 auid=0 ses=224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401459001.041:10963): pid=7603 uid=0 auid=0 ses=224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401459001.101:10964): pid=7603 uid=0 auid=0 ses=224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401459001.102:10965): pid=7603 uid=0 auid=0 ses=224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401459163.684:10966): pid=7678 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401459163.684:10967): pid=7678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401459163.720:10968): pid=7678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401459163.728:10969): pid=7681 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401459163.728:10970): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401459163.761:10971): pid=7681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401459464.095:10972): pid=7811 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401459464.095:10973): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401459464.128:10974): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401459464.136:10975): pid=7813 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401459464.136:10976): pid=7813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401459464.169:10977): pid=7813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401459764.500:10978): pid=7946 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401459764.500:10979): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401459764.533:10980): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401459764.542:10981): pid=7948 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401459764.542:10982): pid=7948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401459764.575:10983): pid=7948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401459901.108:10984): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401459901.109:10985): pid=8008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401459901.109:10986): pid=8008 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=225 res=1 >type=USER_START msg=audit(1401459901.114:10987): pid=8008 uid=0 auid=0 ses=225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401459901.114:10988): pid=8008 uid=0 auid=0 ses=225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401459901.186:10989): pid=8008 uid=0 auid=0 ses=225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401459901.187:10990): pid=8008 uid=0 auid=0 ses=225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401460064.908:10991): pid=8116 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401460064.908:10992): pid=8116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401460064.944:10993): pid=8116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401460064.953:10994): pid=8118 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401460064.953:10995): pid=8118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401460064.986:10996): pid=8118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401460365.315:10997): pid=8242 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401460365.316:10998): pid=8242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401460365.350:10999): pid=8242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401460365.359:11000): pid=8244 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401460365.359:11001): pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401460365.392:11002): pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401460665.738:11003): pid=8369 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401460665.738:11004): pid=8369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401460665.771:11005): pid=8369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401460665.780:11006): pid=8371 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401460665.780:11007): pid=8371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401460665.813:11008): pid=8371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401460801.194:11009): pid=8429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401460801.194:11010): pid=8429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401460801.194:11011): pid=8429 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=226 res=1 >type=USER_START msg=audit(1401460801.200:11012): pid=8429 uid=0 auid=0 ses=226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401460801.201:11013): pid=8429 uid=0 auid=0 ses=226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401460801.252:11014): pid=8429 uid=0 auid=0 ses=226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401460801.253:11015): pid=8429 uid=0 auid=0 ses=226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1401460901.832:11016): pid=8479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=8479 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401460901.832:11017): pid=8479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=8479 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401460901.832:11018): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8479 suid=74 rport=51033 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401460901.833:11019): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=8479 suid=74 rport=51033 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401460901.971:11020): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51033 acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401460901.971:11021): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=02:88:7d:f7:9f:c4:13:b7:4f:c4:b0:65:ba:87:47:42 rport=51033 acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_ACCT msg=audit(1401460902.022:11022): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401460902.023:11023): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8479 suid=74 rport=51033 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401460902.023:11024): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1401460902.024:11025): pid=8478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=LOGIN msg=audit(1401460902.024:11026): pid=8478 uid=0 old-auid=4294967295 new-auid=1000 old-ses=4294967295 new-ses=227 res=1 >type=USER_ROLE_CHANGE msg=audit(1401460902.064:11027): pid=8478 uid=0 auid=1000 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_START msg=audit(1401460902.075:11028): pid=8478 uid=0 auid=1000 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401460902.075:11029): pid=8481 uid=0 auid=1000 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=8481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401460902.075:11030): pid=8478 uid=0 auid=1000 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8478 suid=0 rport=51033 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401460902.075:11031): pid=8481 uid=0 auid=1000 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=8481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRED_ACQ msg=audit(1401460902.076:11032): pid=8481 uid=0 auid=1000 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1401460902.080:11033): pid=8478 uid=0 auid=1000 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=/dev/pts/1 res=success' >type=USER_START msg=audit(1401460902.081:11034): pid=8478 uid=0 auid=1000 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=/dev/pts/1 res=success' >type=USER_END msg=audit(1401460964.368:11035): pid=8478 uid=0 auid=1000 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_LOGOUT msg=audit(1401460964.368:11036): pid=8478 uid=0 auid=1000 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1401460964.369:11037): pid=8478 uid=0 auid=1000 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8481 suid=1000 rport=51033 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_END msg=audit(1401460964.372:11038): pid=8478 uid=0 auid=1000 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRED_DISP msg=audit(1401460964.373:11039): pid=8478 uid=0 auid=1000 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401460964.373:11040): pid=8478 uid=0 auid=1000 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=8478 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401460964.373:11041): pid=8478 uid=0 auid=1000 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=8478 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_CMD msg=audit(1401460966.141:11042): pid=8541 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401460966.142:11043): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401460966.182:11044): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401460966.193:11045): pid=8543 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401460966.193:11046): pid=8543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401460966.226:11047): pid=8543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401461266.566:11048): pid=8699 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401461266.567:11049): pid=8699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401461266.603:11050): pid=8699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401461266.611:11051): pid=8701 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401461266.612:11052): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401461266.644:11053): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401461566.973:11054): pid=8827 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401461566.973:11055): pid=8827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401461567.006:11056): pid=8827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401461567.014:11057): pid=8829 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401461567.014:11058): pid=8829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401461567.047:11059): pid=8829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401461701.262:11060): pid=8888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401461701.262:11061): pid=8888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401461701.263:11062): pid=8888 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=228 res=1 >type=USER_START msg=audit(1401461701.269:11063): pid=8888 uid=0 auid=0 ses=228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401461701.269:11064): pid=8888 uid=0 auid=0 ses=228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401461701.361:11065): pid=8888 uid=0 auid=0 ses=228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401461701.362:11066): pid=8888 uid=0 auid=0 ses=228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401461867.388:11067): pid=8965 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401461867.389:11068): pid=8965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401461867.445:11069): pid=8965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401461867.454:11070): pid=8967 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401461867.454:11071): pid=8967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401461867.487:11072): pid=8967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401462061.367:11073): pid=9048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401462061.368:11074): pid=9048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401462061.368:11075): pid=9048 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=229 res=1 >type=USER_START msg=audit(1401462061.373:11076): pid=9048 uid=0 auid=0 ses=229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401462061.373:11077): pid=9048 uid=0 auid=0 ses=229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401462061.387:11078): avc: denied { read } for pid=9070 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401462061.387:11078): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff9b809ed0 a2=90800 a3=0 items=0 ppid=9068 pid=9070 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=229 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401462061.427:11079): pid=9048 uid=0 auid=0 ses=229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401462061.428:11080): pid=9048 uid=0 auid=0 ses=229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401462167.832:11081): pid=9123 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401462167.832:11082): pid=9123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401462167.869:11083): pid=9123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401462167.878:11084): pid=9125 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401462167.878:11085): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401462167.984:11086): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401462468.325:11087): pid=9254 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401462468.325:11088): pid=9254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401462468.359:11089): pid=9254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401462468.368:11090): pid=9256 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401462468.368:11091): pid=9256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401462468.470:11092): pid=9256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401462601.433:11093): pid=9313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401462601.433:11094): pid=9313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401462601.434:11095): pid=9313 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=230 res=1 >type=USER_START msg=audit(1401462601.438:11096): pid=9313 uid=0 auid=0 ses=230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401462601.438:11097): pid=9313 uid=0 auid=0 ses=230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401462601.479:11098): pid=9313 uid=0 auid=0 ses=230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401462601.479:11099): pid=9313 uid=0 auid=0 ses=230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401462768.798:11100): pid=9420 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401462768.799:11101): pid=9420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401462768.836:11102): pid=9420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401462768.845:11103): pid=9422 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401462768.846:11104): pid=9422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401462768.880:11105): pid=9422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401463069.263:11106): pid=9548 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401463069.263:11107): pid=9548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401463069.298:11108): pid=9548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401463069.306:11109): pid=9550 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401463069.307:11110): pid=9550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401463069.341:11111): pid=9550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401463369.658:11112): pid=9675 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401463369.658:11113): pid=9675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401463369.692:11114): pid=9675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401463369.701:11115): pid=9677 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401463369.701:11116): pid=9677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401463369.733:11117): pid=9677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401463501.487:11118): pid=9733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401463501.487:11119): pid=9733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401463501.488:11120): pid=9733 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=231 res=1 >type=USER_START msg=audit(1401463501.493:11121): pid=9733 uid=0 auid=0 ses=231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401463501.494:11122): pid=9733 uid=0 auid=0 ses=231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401463501.553:11123): pid=9733 uid=0 auid=0 ses=231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401463501.554:11124): pid=9733 uid=0 auid=0 ses=231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401463670.053:11125): pid=9810 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401463670.054:11126): pid=9810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401463670.089:11127): pid=9810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401463670.098:11128): pid=9812 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401463670.098:11129): pid=9812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401463670.210:11130): pid=9812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401463970.624:11131): pid=9938 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401463970.625:11132): pid=9938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401463970.658:11133): pid=9938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401463970.666:11134): pid=9940 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401463970.666:11135): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401463970.700:11136): pid=9940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401464271.037:11137): pid=10095 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401464271.037:11138): pid=10095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401464271.072:11139): pid=10095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401464271.081:11140): pid=10097 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401464271.082:11141): pid=10097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401464271.114:11142): pid=10097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401464298.130:11143): pid=10112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=10112 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401464298.130:11144): pid=10112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=10112 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401464298.131:11145): pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10112 suid=74 rport=51437 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401464298.131:11146): pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10112 suid=74 rport=51437 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401464298.214:11147): pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51437 acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401464298.214:11148): pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=02:88:7d:f7:9f:c4:13:b7:4f:c4:b0:65:ba:87:47:42 rport=51437 acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_ACCT msg=audit(1401464298.264:11149): pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401464298.265:11150): pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10112 suid=74 rport=51437 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401464298.265:11151): pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1401464298.266:11152): pid=10111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=LOGIN msg=audit(1401464298.266:11153): pid=10111 uid=0 old-auid=4294967295 new-auid=1000 old-ses=4294967295 new-ses=232 res=1 >type=USER_ROLE_CHANGE msg=audit(1401464298.307:11154): pid=10111 uid=0 auid=1000 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_START msg=audit(1401464298.316:11155): pid=10111 uid=0 auid=1000 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401464298.316:11156): pid=10111 uid=0 auid=1000 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10111 suid=0 rport=51437 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401464298.316:11157): pid=10114 uid=0 auid=1000 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=10114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401464298.316:11158): pid=10114 uid=0 auid=1000 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=10114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRED_ACQ msg=audit(1401464298.317:11159): pid=10114 uid=0 auid=1000 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1401464298.321:11160): pid=10111 uid=0 auid=1000 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=/dev/pts/1 res=success' >type=USER_START msg=audit(1401464298.322:11161): pid=10111 uid=0 auid=1000 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=/dev/pts/1 res=success' >type=USER_AUTH msg=audit(1401464309.312:11162): pid=10148 uid=1000 auid=1000 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="alitke" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_ACCT msg=audit(1401464309.314:11163): pid=10148 uid=1000 auid=1000 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="alitke" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_CMD msg=audit(1401464309.314:11164): pid=10148 uid=1000 auid=1000 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke" cmd=766473436C69656E74202D7320302067657456647343617073 terminal=pts/1 res=success' >type=USER_START msg=audit(1401464309.315:11165): pid=10148 uid=0 auid=1000 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_END msg=audit(1401464309.483:11166): pid=10148 uid=0 auid=1000 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_END msg=audit(1401464388.191:11167): pid=10111 uid=0 auid=1000 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_LOGOUT msg=audit(1401464388.191:11168): pid=10111 uid=0 auid=1000 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1401464388.191:11169): pid=10111 uid=0 auid=1000 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10114 suid=1000 rport=51437 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_END msg=audit(1401464388.194:11170): pid=10111 uid=0 auid=1000 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRED_DISP msg=audit(1401464388.195:11171): pid=10111 uid=0 auid=1000 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401464388.195:11172): pid=10111 uid=0 auid=1000 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=10111 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401464388.196:11173): pid=10111 uid=0 auid=1000 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=10111 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_ACCT msg=audit(1401464401.563:11174): pid=10202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401464401.563:11175): pid=10202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401464401.564:11176): pid=10202 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=233 res=1 >type=USER_START msg=audit(1401464401.570:11177): pid=10202 uid=0 auid=0 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401464401.571:11178): pid=10202 uid=0 auid=0 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401464401.608:11179): pid=10202 uid=0 auid=0 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401464401.609:11180): pid=10202 uid=0 auid=0 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401464571.460:11181): pid=10285 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401464571.462:11182): pid=10285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401464571.501:11183): pid=10285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401464571.510:11184): pid=10287 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401464571.510:11185): pid=10287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401464571.544:11186): pid=10287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401464807.423:11187): pid=10386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=10386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401464807.423:11188): pid=10386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=10386 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401464807.424:11189): pid=10385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10386 suid=74 rport=51476 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401464807.424:11190): pid=10385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=10386 suid=74 rport=51476 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401464807.478:11191): pid=10385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=51476 acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401464807.478:11192): pid=10385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=02:88:7d:f7:9f:c4:13:b7:4f:c4:b0:65:ba:87:47:42 rport=51476 acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_ACCT msg=audit(1401464807.531:11193): pid=10385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401464807.531:11194): pid=10385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10386 suid=74 rport=51476 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401464807.532:11195): pid=10385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1401464807.533:11196): pid=10385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=LOGIN msg=audit(1401464807.533:11197): pid=10385 uid=0 old-auid=4294967295 new-auid=1000 old-ses=4294967295 new-ses=234 res=1 >type=USER_ROLE_CHANGE msg=audit(1401464807.572:11198): pid=10385 uid=0 auid=1000 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_START msg=audit(1401464807.582:11199): pid=10385 uid=0 auid=1000 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401464807.582:11200): pid=10385 uid=0 auid=1000 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10385 suid=0 rport=51476 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401464807.582:11201): pid=10388 uid=0 auid=1000 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=10388 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401464807.582:11202): pid=10388 uid=0 auid=1000 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=10388 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRED_ACQ msg=audit(1401464807.583:11203): pid=10388 uid=0 auid=1000 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1401464807.587:11204): pid=10385 uid=0 auid=1000 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=/dev/pts/1 res=success' >type=USER_START msg=audit(1401464807.588:11205): pid=10385 uid=0 auid=1000 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=/dev/pts/1 res=success' >type=USER_AUTH msg=audit(1401464818.893:11206): pid=10423 uid=1000 auid=1000 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="alitke" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_ACCT msg=audit(1401464818.894:11207): pid=10423 uid=1000 auid=1000 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="alitke" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_CMD msg=audit(1401464818.895:11208): pid=10423 uid=1000 auid=1000 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke" cmd=7669727368202D72206361706162696C6974696573 terminal=pts/1 res=success' >type=USER_START msg=audit(1401464818.896:11209): pid=10423 uid=0 auid=1000 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_END msg=audit(1401464818.915:11210): pid=10423 uid=0 auid=1000 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_CMD msg=audit(1401464871.877:11211): pid=10453 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401464871.878:11212): pid=10453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401464871.979:11213): pid=10453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401464871.988:11214): pid=10455 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401464871.988:11215): pid=10455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401464872.022:11216): pid=10455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401464952.567:11217): pid=10494 uid=1000 auid=1000 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke" cmd=766473436C69656E74202D7320302067657456647343617073 terminal=pts/1 res=success' >type=USER_START msg=audit(1401464952.568:11218): pid=10494 uid=0 auid=1000 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_END msg=audit(1401464952.673:11219): pid=10494 uid=0 auid=1000 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_END msg=audit(1401464986.132:11220): pid=10385 uid=0 auid=1000 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=USER_LOGOUT msg=audit(1401464986.132:11221): pid=10385 uid=0 auid=1000 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/1 res=success' >type=CRYPTO_KEY_USER msg=audit(1401464986.133:11222): pid=10385 uid=0 auid=1000 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10388 suid=1000 rport=51476 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_END msg=audit(1401464986.136:11223): pid=10385 uid=0 auid=1000 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRED_DISP msg=audit(1401464986.137:11224): pid=10385 uid=0 auid=1000 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401464986.137:11225): pid=10385 uid=0 auid=1000 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=10385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401464986.137:11226): pid=10385 uid=0 auid=1000 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=10385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_CMD msg=audit(1401465172.362:11227): pid=10594 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401465172.362:11228): pid=10594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401465172.399:11229): pid=10594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401465172.408:11230): pid=10596 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401465172.408:11231): pid=10596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401465172.442:11232): pid=10596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401465301.619:11233): pid=10650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401465301.619:11234): pid=10650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401465301.620:11235): pid=10650 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=235 res=1 >type=USER_START msg=audit(1401465301.628:11236): pid=10650 uid=0 auid=0 ses=235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401465301.628:11237): pid=10650 uid=0 auid=0 ses=235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401465301.668:11238): pid=10650 uid=0 auid=0 ses=235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401465301.669:11239): pid=10650 uid=0 auid=0 ses=235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401465472.772:11240): pid=10727 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401465472.773:11241): pid=10727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401465472.810:11242): pid=10727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401465472.818:11243): pid=10729 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401465472.819:11244): pid=10729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401465472.851:11245): pid=10729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401465661.675:11246): pid=10838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401465661.675:11247): pid=10838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401465661.676:11248): pid=10838 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=236 res=1 >type=USER_START msg=audit(1401465661.681:11249): pid=10838 uid=0 auid=0 ses=236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401465661.681:11250): pid=10838 uid=0 auid=0 ses=236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401465661.697:11251): avc: denied { read } for pid=10860 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401465661.697:11251): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff66b8db50 a2=90800 a3=0 items=0 ppid=10858 pid=10860 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=236 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401465661.736:11252): pid=10838 uid=0 auid=0 ses=236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401465661.737:11253): pid=10838 uid=0 auid=0 ses=236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401465773.180:11254): pid=10916 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401465773.181:11255): pid=10916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401465773.218:11256): pid=10916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401465773.228:11257): pid=10918 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401465773.228:11258): pid=10918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401465773.261:11259): pid=10918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401466073.598:11260): pid=11043 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401466073.598:11261): pid=11043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401466073.705:11262): pid=11043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401466073.714:11263): pid=11045 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401466073.714:11264): pid=11045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401466073.748:11265): pid=11045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401466201.744:11266): pid=11099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401466201.744:11267): pid=11099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401466201.744:11268): pid=11099 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=237 res=1 >type=USER_START msg=audit(1401466201.749:11269): pid=11099 uid=0 auid=0 ses=237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401466201.749:11270): pid=11099 uid=0 auid=0 ses=237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401466201.795:11271): pid=11099 uid=0 auid=0 ses=237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401466201.796:11272): pid=11099 uid=0 auid=0 ses=237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401466374.081:11273): pid=11177 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401466374.081:11274): pid=11177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401466374.115:11275): pid=11177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401466374.123:11276): pid=11179 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401466374.124:11277): pid=11179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401466374.157:11278): pid=11179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401466674.482:11279): pid=11304 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401466674.482:11280): pid=11304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401466674.518:11281): pid=11304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401466674.526:11282): pid=11306 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401466674.526:11283): pid=11306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401466674.560:11284): pid=11306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401466974.909:11285): pid=11462 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401466974.909:11286): pid=11462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401466974.945:11287): pid=11462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401466974.954:11288): pid=11464 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401466974.954:11289): pid=11464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401466974.988:11290): pid=11464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401467101.803:11291): pid=11520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401467101.803:11292): pid=11520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401467101.804:11293): pid=11520 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=238 res=1 >type=USER_START msg=audit(1401467101.810:11294): pid=11520 uid=0 auid=0 ses=238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401467101.810:11295): pid=11520 uid=0 auid=0 ses=238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401467101.829:11296): pid=11520 uid=0 auid=0 ses=238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401467101.830:11297): pid=11520 uid=0 auid=0 ses=238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401467275.314:11298): pid=11599 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401467275.316:11299): pid=11599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401467275.353:11300): pid=11599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401467275.361:11301): pid=11601 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401467275.362:11302): pid=11601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401467275.473:11303): pid=11601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401467575.811:11304): pid=11724 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401467575.811:11305): pid=11724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401467575.846:11306): pid=11724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401467575.854:11307): pid=11726 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401467575.854:11308): pid=11726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401467575.889:11309): pid=11726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401467876.217:11310): pid=11851 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401467876.217:11311): pid=11851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401467876.251:11312): pid=11851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401467876.260:11313): pid=11853 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401467876.260:11314): pid=11853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401467876.295:11315): pid=11853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401468001.837:11316): pid=11909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401468001.837:11317): pid=11909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401468001.837:11318): pid=11909 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=239 res=1 >type=USER_START msg=audit(1401468001.843:11319): pid=11909 uid=0 auid=0 ses=239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401468001.843:11320): pid=11909 uid=0 auid=0 ses=239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401468001.894:11321): pid=11909 uid=0 auid=0 ses=239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401468001.894:11322): pid=11909 uid=0 auid=0 ses=239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401468176.624:11323): pid=11986 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401468176.625:11324): pid=11986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401468176.659:11325): pid=11986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401468176.668:11326): pid=11988 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401468176.668:11327): pid=11988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401468176.702:11328): pid=11988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401468477.021:11329): pid=12141 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401468477.022:11330): pid=12141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401468477.058:11331): pid=12141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401468477.067:11332): pid=12143 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401468477.067:11333): pid=12143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401468477.100:11334): pid=12143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401468777.427:11335): pid=12268 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401468777.428:11336): pid=12268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401468777.461:11337): pid=12268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401468777.469:11338): pid=12270 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401468777.470:11339): pid=12270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401468777.503:11340): pid=12270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401468901.902:11341): pid=12323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401468901.902:11342): pid=12323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401468901.902:11343): pid=12323 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=240 res=1 >type=USER_START msg=audit(1401468901.908:11344): pid=12323 uid=0 auid=0 ses=240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401468901.908:11345): pid=12323 uid=0 auid=0 ses=240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401468901.959:11346): pid=12323 uid=0 auid=0 ses=240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401468901.960:11347): pid=12323 uid=0 auid=0 ses=240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401469009.977:11348): pid=6894 uid=0 auid=1000 ses=11 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401469010.242:11349): pid=7737 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1401469010.242:11350): pid=7737 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1401469010.250:11351): pid=7737 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7740 suid=1000 rport=44526 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_END msg=audit(1401469010.302:11352): pid=7737 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRED_DISP msg=audit(1401469010.303:11353): pid=7737 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401469010.303:11354): pid=7737 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=7737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401469010.303:11355): pid=7737 uid=0 auid=1000 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=7737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=SERVICE_STOP msg=audit(1401469187.224:11356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@253:3" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401469261.966:11357): pid=12482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401469261.966:11358): pid=12482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401469261.966:11359): pid=12482 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=241 res=1 >type=USER_START msg=audit(1401469261.972:11360): pid=12482 uid=0 auid=0 ses=241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401469261.972:11361): pid=12482 uid=0 auid=0 ses=241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401469261.987:11362): avc: denied { read } for pid=12504 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401469261.987:11362): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7ffff3b4ca80 a2=90800 a3=0 items=0 ppid=12502 pid=12504 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=241 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401469262.033:11363): pid=12482 uid=0 auid=0 ses=241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401469262.034:11364): pid=12482 uid=0 auid=0 ses=241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRYPTO_KEY_USER msg=audit(1401469405.284:11365): pid=12574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=12574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401469405.284:11366): pid=12574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=12574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401469405.306:11367): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12574 suid=74 rport=36626 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401469405.307:11368): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=12574 suid=74 rport=36626 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401469405.512:11369): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36626 acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401469405.512:11370): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=02:88:7d:f7:9f:c4:13:b7:4f:c4:b0:65:ba:87:47:42 rport=36626 acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_ACCT msg=audit(1401469405.514:11371): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="alitke" exe="/usr/sbin/sshd" hostname=192.168.2.1 addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401469405.515:11372): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12574 suid=74 rport=36626 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401469405.515:11373): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1401469405.515:11374): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=192.168.2.1 addr=192.168.2.1 terminal=ssh res=success' >type=LOGIN msg=audit(1401469405.515:11375): pid=12573 uid=0 old-auid=4294967295 new-auid=1000 old-ses=4294967295 new-ses=242 res=1 >type=USER_ROLE_CHANGE msg=audit(1401469405.555:11376): pid=12573 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.2.1 addr=192.168.2.1 terminal=ssh res=success' >type=USER_START msg=audit(1401469405.565:11377): pid=12573 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="alitke" exe="/usr/sbin/sshd" hostname=192.168.2.1 addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401469405.565:11378): pid=12573 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12573 suid=0 rport=36626 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401469405.565:11379): pid=12576 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=12576 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401469405.565:11380): pid=12576 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=12576 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRED_ACQ msg=audit(1401469405.565:11381): pid=12576 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=192.168.2.1 addr=192.168.2.1 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1401469405.569:11382): pid=12573 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=192.168.2.1 addr=192.168.2.1 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1401469405.569:11383): pid=12573 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=192.168.2.1 addr=192.168.2.1 terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401469406.809:11384): pid=12573 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1401469406.809:11385): pid=12573 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1401469406.810:11386): pid=12573 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12576 suid=1000 rport=36626 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_END msg=audit(1401469406.812:11387): pid=12573 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="alitke" exe="/usr/sbin/sshd" hostname=192.168.2.1 addr=192.168.2.1 terminal=ssh res=success' >type=CRED_DISP msg=audit(1401469406.812:11388): pid=12573 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=192.168.2.1 addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401469406.812:11389): pid=12573 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=12573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401469406.812:11390): pid=12573 uid=0 auid=1000 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=12573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_CMD msg=audit(1401469500.353:11391): pid=12656 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401469500.354:11392): pid=12656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469500.357:11393): pid=12656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469500.364:11394): pid=12658 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401469500.365:11395): pid=12658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469500.367:11396): pid=12658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469500.374:11397): pid=12660 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6E206E6F64652E73746172747570202D76206D616E75616C202D2D6F703D757064617465 terminal=? res=success' >type=USER_START msg=audit(1401469500.374:11398): pid=12660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469500.375:11399): pid=12660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469500.383:11400): pid=12662 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469500.383:11401): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469500.396:11402): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469500.416:11403): pid=12665 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469500.416:11404): pid=12665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469500.424:11405): pid=12665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469500.441:11406): pid=12669 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469500.441:11407): pid=12669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469500.448:11408): pid=12669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469507.400:11409): pid=12674 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401469507.401:11410): pid=12674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469507.403:11411): pid=12674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469507.410:11412): pid=12677 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401469507.410:11413): pid=12677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469507.445:11414): pid=12677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469507.455:11415): pid=12688 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469507.456:11416): pid=12688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469507.465:11417): pid=12688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469507.475:11418): pid=12691 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469507.475:11419): pid=12691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469507.484:11420): pid=12691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469517.475:11421): pid=12696 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469517.476:11422): pid=12696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469517.483:11423): pid=12696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469517.676:11424): pid=12698 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469517.676:11425): pid=12698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469517.684:11426): pid=12698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469527.493:11427): pid=12703 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469527.493:11428): pid=12703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469527.501:11429): pid=12703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469527.752:11430): pid=12705 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469527.752:11431): pid=12705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469527.760:11432): pid=12705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469537.510:11433): pid=12710 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469537.510:11434): pid=12710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469537.518:11435): pid=12710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469537.819:11436): pid=12712 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469537.820:11437): pid=12712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469537.828:11438): pid=12712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469547.527:11439): pid=12717 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469547.528:11440): pid=12717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469547.536:11441): pid=12717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469547.904:11442): pid=12719 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469547.904:11443): pid=12719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469547.912:11444): pid=12719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469557.545:11445): pid=12724 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469557.545:11446): pid=12724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469557.553:11447): pid=12724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469558.061:11448): pid=12726 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469558.062:11449): pid=12726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469558.070:11450): pid=12726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469567.562:11451): pid=12731 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469567.563:11452): pid=12731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469567.571:11453): pid=12731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469568.125:11454): pid=12733 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469568.125:11455): pid=12733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469568.133:11456): pid=12733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469577.580:11457): pid=12738 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469577.580:11458): pid=12738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469577.588:11459): pid=12738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469578.290:11460): pid=12740 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469578.290:11461): pid=12740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469578.298:11462): pid=12740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469587.597:11463): pid=12745 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469587.598:11464): pid=12745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469587.605:11465): pid=12745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469597.614:11466): pid=12750 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469597.615:11467): pid=12750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469597.622:11468): pid=12750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469607.632:11469): pid=12755 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469607.632:11470): pid=12755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469607.640:11471): pid=12755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469617.650:11472): pid=12760 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401469617.650:11473): pid=12760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469617.658:11474): pid=12760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469627.666:11475): pid=12765 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469627.666:11476): pid=12765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469627.674:11477): pid=12765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469637.684:11478): pid=12771 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401469637.684:11479): pid=12771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469637.692:11480): pid=12771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469647.702:11481): pid=12776 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469647.702:11482): pid=12776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469647.710:11483): pid=12776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469657.719:11484): pid=12781 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469657.719:11485): pid=12781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469657.727:11486): pid=12781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469667.736:11487): pid=12786 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469667.736:11488): pid=12786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469667.744:11489): pid=12786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469677.754:11490): pid=12791 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469677.754:11491): pid=12791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469677.762:11492): pid=12791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469687.771:11493): pid=12796 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469687.771:11494): pid=12796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469687.779:11495): pid=12796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469697.789:11496): pid=12801 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469697.789:11497): pid=12801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469697.797:11498): pid=12801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469707.806:11499): pid=12806 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469707.806:11500): pid=12806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469707.814:11501): pid=12806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469717.824:11502): pid=12811 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401469717.824:11503): pid=12811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469717.832:11504): pid=12811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469727.841:11505): pid=12816 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401469727.841:11506): pid=12816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469727.849:11507): pid=12816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469737.858:11508): pid=12821 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469737.858:11509): pid=12821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469737.866:11510): pid=12821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469747.876:11511): pid=12826 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469747.876:11512): pid=12826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469747.884:11513): pid=12826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469757.893:11514): pid=12831 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469757.894:11515): pid=12831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469757.901:11516): pid=12831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469767.911:11517): pid=12836 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469767.911:11518): pid=12836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469767.919:11519): pid=12836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469777.928:11520): pid=12841 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401469777.928:11521): pid=12841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469777.936:11522): pid=12841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469787.945:11523): pid=12846 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469787.945:11524): pid=12846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469787.953:11525): pid=12846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469797.964:11526): pid=12851 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469797.964:11527): pid=12851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469797.972:11528): pid=12851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401469801.043:11529): pid=12853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401469801.043:11530): pid=12853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401469801.044:11531): pid=12853 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=243 res=1 >type=USER_START msg=audit(1401469801.050:11532): pid=12853 uid=0 auid=0 ses=243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401469801.050:11533): pid=12853 uid=0 auid=0 ses=243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401469801.081:11534): pid=12853 uid=0 auid=0 ses=243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401469801.082:11535): pid=12853 uid=0 auid=0 ses=243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401469807.982:11536): pid=12861 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469807.983:11537): pid=12861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469807.993:11538): pid=12861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469815.028:11539): pid=12865 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469815.028:11540): pid=12865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469815.037:11541): pid=12865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469818.003:11542): pid=12868 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469818.003:11543): pid=12868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469818.011:11544): pid=12868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469825.124:11545): pid=12872 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469825.124:11546): pid=12872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469825.132:11547): pid=12872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469828.020:11548): pid=12875 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469828.020:11549): pid=12875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469828.028:11550): pid=12875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469835.190:11551): pid=12879 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401469835.190:11552): pid=12879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469835.198:11553): pid=12879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469838.038:11554): pid=12882 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469838.038:11555): pid=12882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469838.046:11556): pid=12882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469845.262:11557): pid=12886 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401469845.262:11558): pid=12886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469845.269:11559): pid=12886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469848.055:11560): pid=12889 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401469848.055:11561): pid=12889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469848.063:11562): pid=12889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469855.411:11563): pid=12893 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469855.412:11564): pid=12893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469855.420:11565): pid=12893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469858.072:11566): pid=12896 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469858.072:11567): pid=12896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469858.080:11568): pid=12896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469865.570:11569): pid=12900 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469865.570:11570): pid=12900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469865.578:11571): pid=12900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469868.089:11572): pid=12903 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469868.089:11573): pid=12903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469868.097:11574): pid=12903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469875.614:11575): pid=12907 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469875.614:11576): pid=12907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469875.622:11577): pid=12907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469878.106:11578): pid=12910 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469878.106:11579): pid=12910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469878.114:11580): pid=12910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469885.690:11581): pid=12914 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469885.691:11582): pid=12914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469885.698:11583): pid=12914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469888.123:11584): pid=12917 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469888.124:11585): pid=12917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469888.132:11586): pid=12917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469895.760:11587): pid=12921 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469895.760:11588): pid=12921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469895.768:11589): pid=12921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469898.141:11590): pid=12924 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469898.141:11591): pid=12924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469898.149:11592): pid=12924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469905.833:11593): pid=12928 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469905.833:11594): pid=12928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469905.841:11595): pid=12928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469908.158:11596): pid=12932 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469908.158:11597): pid=12932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469908.166:11598): pid=12932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469915.887:11599): pid=12936 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401469915.887:11600): pid=12936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469915.895:11601): pid=12936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469916.478:11602): pid=12938 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401469916.478:11603): pid=12938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469916.480:11604): pid=12938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469916.488:11605): pid=12940 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401469916.488:11606): pid=12940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469916.490:11607): pid=12940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469916.497:11608): pid=12942 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6E206E6F64652E73746172747570202D76206D616E75616C202D2D6F703D757064617465 terminal=? res=success' >type=USER_START msg=audit(1401469916.498:11609): pid=12942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469916.499:11610): pid=12942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469916.506:11611): pid=12944 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469916.507:11612): pid=12944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469916.514:11613): pid=12944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469916.533:11614): pid=12946 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469916.533:11615): pid=12946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469916.540:11616): pid=12946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469916.945:11617): pid=12948 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401469916.945:11618): pid=12948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469916.947:11619): pid=12948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469916.954:11620): pid=12951 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401469916.954:11621): pid=12951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469917.023:11622): pid=12951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469917.035:11623): pid=12961 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469917.035:11624): pid=12961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469917.044:11625): pid=12961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469918.176:11626): pid=12965 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469918.176:11627): pid=12965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469918.183:11628): pid=12965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469926.054:11629): pid=12969 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469926.054:11630): pid=12969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469926.062:11631): pid=12969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469926.232:11632): pid=12971 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401469926.232:11633): pid=12971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469926.234:11634): pid=12971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469926.242:11635): pid=12973 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401469926.242:11636): pid=12973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469926.244:11637): pid=12973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469926.251:11638): pid=12975 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6E206E6F64652E73746172747570202D76206D616E75616C202D2D6F703D757064617465 terminal=? res=success' >type=USER_START msg=audit(1401469926.251:11639): pid=12975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469926.253:11640): pid=12975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469926.260:11641): pid=12977 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D65 terminal=? res=success' >type=USER_START msg=audit(1401469926.260:11642): pid=12977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469926.268:11643): pid=12977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469926.285:11644): pid=12979 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469926.285:11645): pid=12979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469926.293:11646): pid=12979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469926.713:11647): pid=12981 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401469926.713:11648): pid=12981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469926.715:11649): pid=12981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469926.722:11650): pid=12984 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401469926.722:11651): pid=12984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469926.730:11652): pid=12984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469926.739:11653): pid=12995 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401469926.739:11654): pid=12995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469926.747:11655): pid=12995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469928.192:11656): pid=12999 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469928.192:11657): pid=12999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469928.199:11658): pid=12999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469933.131:11659): pid=13004 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401469933.131:11660): pid=13004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469933.133:11661): pid=13004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469933.141:11662): pid=13006 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401469933.141:11663): pid=13006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469933.143:11664): pid=13006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469933.150:11665): pid=13008 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6E206E6F64652E73746172747570202D76206D616E75616C202D2D6F703D757064617465 terminal=? res=success' >type=USER_START msg=audit(1401469933.150:11666): pid=13008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469933.151:11667): pid=13008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469933.159:11668): pid=13010 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469933.159:11669): pid=13010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469933.166:11670): pid=13010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469933.184:11671): pid=13013 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469933.185:11672): pid=13013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469933.192:11673): pid=13013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469933.340:11674): pid=13015 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401469933.340:11675): pid=13015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469933.342:11676): pid=13015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469933.349:11677): pid=13018 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401469933.349:11678): pid=13018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469933.357:11679): pid=13018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469933.366:11680): pid=13029 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469933.366:11681): pid=13029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469933.375:11682): pid=13029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469936.095:11683): pid=13032 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469936.095:11684): pid=13032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469936.103:11685): pid=13032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469938.209:11686): pid=13035 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469938.209:11687): pid=13035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469938.217:11688): pid=13035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469946.271:11689): pid=13039 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401469946.272:11690): pid=13039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469946.280:11691): pid=13039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469948.226:11692): pid=13042 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469948.226:11693): pid=13042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469948.234:11694): pid=13042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469954.556:11695): pid=13046 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401469954.557:11696): pid=13046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469954.558:11697): pid=13046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469954.566:11698): pid=13048 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401469954.566:11699): pid=13048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469954.568:11700): pid=13048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469954.575:11701): pid=13050 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6E206E6F64652E73746172747570202D76206D616E75616C202D2D6F703D757064617465 terminal=? res=success' >type=USER_START msg=audit(1401469954.575:11702): pid=13050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469954.576:11703): pid=13050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469954.584:11704): pid=13052 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469954.584:11705): pid=13052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469954.591:11706): pid=13052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469954.610:11707): pid=13055 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D65 terminal=? res=success' >type=USER_START msg=audit(1401469954.610:11708): pid=13055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469954.618:11709): pid=13055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469954.641:11710): pid=13057 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401469954.641:11711): pid=13057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469954.643:11712): pid=13057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469954.650:11713): pid=13060 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401469954.650:11714): pid=13060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469954.658:11715): pid=13060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469954.668:11716): pid=13071 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469954.668:11717): pid=13071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469954.677:11718): pid=13071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469956.444:11719): pid=13075 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469956.445:11720): pid=13075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469956.452:11721): pid=13075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469958.244:11722): pid=13078 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401469958.244:11723): pid=13078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469958.251:11724): pid=13078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469966.579:11725): pid=13082 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469966.579:11726): pid=13082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469966.587:11727): pid=13082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469968.260:11728): pid=13085 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401469968.260:11729): pid=13085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469968.268:11730): pid=13085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469976.749:11731): pid=13089 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469976.749:11732): pid=13089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469976.757:11733): pid=13089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469978.278:11734): pid=13092 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469978.279:11735): pid=13092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469978.287:11736): pid=13092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469988.295:11737): pid=13097 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401469988.295:11738): pid=13097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469988.303:11739): pid=13097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469989.488:11740): pid=13103 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401469989.489:11741): pid=13103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469989.496:11742): pid=13103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469989.561:11743): pid=13105 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F756D6F756E74202D66202D6C202F726865762F646174612D63656E7465722F6D6E742F3139322E3136382E322E313A5F686F6D655F73746F726167655F69736F terminal=? res=success' >type=USER_START msg=audit(1401469989.561:11744): pid=13105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469989.580:11745): pid=13105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469989.588:11746): pid=13108 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401469989.588:11747): pid=13108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469989.590:11748): pid=13108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469989.597:11749): pid=13111 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401469989.598:11750): pid=13111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469989.605:11751): pid=13111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469989.623:11752): pid=13122 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D722032202D75 terminal=? res=success' >type=USER_START msg=audit(1401469989.623:11753): pid=13122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469989.626:11754): pid=13122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469989.638:11755): pid=13128 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401469989.638:11756): pid=13128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469989.640:11757): pid=13128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401469989.648:11758): pid=13134 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401469989.649:11759): pid=13134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401469989.649:11760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@253:3" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401469989.658:11761): pid=13134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470106.916:11762): pid=13173 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D33203139322E3136382E322E313A2F686F6D652F73746F726167652F69736F202F726865762F646174612D63656E7465722F6D6E742F3139322E3136382E322E313A5F686F6D655F73746F726167655F69736F terminal=? res=success' >type=USER_START msg=audit(1401470106.917:11763): pid=13173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470106.939:11764): pid=13173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470106.971:11765): pid=13179 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401470106.971:11766): pid=13179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470106.973:11767): pid=13179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470106.980:11768): pid=13181 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401470106.980:11769): pid=13181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470230.374:11770): pid=13181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470230.381:11771): pid=13211 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401470230.381:11772): pid=13211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470230.382:11773): pid=13211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470230.389:11774): pid=13213 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D75 terminal=? res=success' >type=USER_START msg=audit(1401470230.390:11775): pid=13213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470230.391:11776): pid=13213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470230.398:11777): pid=13215 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401470230.398:11778): pid=13215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470230.399:11779): pid=13215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470230.406:11780): pid=13217 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D64656C657465 terminal=? res=success' >type=USER_START msg=audit(1401470230.406:11781): pid=13217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470230.408:11782): pid=13217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470230.540:11783): pid=13219 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470230.540:11784): pid=13219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470230.541:11785): pid=13219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470230.548:11786): pid=13221 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470230.548:11787): pid=13221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470230.559:11788): pid=13221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470230.568:11789): pid=13229 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470230.569:11790): pid=13229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470230.580:11791): pid=13229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470402.000:11792): pid=13276 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401470402.000:11793): pid=13276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470402.002:11794): pid=13276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470402.009:11795): pid=13278 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401470402.010:11796): pid=13278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470525.655:11797): pid=13278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470525.661:11798): pid=13307 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401470525.662:11799): pid=13307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470525.663:11800): pid=13307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470525.670:11801): pid=13309 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D75 terminal=? res=success' >type=USER_START msg=audit(1401470525.670:11802): pid=13309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470525.671:11803): pid=13309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470525.678:11804): pid=13311 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401470525.678:11805): pid=13311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470525.680:11806): pid=13311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470525.686:11807): pid=13313 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D64656C657465 terminal=? res=success' >type=USER_START msg=audit(1401470525.687:11808): pid=13313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470525.688:11809): pid=13313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470525.797:11810): pid=13316 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470525.797:11811): pid=13316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470525.798:11812): pid=13316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470525.805:11813): pid=13318 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470525.805:11814): pid=13318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470525.815:11815): pid=13318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470525.824:11816): pid=13326 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470525.824:11817): pid=13326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470525.834:11818): pid=13326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470533.679:11819): pid=13330 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470533.679:11820): pid=13330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470533.680:11821): pid=13330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470533.687:11822): pid=13332 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470533.688:11823): pid=13332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470533.721:11824): pid=13332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470533.730:11825): pid=13340 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470533.730:11826): pid=13340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470533.738:11827): pid=13340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470543.953:11828): pid=13345 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470543.954:11829): pid=13345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470543.955:11830): pid=13345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470543.962:11831): pid=13347 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470543.962:11832): pid=13347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470543.970:11833): pid=13347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470543.979:11834): pid=13355 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470543.979:11835): pid=13355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470543.987:11836): pid=13355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470554.256:11837): pid=13359 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470554.256:11838): pid=13359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470554.257:11839): pid=13359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470554.264:11840): pid=13361 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470554.264:11841): pid=13361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470554.300:11842): pid=13361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470554.309:11843): pid=13369 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401470554.309:11844): pid=13369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470554.317:11845): pid=13369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470564.465:11846): pid=13374 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470564.465:11847): pid=13374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470564.466:11848): pid=13374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470564.473:11849): pid=13376 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470564.473:11850): pid=13376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470564.481:11851): pid=13376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470564.490:11852): pid=13384 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401470564.490:11853): pid=13384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470564.498:11854): pid=13384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470574.676:11855): pid=13388 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470574.677:11856): pid=13388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470574.678:11857): pid=13388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470574.684:11858): pid=13390 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470574.685:11859): pid=13390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470574.692:11860): pid=13390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470574.702:11861): pid=13398 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470574.702:11862): pid=13398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470574.710:11863): pid=13398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470584.866:11864): pid=13402 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470584.866:11865): pid=13402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470584.867:11866): pid=13402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470584.874:11867): pid=13404 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470584.875:11868): pid=13404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470584.882:11869): pid=13404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470584.892:11870): pid=13412 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470584.893:11871): pid=13412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470584.901:11872): pid=13412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470595.108:11873): pid=13416 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470595.108:11874): pid=13416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470595.109:11875): pid=13416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470595.116:11876): pid=13418 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470595.116:11877): pid=13418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470595.123:11878): pid=13418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470595.132:11879): pid=13426 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470595.133:11880): pid=13426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470595.141:11881): pid=13426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470605.410:11882): pid=13430 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470605.410:11883): pid=13430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470605.411:11884): pid=13430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470605.418:11885): pid=13432 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470605.418:11886): pid=13432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470605.425:11887): pid=13432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470605.435:11888): pid=13440 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470605.435:11889): pid=13440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470605.443:11890): pid=13440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470615.611:11891): pid=13444 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470615.611:11892): pid=13444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470615.612:11893): pid=13444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470615.619:11894): pid=13446 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470615.619:11895): pid=13446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470615.626:11896): pid=13446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470615.637:11897): pid=13454 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470615.637:11898): pid=13454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470615.646:11899): pid=13454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470625.745:11900): pid=13458 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470625.745:11901): pid=13458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470625.746:11902): pid=13458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470625.753:11903): pid=13460 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470625.753:11904): pid=13460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470625.787:11905): pid=13460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470625.796:11906): pid=13468 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470625.796:11907): pid=13468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470625.804:11908): pid=13468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470636.093:11909): pid=13472 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470636.094:11910): pid=13472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470636.095:11911): pid=13472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470636.101:11912): pid=13474 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470636.102:11913): pid=13474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470636.109:11914): pid=13474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470636.118:11915): pid=13482 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401470636.118:11916): pid=13482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470636.127:11917): pid=13482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470646.317:11918): pid=13486 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470646.317:11919): pid=13486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470646.318:11920): pid=13486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470646.325:11921): pid=13488 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470646.325:11922): pid=13488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470646.365:11923): pid=13488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470646.376:11924): pid=13496 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401470646.376:11925): pid=13496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470646.384:11926): pid=13496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470656.466:11927): pid=13500 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470656.466:11928): pid=13500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470656.467:11929): pid=13500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470656.474:11930): pid=13502 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470656.474:11931): pid=13502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470656.482:11932): pid=13502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470656.491:11933): pid=13510 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401470656.491:11934): pid=13510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470656.500:11935): pid=13510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470666.723:11936): pid=13514 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470666.723:11937): pid=13514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470666.724:11938): pid=13514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470666.731:11939): pid=13516 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470666.731:11940): pid=13516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470666.745:11941): pid=13516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470666.754:11942): pid=13524 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470666.754:11943): pid=13524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470666.763:11944): pid=13524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470676.974:11945): pid=13529 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470676.974:11946): pid=13529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470676.975:11947): pid=13529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470676.982:11948): pid=13531 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470676.982:11949): pid=13531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470676.989:11950): pid=13531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470676.998:11951): pid=13539 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470676.999:11952): pid=13539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470677.007:11953): pid=13539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470687.178:11954): pid=13544 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470687.178:11955): pid=13544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470687.179:11956): pid=13544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470687.186:11957): pid=13546 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470687.187:11958): pid=13546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470687.194:11959): pid=13546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470687.204:11960): pid=13554 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470687.204:11961): pid=13554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470687.213:11962): pid=13554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470697.386:11963): pid=13558 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470697.387:11964): pid=13558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470697.388:11965): pid=13558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470697.395:11966): pid=13560 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470697.395:11967): pid=13560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470697.409:11968): pid=13560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470697.418:11969): pid=13568 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470697.418:11970): pid=13568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470697.427:11971): pid=13568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470700.099:11972): pid=13571 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401470700.099:11973): pid=13571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470700.101:11974): pid=13571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470700.108:11975): pid=13573 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401470700.108:11976): pid=13573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401470701.091:11977): pid=13575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401470701.091:11978): pid=13575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401470701.091:11979): pid=13575 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=244 res=1 >type=USER_START msg=audit(1401470701.097:11980): pid=13575 uid=0 auid=0 ses=244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401470701.098:11981): pid=13575 uid=0 auid=0 ses=244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401470701.155:11982): pid=13575 uid=0 auid=0 ses=244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401470701.156:11983): pid=13575 uid=0 auid=0 ses=244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401470823.752:11984): pid=13573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470823.759:11985): pid=13606 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401470823.760:11986): pid=13606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470823.762:11987): pid=13606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470823.769:11988): pid=13608 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470823.770:11989): pid=13608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470823.771:11990): pid=13608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470823.773:11991): pid=13609 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D75 terminal=? res=success' >type=USER_START msg=audit(1401470823.774:11992): pid=13609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470823.775:11993): pid=13609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470823.778:11994): pid=13611 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470823.778:11995): pid=13611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470823.783:11996): pid=13613 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401470823.783:11997): pid=13613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470823.785:11998): pid=13613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470823.792:11999): pid=13611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470823.794:12000): pid=13621 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D64656C657465 terminal=? res=success' >type=USER_START msg=audit(1401470823.794:12001): pid=13621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470823.796:12002): pid=13621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470823.802:12003): pid=13624 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470823.803:12004): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470823.815:12005): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470834.011:12006): pid=13630 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470834.011:12007): pid=13630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470834.012:12008): pid=13630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470834.019:12009): pid=13632 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470834.019:12010): pid=13632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470834.028:12011): pid=13632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470834.037:12012): pid=13640 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470834.038:12013): pid=13640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470834.047:12014): pid=13640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470844.294:12015): pid=13646 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470844.294:12016): pid=13646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470844.296:12017): pid=13646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470844.302:12018): pid=13648 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470844.302:12019): pid=13648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470844.310:12020): pid=13648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470844.319:12021): pid=13656 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401470844.319:12022): pid=13656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470844.328:12023): pid=13656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470854.405:12024): pid=13660 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470854.406:12025): pid=13660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470854.407:12026): pid=13660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470854.413:12027): pid=13662 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470854.414:12028): pid=13662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470854.421:12029): pid=13662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470854.430:12030): pid=13670 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470854.430:12031): pid=13670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470854.440:12032): pid=13670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470864.634:12033): pid=13674 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470864.635:12034): pid=13674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470864.636:12035): pid=13674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470864.642:12036): pid=13676 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470864.643:12037): pid=13676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470864.650:12038): pid=13676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470864.660:12039): pid=13684 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401470864.660:12040): pid=13684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470864.668:12041): pid=13684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470874.948:12042): pid=13688 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470874.948:12043): pid=13688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470874.949:12044): pid=13688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470874.956:12045): pid=13690 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470874.957:12046): pid=13690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470874.964:12047): pid=13690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470874.973:12048): pid=13698 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470874.973:12049): pid=13698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470874.982:12050): pid=13698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470885.135:12051): pid=13702 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470885.135:12052): pid=13702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470885.136:12053): pid=13702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470885.143:12054): pid=13704 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470885.143:12055): pid=13704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470885.151:12056): pid=13704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470885.160:12057): pid=13712 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470885.160:12058): pid=13712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470885.169:12059): pid=13712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470895.327:12060): pid=13717 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470895.327:12061): pid=13717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470895.328:12062): pid=13717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470895.335:12063): pid=13719 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470895.335:12064): pid=13719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470895.358:12065): pid=13719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470895.367:12066): pid=13727 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470895.367:12067): pid=13727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470895.375:12068): pid=13727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470905.603:12069): pid=13731 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470905.603:12070): pid=13731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470905.604:12071): pid=13731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470905.611:12072): pid=13733 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470905.611:12073): pid=13733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470905.618:12074): pid=13733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470905.629:12075): pid=13741 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470905.629:12076): pid=13741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470905.637:12077): pid=13741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470915.734:12078): pid=13746 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470915.735:12079): pid=13746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470915.735:12080): pid=13746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470915.742:12081): pid=13748 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470915.743:12082): pid=13748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470915.786:12083): pid=13748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470915.796:12084): pid=13756 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470915.796:12085): pid=13756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470915.804:12086): pid=13756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470926.068:12087): pid=13760 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470926.068:12088): pid=13760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470926.069:12089): pid=13760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470926.076:12090): pid=13762 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470926.076:12091): pid=13762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470926.084:12092): pid=13762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470926.093:12093): pid=13770 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470926.093:12094): pid=13770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470926.102:12095): pid=13770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470936.280:12096): pid=13774 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470936.280:12097): pid=13774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470936.281:12098): pid=13774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470936.287:12099): pid=13776 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470936.288:12100): pid=13776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470936.295:12101): pid=13776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470936.305:12102): pid=13784 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470936.305:12103): pid=13784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470936.314:12104): pid=13784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470946.508:12105): pid=13788 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470946.508:12106): pid=13788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470946.509:12107): pid=13788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470946.516:12108): pid=13790 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470946.517:12109): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470946.524:12110): pid=13790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470946.535:12111): pid=13798 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470946.535:12112): pid=13798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470946.543:12113): pid=13798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470956.630:12114): pid=13802 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470956.630:12115): pid=13802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470956.631:12116): pid=13802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470956.638:12117): pid=13804 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470956.638:12118): pid=13804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470956.646:12119): pid=13804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470956.656:12120): pid=13812 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470956.656:12121): pid=13812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470956.664:12122): pid=13812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470966.813:12123): pid=13816 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470966.813:12124): pid=13816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470966.814:12125): pid=13816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470966.821:12126): pid=13818 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470966.821:12127): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470966.962:12128): pid=13818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470966.971:12129): pid=13826 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401470966.971:12130): pid=13826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470966.979:12131): pid=13826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470977.179:12132): pid=13830 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470977.179:12133): pid=13830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470977.180:12134): pid=13830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470977.187:12135): pid=13832 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470977.187:12136): pid=13832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470977.194:12137): pid=13832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470977.204:12138): pid=13840 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470977.204:12139): pid=13840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470977.212:12140): pid=13840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470987.420:12141): pid=13844 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470987.421:12142): pid=13844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470987.422:12143): pid=13844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470987.429:12144): pid=13846 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470987.429:12145): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470987.458:12146): pid=13846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470987.467:12147): pid=13854 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470987.467:12148): pid=13854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470987.475:12149): pid=13854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470997.719:12150): pid=13858 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401470997.719:12151): pid=13858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470997.720:12152): pid=13858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470997.727:12153): pid=13860 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401470997.727:12154): pid=13860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470997.734:12155): pid=13860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401470997.743:12156): pid=13868 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401470997.743:12157): pid=13868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401470997.752:12158): pid=13868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471000.105:12159): pid=13870 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401471000.105:12160): pid=13870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471000.107:12161): pid=13870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471000.114:12162): pid=13872 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401471000.115:12163): pid=13872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471123.507:12164): pid=13872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471123.514:12165): pid=13900 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401471123.514:12166): pid=13900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471123.515:12167): pid=13900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471123.522:12168): pid=13902 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471123.523:12169): pid=13902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471123.524:12170): pid=13902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471123.526:12171): pid=13903 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D75 terminal=? res=success' >type=USER_START msg=audit(1401471123.527:12172): pid=13903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471123.529:12173): pid=13903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471123.531:12174): pid=13905 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471123.532:12175): pid=13905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471123.537:12176): pid=13907 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401471123.537:12177): pid=13907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471123.539:12178): pid=13907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471123.539:12179): pid=13905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471123.548:12180): pid=13916 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D64656C657465 terminal=? res=success' >type=USER_START msg=audit(1401471123.548:12181): pid=13916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471123.550:12182): pid=13916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471123.557:12183): pid=13920 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471123.557:12184): pid=13920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471123.565:12185): pid=13920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471133.907:12186): pid=13924 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471133.907:12187): pid=13924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471133.908:12188): pid=13924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471133.915:12189): pid=13926 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471133.915:12190): pid=13926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471133.923:12191): pid=13926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471133.932:12192): pid=13934 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471133.932:12193): pid=13934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471133.940:12194): pid=13934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471144.170:12195): pid=13938 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471144.170:12196): pid=13938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471144.171:12197): pid=13938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471144.178:12198): pid=13940 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471144.178:12199): pid=13940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471144.185:12200): pid=13940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471144.194:12201): pid=13948 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471144.195:12202): pid=13948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471144.203:12203): pid=13948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471154.495:12204): pid=13953 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471154.495:12205): pid=13953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471154.496:12206): pid=13953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471154.503:12207): pid=13955 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471154.503:12208): pid=13955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471154.511:12209): pid=13955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471154.520:12210): pid=13963 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471154.520:12211): pid=13963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471154.528:12212): pid=13963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471164.627:12213): pid=13967 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471164.627:12214): pid=13967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471164.628:12215): pid=13967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471164.635:12216): pid=13969 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471164.635:12217): pid=13969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471164.643:12218): pid=13969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471164.652:12219): pid=13977 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401471164.652:12220): pid=13977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471164.660:12221): pid=13977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471174.853:12222): pid=13982 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471174.853:12223): pid=13982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471174.854:12224): pid=13982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471174.861:12225): pid=13984 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471174.861:12226): pid=13984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471174.868:12227): pid=13984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471174.877:12228): pid=13992 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471174.877:12229): pid=13992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471174.886:12230): pid=13992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471185.140:12231): pid=13996 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471185.141:12232): pid=13996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471185.141:12233): pid=13996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471185.148:12234): pid=13998 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471185.149:12235): pid=13998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471185.156:12236): pid=13998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471185.165:12237): pid=14006 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401471185.165:12238): pid=14006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471185.174:12239): pid=14006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471195.349:12240): pid=14010 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471195.349:12241): pid=14010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471195.350:12242): pid=14010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471195.357:12243): pid=14012 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471195.357:12244): pid=14012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471195.392:12245): pid=14012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471195.401:12246): pid=14020 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471195.401:12247): pid=14020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471195.410:12248): pid=14020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471205.592:12249): pid=14024 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471205.592:12250): pid=14024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471205.593:12251): pid=14024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471205.600:12252): pid=14026 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471205.600:12253): pid=14026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471205.608:12254): pid=14026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471205.617:12255): pid=14034 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401471205.618:12256): pid=14034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471205.626:12257): pid=14034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471215.716:12258): pid=14038 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471215.716:12259): pid=14038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471215.717:12260): pid=14038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471215.724:12261): pid=14040 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471215.724:12262): pid=14040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471215.763:12263): pid=14040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471215.772:12264): pid=14048 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471215.772:12265): pid=14048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471215.780:12266): pid=14048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471226.008:12267): pid=14052 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471226.009:12268): pid=14052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471226.010:12269): pid=14052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471226.016:12270): pid=14054 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471226.017:12271): pid=14054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471226.024:12272): pid=14054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471226.033:12273): pid=14062 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471226.033:12274): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471226.041:12275): pid=14062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471236.225:12276): pid=14066 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471236.225:12277): pid=14066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471236.226:12278): pid=14066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471236.233:12279): pid=14068 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471236.233:12280): pid=14068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471236.241:12281): pid=14068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471236.250:12282): pid=14077 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401471236.250:12283): pid=14077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471236.259:12284): pid=14077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471246.459:12285): pid=14081 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471246.460:12286): pid=14081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471246.461:12287): pid=14081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471246.467:12288): pid=14083 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471246.468:12289): pid=14083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471246.475:12290): pid=14083 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471246.484:12291): pid=14091 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471246.484:12292): pid=14091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471246.493:12293): pid=14091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471256.639:12294): pid=14095 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471256.639:12295): pid=14095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471256.640:12296): pid=14095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471256.647:12297): pid=14097 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471256.647:12298): pid=14097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471256.655:12299): pid=14097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471256.664:12300): pid=14105 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471256.664:12301): pid=14105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471256.672:12302): pid=14105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471266.750:12303): pid=14109 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471266.750:12304): pid=14109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471266.751:12305): pid=14109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471266.758:12306): pid=14111 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471266.758:12307): pid=14111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471266.766:12308): pid=14111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471266.775:12309): pid=14119 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471266.775:12310): pid=14119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471266.784:12311): pid=14119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471277.012:12312): pid=14124 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471277.012:12313): pid=14124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471277.013:12314): pid=14124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471277.020:12315): pid=14126 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471277.020:12316): pid=14126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471277.028:12317): pid=14126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471277.037:12318): pid=14134 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471277.037:12319): pid=14134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471277.046:12320): pid=14134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471287.233:12321): pid=14138 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471287.233:12322): pid=14138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471287.234:12323): pid=14138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471287.241:12324): pid=14140 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471287.241:12325): pid=14140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471287.259:12326): pid=14140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471287.268:12327): pid=14148 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471287.268:12328): pid=14148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471287.277:12329): pid=14148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471297.409:12330): pid=14152 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471297.410:12331): pid=14152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471297.410:12332): pid=14152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471297.417:12333): pid=14154 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471297.417:12334): pid=14154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471297.425:12335): pid=14154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471297.434:12336): pid=14162 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471297.434:12337): pid=14162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471297.443:12338): pid=14162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471300.086:12339): pid=14164 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401471300.086:12340): pid=14164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471300.088:12341): pid=14164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471300.095:12342): pid=14166 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401471300.096:12343): pid=14166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471420.237:12344): pid=14166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471420.244:12345): pid=14193 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401471420.244:12346): pid=14193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471420.245:12347): pid=14193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471420.252:12348): pid=14195 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D75 terminal=? res=success' >type=USER_START msg=audit(1401471420.253:12349): pid=14195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471420.254:12350): pid=14195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471420.261:12351): pid=14197 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401471420.261:12352): pid=14197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471420.262:12353): pid=14197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471420.269:12354): pid=14199 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D64656C657465 terminal=? res=success' >type=USER_START msg=audit(1401471420.269:12355): pid=14199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471420.271:12356): pid=14199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471423.604:12357): pid=14202 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471423.604:12358): pid=14202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471423.605:12359): pid=14202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471423.612:12360): pid=14204 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471423.612:12361): pid=14204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471423.648:12362): pid=14204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471423.657:12363): pid=14212 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471423.657:12364): pid=14212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471423.666:12365): pid=14212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471433.847:12366): pid=14216 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471433.847:12367): pid=14216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471433.848:12368): pid=14216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471433.855:12369): pid=14218 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471433.856:12370): pid=14218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471433.863:12371): pid=14218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471433.872:12372): pid=14226 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471433.872:12373): pid=14226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471433.881:12374): pid=14226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471444.087:12375): pid=14231 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471444.087:12376): pid=14231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471444.089:12377): pid=14231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471444.095:12378): pid=14233 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471444.096:12379): pid=14233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471444.103:12380): pid=14233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471444.112:12381): pid=14241 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401471444.112:12382): pid=14241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471444.121:12383): pid=14241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471454.174:12384): pid=14245 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471454.174:12385): pid=14245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471454.175:12386): pid=14245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471454.182:12387): pid=14247 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471454.182:12388): pid=14247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471454.189:12389): pid=14247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471454.199:12390): pid=14255 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471454.199:12391): pid=14255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471454.207:12392): pid=14255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471464.412:12393): pid=14259 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471464.412:12394): pid=14259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471464.413:12395): pid=14259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471464.420:12396): pid=14261 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471464.420:12397): pid=14261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471464.428:12398): pid=14261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471464.437:12399): pid=14269 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471464.437:12400): pid=14269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471464.445:12401): pid=14269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471474.698:12402): pid=14273 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471474.698:12403): pid=14273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471474.699:12404): pid=14273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471474.706:12405): pid=14275 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471474.706:12406): pid=14275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471474.714:12407): pid=14275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471474.723:12408): pid=14283 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401471474.723:12409): pid=14283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471474.731:12410): pid=14283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471485.006:12411): pid=14287 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471485.006:12412): pid=14287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471485.007:12413): pid=14287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471485.014:12414): pid=14289 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471485.014:12415): pid=14289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471485.021:12416): pid=14289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471485.031:12417): pid=14297 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471485.031:12418): pid=14297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471485.039:12419): pid=14297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471495.228:12420): pid=14301 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471495.228:12421): pid=14301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471495.229:12422): pid=14301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471495.236:12423): pid=14303 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471495.236:12424): pid=14303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471495.269:12425): pid=14303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471495.279:12426): pid=14311 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471495.280:12427): pid=14311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471495.288:12428): pid=14311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471505.437:12429): pid=14316 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471505.437:12430): pid=14316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471505.438:12431): pid=14316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471505.445:12432): pid=14318 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471505.445:12433): pid=14318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471505.453:12434): pid=14318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471505.462:12435): pid=14326 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471505.462:12436): pid=14326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471505.470:12437): pid=14326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471515.774:12438): pid=14331 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471515.774:12439): pid=14331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471515.775:12440): pid=14331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471515.784:12441): pid=14333 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471515.784:12442): pid=14333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471515.814:12443): pid=14333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471515.823:12444): pid=14341 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401471515.823:12445): pid=14341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471515.832:12446): pid=14341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471526.014:12447): pid=14346 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471526.014:12448): pid=14346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471526.015:12449): pid=14346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471526.022:12450): pid=14348 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471526.022:12451): pid=14348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471526.029:12452): pid=14348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471526.039:12453): pid=14356 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471526.040:12454): pid=14356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471526.048:12455): pid=14356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471536.237:12456): pid=14360 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471536.238:12457): pid=14360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471536.239:12458): pid=14360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471536.245:12459): pid=14362 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471536.246:12460): pid=14362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471536.253:12461): pid=14362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471536.262:12462): pid=14370 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471536.263:12463): pid=14370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471536.271:12464): pid=14370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471546.367:12465): pid=14374 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471546.367:12466): pid=14374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471546.368:12467): pid=14374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471546.375:12468): pid=14376 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471546.375:12469): pid=14376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471546.382:12470): pid=14376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471546.392:12471): pid=14384 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471546.392:12472): pid=14384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471546.400:12473): pid=14384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471556.669:12474): pid=14389 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471556.669:12475): pid=14389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471556.670:12476): pid=14389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471556.677:12477): pid=14391 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471556.678:12478): pid=14391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471556.685:12479): pid=14391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471556.694:12480): pid=14399 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471556.694:12481): pid=14399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471556.703:12482): pid=14399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471566.778:12483): pid=14403 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471566.778:12484): pid=14403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471566.779:12485): pid=14403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471566.786:12486): pid=14405 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471566.786:12487): pid=14405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471566.795:12488): pid=14405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471566.804:12489): pid=14413 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471566.804:12490): pid=14413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471566.812:12491): pid=14413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471577.069:12492): pid=14417 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471577.069:12493): pid=14417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471577.070:12494): pid=14417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471577.077:12495): pid=14419 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471577.077:12496): pid=14419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471577.100:12497): pid=14419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471577.110:12498): pid=14427 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401471577.110:12499): pid=14427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471577.118:12500): pid=14427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471587.231:12501): pid=14432 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471587.231:12502): pid=14432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471587.232:12503): pid=14432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471587.239:12504): pid=14434 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471587.239:12505): pid=14434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471587.260:12506): pid=14434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471587.269:12507): pid=14443 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471587.269:12508): pid=14443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471587.278:12509): pid=14443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471597.491:12510): pid=14447 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471597.491:12511): pid=14447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471597.492:12512): pid=14447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471597.499:12513): pid=14449 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471597.499:12514): pid=14449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471597.506:12515): pid=14449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471597.516:12516): pid=14457 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401471597.516:12517): pid=14457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471597.524:12518): pid=14457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471600.197:12519): pid=14459 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401471600.197:12520): pid=14459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471600.199:12521): pid=14459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471600.206:12522): pid=14461 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401471600.206:12523): pid=14461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401471601.164:12524): pid=14463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401471601.165:12525): pid=14463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401471601.165:12526): pid=14463 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=245 res=1 >type=USER_START msg=audit(1401471601.171:12527): pid=14463 uid=0 auid=0 ses=245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401471601.171:12528): pid=14463 uid=0 auid=0 ses=245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401471601.201:12529): pid=14463 uid=0 auid=0 ses=245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401471601.201:12530): pid=14463 uid=0 auid=0 ses=245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401471723.602:12531): pid=14461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471723.609:12532): pid=14493 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401471723.610:12533): pid=14493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471723.612:12534): pid=14493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471723.619:12535): pid=14495 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471723.619:12536): pid=14495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471723.621:12537): pid=14495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471723.623:12538): pid=14496 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D75 terminal=? res=success' >type=USER_START msg=audit(1401471723.623:12539): pid=14496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471723.625:12540): pid=14496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471723.629:12541): pid=14498 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471723.630:12542): pid=14498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471723.634:12543): pid=14500 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401471723.634:12544): pid=14500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471723.635:12545): pid=14500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471723.642:12546): pid=14503 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D64656C657465 terminal=? res=success' >type=USER_START msg=audit(1401471723.643:12547): pid=14503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471723.644:12548): pid=14503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471723.671:12549): pid=14498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471723.681:12550): pid=14512 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471723.681:12551): pid=14512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471723.693:12552): pid=14512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471816.502:12553): pid=14534 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471816.503:12554): pid=14534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471816.504:12555): pid=14534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471816.511:12556): pid=14536 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471816.511:12557): pid=14536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471816.519:12558): pid=14536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471816.530:12559): pid=14544 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401471816.530:12560): pid=14544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471816.540:12561): pid=14544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471828.647:12562): pid=14549 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471828.648:12563): pid=14549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471828.649:12564): pid=14549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471828.656:12565): pid=14551 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471828.656:12566): pid=14551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471828.664:12567): pid=14551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471828.675:12568): pid=14559 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471828.675:12569): pid=14559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471828.683:12570): pid=14559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471840.797:12571): pid=14563 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471840.798:12572): pid=14563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471840.799:12573): pid=14563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471840.806:12574): pid=14565 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471840.806:12575): pid=14565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471840.813:12576): pid=14565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471840.824:12577): pid=14573 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471840.824:12578): pid=14573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471840.832:12579): pid=14573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471877.058:12580): pid=14583 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471877.059:12581): pid=14583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471877.060:12582): pid=14583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471877.067:12583): pid=14585 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471877.067:12584): pid=14585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471877.098:12585): pid=14585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471877.108:12586): pid=14593 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401471877.108:12587): pid=14593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471877.116:12588): pid=14593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471887.193:12589): pid=14597 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471887.193:12590): pid=14597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471887.194:12591): pid=14597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471887.201:12592): pid=14599 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471887.202:12593): pid=14599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471887.209:12594): pid=14599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471887.218:12595): pid=14607 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471887.218:12596): pid=14607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471887.227:12597): pid=14607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471897.326:12598): pid=14611 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401471897.326:12599): pid=14611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471897.327:12600): pid=14611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471897.334:12601): pid=14613 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401471897.334:12602): pid=14613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471897.360:12603): pid=14613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471897.370:12604): pid=14621 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401471897.370:12605): pid=14621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471897.378:12606): pid=14621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471900.090:12607): pid=14624 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401471900.090:12608): pid=14624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401471900.092:12609): pid=14624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401471900.099:12610): pid=14626 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401471900.099:12611): pid=14626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472022.494:12612): pid=14626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472022.502:12613): pid=14690 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401472022.502:12614): pid=14690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472022.503:12615): pid=14690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472022.505:12616): pid=14691 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401472022.506:12617): pid=14691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472022.507:12618): pid=14691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472022.511:12619): pid=14694 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401472022.512:12620): pid=14694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472022.516:12621): pid=14695 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D75 terminal=? res=success' >type=USER_START msg=audit(1401472022.516:12622): pid=14695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472022.517:12623): pid=14695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472022.524:12624): pid=14694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472022.526:12625): pid=14702 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401472022.526:12626): pid=14702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472022.527:12627): pid=14702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472022.535:12628): pid=14706 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401472022.535:12629): pid=14706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472022.539:12630): pid=14708 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D64656C657465 terminal=? res=success' >type=USER_START msg=audit(1401472022.539:12631): pid=14708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472022.541:12632): pid=14708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472022.547:12633): pid=14706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401472501.210:12634): pid=14851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401472501.210:12635): pid=14851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401472501.211:12636): pid=14851 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=246 res=1 >type=USER_START msg=audit(1401472501.217:12637): pid=14851 uid=0 auid=0 ses=246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401472501.217:12638): pid=14851 uid=0 auid=0 ses=246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401472501.480:12639): pid=14851 uid=0 auid=0 ses=246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401472501.481:12640): pid=14851 uid=0 auid=0 ses=246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401472512.208:12641): pid=14910 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401472512.209:12642): pid=14910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472512.211:12643): pid=14910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472512.219:12644): pid=14912 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401472512.219:12645): pid=14912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472632.357:12646): pid=14912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472632.364:12647): pid=14943 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401472632.364:12648): pid=14943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472632.365:12649): pid=14943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472632.372:12650): pid=14945 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D75 terminal=? res=success' >type=USER_START msg=audit(1401472632.373:12651): pid=14945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472632.374:12652): pid=14945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472632.380:12653): pid=14947 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401472632.381:12654): pid=14947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472632.382:12655): pid=14947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472632.389:12656): pid=14949 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D64656C657465 terminal=? res=success' >type=USER_START msg=audit(1401472632.389:12657): pid=14949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472632.391:12658): pid=14949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472632.504:12659): pid=14952 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401472632.504:12660): pid=14952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472632.505:12661): pid=14952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472632.512:12662): pid=14954 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401472632.513:12663): pid=14954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472632.597:12664): pid=14954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472632.606:12665): pid=14962 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401472632.606:12666): pid=14962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472632.620:12667): pid=14962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472654.177:12668): pid=14971 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401472654.178:12669): pid=14971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472654.179:12670): pid=14971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472654.186:12671): pid=14973 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401472654.187:12672): pid=14973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472774.326:12673): pid=14973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472774.333:12674): pid=15005 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401472774.333:12675): pid=15005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472774.335:12676): pid=15005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472774.341:12677): pid=15007 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D75 terminal=? res=success' >type=USER_START msg=audit(1401472774.342:12678): pid=15007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472774.343:12679): pid=15007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472774.350:12680): pid=15009 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401472774.350:12681): pid=15009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472774.351:12682): pid=15009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472774.358:12683): pid=15011 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D64656C657465 terminal=? res=success' >type=USER_START msg=audit(1401472774.358:12684): pid=15011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472774.360:12685): pid=15011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472774.418:12686): pid=15013 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401472774.418:12687): pid=15013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472774.419:12688): pid=15013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472774.426:12689): pid=15015 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401472774.426:12690): pid=15015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472774.437:12691): pid=15015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472774.446:12692): pid=15023 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401472774.447:12693): pid=15023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472774.457:12694): pid=15023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472801.822:12695): pid=15033 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401472801.823:12696): pid=15033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472801.824:12697): pid=15033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472801.831:12698): pid=15035 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401472801.832:12699): pid=15035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401472861.488:12700): pid=15051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401472861.488:12701): pid=15051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401472861.489:12702): pid=15051 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=247 res=1 >type=USER_START msg=audit(1401472861.496:12703): pid=15051 uid=0 auid=0 ses=247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401472861.497:12704): pid=15051 uid=0 auid=0 ses=247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401472861.513:12705): avc: denied { read } for pid=15073 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401472861.513:12705): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffe5cc61c0 a2=90800 a3=0 items=0 ppid=15071 pid=15073 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=247 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401472864.887:12706): pid=15051 uid=0 auid=0 ses=247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401472864.888:12707): pid=15051 uid=0 auid=0 ses=247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401472925.473:12708): pid=15035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472925.483:12709): pid=15092 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401472925.483:12710): pid=15092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472925.485:12711): pid=15092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472925.492:12712): pid=15094 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D75 terminal=? res=success' >type=USER_START msg=audit(1401472925.492:12713): pid=15094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472925.493:12714): pid=15094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472925.500:12715): pid=15096 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401472925.500:12716): pid=15096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472925.502:12717): pid=15096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472925.509:12718): pid=15098 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D64656C657465 terminal=? res=success' >type=USER_START msg=audit(1401472925.509:12719): pid=15098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472925.510:12720): pid=15098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472925.575:12721): pid=15100 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401472925.575:12722): pid=15100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472925.576:12723): pid=15100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472925.583:12724): pid=15102 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401472925.583:12725): pid=15102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472925.611:12726): pid=15102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401472925.621:12727): pid=15110 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401472925.621:12728): pid=15110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401472925.633:12729): pid=15110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401473069.049:12730): pid=15151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=15151 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401473069.049:12731): pid=15151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=15151 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401473069.050:12732): pid=15150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15151 suid=74 rport=36823 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401473069.050:12733): pid=15150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=15151 suid=74 rport=36823 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401473069.105:12734): pid=15150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=36823 acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401473069.105:12735): pid=15150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=02:88:7d:f7:9f:c4:13:b7:4f:c4:b0:65:ba:87:47:42 rport=36823 acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_ACCT msg=audit(1401473069.108:12736): pid=15150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401473069.109:12737): pid=15150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15151 suid=74 rport=36823 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401473069.109:12738): pid=15150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1401473069.110:12739): pid=15150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=LOGIN msg=audit(1401473069.110:12740): pid=15150 uid=0 old-auid=4294967295 new-auid=1000 old-ses=4294967295 new-ses=248 res=1 >type=USER_ROLE_CHANGE msg=audit(1401473069.151:12741): pid=15150 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_START msg=audit(1401473069.160:12742): pid=15150 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401473069.161:12743): pid=15150 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15150 suid=0 rport=36823 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401473069.161:12744): pid=15153 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=15153 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401473069.161:12745): pid=15153 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=15153 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRED_ACQ msg=audit(1401473069.162:12746): pid=15153 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1401473069.166:12747): pid=15150 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1401473069.167:12748): pid=15150 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=/dev/pts/0 res=success' >type=USER_AUTH msg=audit(1401473085.360:12749): pid=15187 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="alitke" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_ACCT msg=audit(1401473085.361:12750): pid=15187 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="alitke" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401473085.362:12751): pid=15187 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke" cmd=697363736961646D202D6D20646973636F76657279 terminal=pts/0 res=success' >type=USER_START msg=audit(1401473085.363:12752): pid=15187 uid=0 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401473085.366:12753): pid=15187 uid=0 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401473097.088:12754): pid=15195 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke" cmd=697363736961646D202D6D20646973636F76657279202D70203139322E3136382E322E313A33323630 terminal=pts/0 res=success' >type=USER_START msg=audit(1401473097.089:12755): pid=15195 uid=0 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401473097.090:12756): pid=15195 uid=0 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401473103.015:12757): pid=15201 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401473103.017:12758): pid=15201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473103.270:12759): pid=15201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473103.278:12760): pid=15203 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401473103.278:12761): pid=15203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473104.610:12762): pid=15205 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke" cmd=697363736961646D202D6D20646973636F76657279202D70203139322E3136382E322E313A33323630202D terminal=pts/0 res=success' >type=USER_START msg=audit(1401473104.610:12763): pid=15205 uid=0 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401473104.612:12764): pid=15205 uid=0 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401473107.248:12765): pid=15209 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke" cmd=697363736961646D202D6D20646973636F76657279202D70203139322E3136382E322E313A33323630202D6C terminal=pts/0 res=success' >type=USER_START msg=audit(1401473107.248:12766): pid=15209 uid=0 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401473111.309:12767): pid=15209 uid=0 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401473141.616:12768): pid=15221 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke" cmd=697363736961646D202D6D20646973636F76657279202D70203139322E3136382E322E313A33323630202D6C terminal=pts/0 res=success' >type=USER_START msg=audit(1401473141.616:12769): pid=15221 uid=0 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401473142.950:12770): pid=15221 uid=0 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401473179.113:12771): pid=15233 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke" cmd=697363736961646D202D6D20646973636F76657279202D742073656E6474617267657473202D70203139322E3136382E322E31 terminal=pts/0 res=success' >type=USER_START msg=audit(1401473179.113:12772): pid=15233 uid=0 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401473183.797:12773): pid=15233 uid=0 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401473195.943:12774): pid=15240 uid=1000 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke" cmd=73657276696365206E6574776F726B2072657374617274 terminal=pts/0 res=success' >type=USER_START msg=audit(1401473195.944:12775): pid=15240 uid=0 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=ANOM_PROMISCUOUS msg=audit(1401473196.241:12776): dev=em1 prom=0 old_prom=256 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1401473196.241:12776): arch=c000003e syscall=16 success=yes exit=0 a0=3 a1=89a3 a2=7fff2b05e290 a3=3be613ce70 items=0 ppid=15332 pid=15384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:brctl_t:s0 key=(null) >type=SERVICE_STOP msg=audit(1401473196.466:12777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473196.585:12778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473196.588:12779): pid=15240 uid=0 auid=1000 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401473224.168:12780): pid=15203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473224.176:12781): pid=15632 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401473224.177:12782): pid=15632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473224.179:12783): pid=15632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473224.187:12784): pid=15634 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D75 terminal=? res=success' >type=USER_START msg=audit(1401473224.187:12785): pid=15634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473224.188:12786): pid=15634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473224.195:12787): pid=15636 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206966616365 terminal=? res=success' >type=USER_START msg=audit(1401473224.195:12788): pid=15636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473224.196:12789): pid=15636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473224.203:12790): pid=15638 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D64656C657465 terminal=? res=success' >type=USER_START msg=audit(1401473224.203:12791): pid=15638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473224.205:12792): pid=15638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401473401.897:12793): pid=15686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401473401.897:12794): pid=15686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401473401.897:12795): pid=15686 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=249 res=1 >type=USER_START msg=audit(1401473401.904:12796): pid=15686 uid=0 auid=0 ses=249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401473401.904:12797): pid=15686 uid=0 auid=0 ses=249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401473401.970:12798): pid=15686 uid=0 auid=0 ses=249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401473401.971:12799): pid=15686 uid=0 auid=0 ses=249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401473549.381:12800): pid=15150 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=? terminal=ssh res=success' >type=CRED_DISP msg=audit(1401473549.381:12801): pid=15150 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=? terminal=ssh res=success' >type=USER_END msg=audit(1401473549.381:12802): pid=15150 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1401473549.381:12803): pid=15150 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1401473549.382:12804): pid=15150 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=15150 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401473549.382:12805): pid=15150 uid=0 auid=1000 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=15150 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_ACCT msg=audit(1401473549.388:12806): pid=15725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1401473549.388:12807): pid=15725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401473549.397:12808): pid=15732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting acct="alitke" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1401473549.398:12809): pid=15732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="alitke" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1401473549.435:12810): pid=1627 uid=0 auid=0 ses=10 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success' >type=USER_END msg=audit(1401473549.544:12811): pid=15731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401473549.546:12812): pid=919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401473549.546:12813): pid=919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473549.546:12814): pid=1627 uid=0 auid=0 ses=10 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/login" hostname=? addr=? terminal=tty1 res=success' >type=SERVICE_STOP msg=audit(1401473549.547:12815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.547:12816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rngd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.547:12817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="smartd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.548:12818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="avahi-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.548:12819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.549:12820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="irqbalance" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.550:12821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="chronyd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.550:12822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="mcelog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_STOP msg=audit(1401473549.551:12823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.552:12824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.553:12825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.553:12826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.556:12827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.557:12828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-machined" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.558:12829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@253:3" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.559:12830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@8:2" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.559:12831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.564:12832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_STOP msg=audit(1401473549.566:12833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="tuned" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_STOP msg=audit(1401473549.566:12834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.566:12835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsid" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.570:12836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="multipathd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.603:12837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.847:12838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="user@0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473549.847:12839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="user@1000" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=DAEMON_START msg=audit(1401473614.155:7354): auditd start, ver=2.3.6 format=raw kernel=3.14.4-200.fc20.x86_64 auid=4294967295 pid=627 subj=system_u:system_r:auditd_t:s0 res=success >type=SYSTEM_BOOT msg=audit(1401473614.169:6): pid=639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='init exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473614.173:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473614.182:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rngd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473614.184:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="smartd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473614.191:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473614.196:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="irqbalance" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473614.199:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473614.214:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ipmievd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1401473614.216:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="mcelog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473614.219:15): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1401473614.237:16): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1401473614.237:16): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=16a9450 items=0 ppid=641 pid=679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=SERVICE_START msg=audit(1401473614.244:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="chronyd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473614.245:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iptables" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473614.296:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="avahi-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473614.305:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473614.408:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="tuned" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473615.025:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sanlock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473615.026:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="wdmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473615.180:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473615.187:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473615.192:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsid" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473615.439:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473615.594:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1401473615.856:29): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1401473615.856:29): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=41a396 a2=0 a3=0 items=0 ppid=1012 pid=1013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1401473616.160:30): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1401473616.160:30): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1401473616.160:30): arch=c000003e syscall=56 success=yes exit=1059 a0=6c020011 a1=7f62f81a7f40 a2=4 a3=7f630062f240 items=0 ppid=1 pid=980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_START msg=audit(1401473616.489:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1401473617.756:32): dev=em1 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1401473617.756:32): arch=c000003e syscall=16 success=yes exit=0 a0=3 a1=89a2 a2=7fff706ea990 a3=ffffffffffffff0d items=0 ppid=1297 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:brctl_t:s0 key=(null) >type=SERVICE_START msg=audit(1401473622.479:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473622.616:34): pid=1472 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D703365504B6543 terminal=? res=success' >type=USER_START msg=audit(1401473622.617:35): pid=1472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473622.618:36): pid=1472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473622.803:37): pid=1491 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=USER_START msg=audit(1401473622.803:38): pid=1491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473622.810:39): pid=1491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473622.932:40): pid=1495 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401473622.932:41): pid=1495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473622.934:42): pid=1495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473622.941:43): pid=1497 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401473622.941:44): pid=1497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473622.979:45): pid=1497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473622.994:46): pid=1513 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473622.995:47): pid=1513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473623.007:48): pid=1513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473623.032:49): pid=1517 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473623.032:50): pid=1517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473623.038:51): pid=1517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473623.056:52): pid=1520 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473623.056:53): pid=1520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473623.062:54): pid=1520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473623.072:55): pid=1522 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473623.072:56): pid=1522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473623.078:57): pid=1522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473625.859:58): pid=1533 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D33203139322E3136382E322E313A2F686F6D652F73746F726167652F69736F202F726865762F646174612D63656E7465722F6D6E742F3139322E3136382E322E313A5F686F6D655F73746F726167655F69736F terminal=? res=success' >type=USER_START msg=audit(1401473625.860:59): pid=1533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473625.896:60): pid=1533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473626.012:61): pid=1545 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401473626.012:62): pid=1545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473626.026:63): pid=1545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473626.032:64): pid=1547 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401473626.033:65): pid=1547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473626.543:66): pid=1547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473626.550:67): pid=1555 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6E206E6F64652E73746172747570202D76206D616E75616C202D2D6F703D757064617465 terminal=? res=success' >type=USER_START msg=audit(1401473626.550:68): pid=1555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473626.552:69): pid=1555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473626.559:70): pid=1557 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473626.559:71): pid=1557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473626.567:72): pid=1557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473626.593:73): pid=1561 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401473626.594:74): pid=1561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473626.616:75): pid=1561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473626.623:76): pid=1568 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401473626.623:77): pid=1568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473626.637:78): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@8:32" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473626.691:79): pid=1568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473626.701:80): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@253:4" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473626.701:81): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@253:3" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473626.703:82): pid=1600 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473626.703:83): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473626.749:84): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473626.756:85): pid=1606 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473626.756:86): pid=1606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473626.894:87): pid=1606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473627.052:88): pid=1617 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035313633376431663234323365346263353962623663613637387C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401473627.052:89): pid=1617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473627.097:90): pid=1617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473627.104:91): pid=1619 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C766368616E6765202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6175746F6261636B7570206E202D2D617661696C61626C6520792061323436333836622D663331642D343531642D623861362D3266346330646661323762342F696473 terminal=? res=success' >type=USER_START msg=audit(1401473627.104:92): pid=1619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473627.241:93): pid=1619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473627.248:94): pid=1629 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473627.248:95): pid=1629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473627.389:96): pid=1629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473627.396:97): pid=1639 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473627.397:98): pid=1639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473627.578:99): pid=1639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473627.587:100): pid=1665 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473627.587:101): pid=1665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473627.636:102): pid=1665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473627.656:103): pid=1672 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473627.656:104): pid=1672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473627.664:105): pid=1674 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473627.664:106): pid=1674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473627.690:107): pid=1672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473627.713:108): pid=1674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473627.724:109): pid=1677 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473627.724:110): pid=1677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473627.728:111): pid=1678 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473627.728:112): pid=1678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473627.775:113): pid=1678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473627.788:114): pid=1688 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473627.788:115): pid=1688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1401473627.791:116): avc: denied { read } for pid=1692 comm="sanlock" name="253:6" dev="sysfs" ino=24195 scontext=system_u:system_r:sanlock_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1401473627.791:116): arch=c000003e syscall=2 success=no exit=-13 a0=7ffdb69fc870 a1=80000 a2=7ffdb69fc884 a3=0 items=0 ppid=1 pid=1692 auid=4294967295 uid=179 gid=179 euid=179 suid=179 fsuid=179 egid=179 sgid=179 fsgid=179 tty=(none) ses=4294967295 comm="sanlock" exe="/usr/sbin/sanlock" subj=system_u:system_r:sanlock_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1401473627.876:117): pid=1688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473627.881:118): pid=1677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473627.895:119): pid=1700 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473627.895:120): pid=1700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473627.943:121): pid=1700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473627.960:122): pid=1708 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473627.960:123): pid=1708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473628.105:124): pid=1708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473628.113:125): pid=1720 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C766368616E6765202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035313633376431663234323365346263353962623663613637387C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6175746F6261636B7570206E202D2D617661696C61626C6520792030393232303733322D663236342D343862612D396462382D3738316466363136643665382F6C6561736573 terminal=? res=success' >type=USER_START msg=audit(1401473628.113:126): pid=1720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473628.256:127): pid=1720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473628.264:128): pid=1730 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=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 terminal=? res=success' >type=USER_START msg=audit(1401473628.264:129): pid=1730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473628.445:130): pid=1730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473628.453:131): pid=1756 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473628.453:132): pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473628.484:133): pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1401473628.493:134): avc: denied { read } for pid=1760 comm="sanlock" name="253:12" dev="sysfs" ino=24693 scontext=system_u:system_r:sanlock_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1401473628.493:134): arch=c000003e syscall=2 success=no exit=-13 a0=7ffdb61fb870 a1=80000 a2=7ffdb61fb885 a3=0 items=0 ppid=1 pid=1760 auid=4294967295 uid=179 gid=179 euid=179 suid=179 fsuid=179 egid=179 sgid=179 fsgid=179 tty=(none) ses=4294967295 comm="sanlock" exe="/usr/sbin/sanlock" subj=system_u:system_r:sanlock_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_START msg=audit(1401473738.669:135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsi" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1401473739.885:136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-activation-net" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473739.885:137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-activation-net" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473739.888:138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-journal-flush" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473739.888:139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-journal-flush" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473740.012:140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473740.049:141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473740.090:142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473740.113:143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473740.113:144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473740.124:145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit-wait" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473740.124:146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit-wait" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473740.124:147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-start" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473740.124:148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-start" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473740.144:149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SYSTEM_BOOT msg=audit(1401473740.215:150): pid=1914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='init exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SYSTEM_RUNLEVEL msg=audit(1401473740.216:151): pid=1914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473740.236:152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473740.236:153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401473770.222:154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401473770.222:155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473928.112:156): pid=2020 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473928.113:157): pid=2020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473928.165:158): pid=2020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473928.175:159): pid=2022 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473928.176:160): pid=2022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473928.207:161): pid=2022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473928.717:162): pid=2028 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401473928.718:163): pid=2028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473928.764:164): pid=2028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401473928.772:165): pid=2030 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035313633376431663234323365346263353962623663613637387C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202030393232303733322D663236342D343862612D396462382D373831646636313664366538 terminal=? res=success' >type=USER_START msg=audit(1401473928.772:166): pid=2030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401473928.803:167): pid=2030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474228.514:168): pid=2187 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474228.514:169): pid=2187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474228.559:170): pid=2187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474228.567:171): pid=2189 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474228.567:172): pid=2189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474228.597:173): pid=2189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474229.002:174): pid=2195 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474229.003:175): pid=2195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474229.051:176): pid=2195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474229.059:177): pid=2197 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474229.059:178): pid=2197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474229.091:179): pid=2197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401474301.885:180): pid=2238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401474301.885:181): pid=2238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401474301.886:182): pid=2238 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=1 res=1 >type=USER_START msg=audit(1401474301.909:183): pid=2238 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401474301.909:184): pid=2238 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401474301.970:185): pid=2240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1401474301.970:186): pid=2240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401474302.046:187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="user@0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1401474302.114:188): pid=2238 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401474302.115:189): pid=2238 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401474350.542:190): pid=2276 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401474350.542:191): pid=2276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474350.565:192): pid=2276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474350.572:193): pid=2279 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401474350.572:194): pid=2279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474350.667:195): pid=2279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474350.678:196): pid=2300 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474350.678:197): pid=2300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474350.730:198): pid=2300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474350.744:199): pid=2303 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474350.744:200): pid=2303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474350.796:201): pid=2303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474350.805:202): pid=2305 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474350.805:203): pid=2305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474350.856:204): pid=2305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474350.865:205): pid=2307 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035313633376431663234323365346263353962623663613637387C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652030393232303733322D663236342D343862612D396462382D373831646636313664366538 terminal=? res=success' >type=USER_START msg=audit(1401474350.865:206): pid=2307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474350.911:207): pid=2307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474350.925:208): pid=2310 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035313633376431663234323365346263353962623663613637387C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652030393232303733322D663236342D343862612D396462382D373831646636313664366538 terminal=? res=success' >type=USER_START msg=audit(1401474350.926:209): pid=2310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474350.975:210): pid=2310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474352.986:211): pid=2314 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474352.986:212): pid=2314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474353.036:213): pid=2314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474353.043:214): pid=2317 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474353.043:215): pid=2317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474353.094:216): pid=2317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474353.106:217): pid=2320 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474353.106:218): pid=2320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474353.140:219): pid=2320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474353.147:220): pid=2322 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474353.148:221): pid=2322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474353.277:222): pid=2322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474353.318:223): pid=2324 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401474353.318:224): pid=2324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474353.341:225): pid=2324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474353.347:226): pid=2327 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401474353.347:227): pid=2327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474353.366:228): pid=2327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474358.732:229): pid=2346 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474358.732:230): pid=2346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474358.784:231): pid=2346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474358.803:232): pid=2350 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035313633376431663234323365346263353962623663613637387C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401474358.803:233): pid=2350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474358.856:234): pid=2350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401474497.231:235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401474497.231:236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474513.964:237): pid=2427 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401474513.965:238): pid=2427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474513.967:239): pid=2427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474513.974:240): pid=2429 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401474513.974:241): pid=2429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474513.976:242): pid=2429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474513.983:243): pid=2431 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6E206E6F64652E73746172747570202D76206D616E75616C202D2D6F703D757064617465 terminal=? res=success' >type=USER_START msg=audit(1401474513.983:244): pid=2431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474513.984:245): pid=2431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474513.991:246): pid=2433 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474513.991:247): pid=2433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474514.082:248): pid=2433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474514.111:249): pid=2438 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474514.111:250): pid=2438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474514.179:251): pid=2438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474515.418:252): pid=2440 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401474515.418:253): pid=2440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474515.443:254): pid=2440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474515.450:255): pid=2443 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401474515.450:256): pid=2443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474515.469:257): pid=2443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474515.479:258): pid=2463 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474515.479:259): pid=2463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474515.525:260): pid=2463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474515.539:261): pid=2467 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035313633376431663234323365346263353962623663613637387C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401474515.539:262): pid=2467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474515.584:263): pid=2467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474515.594:264): pid=2470 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474515.594:265): pid=2470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474515.640:266): pid=2470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474515.649:267): pid=2472 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474515.649:268): pid=2472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474515.695:269): pid=2472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474515.703:270): pid=2474 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474515.703:271): pid=2474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474515.752:272): pid=2474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474515.763:273): pid=2477 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474515.764:274): pid=2477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474515.794:275): pid=2477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474515.802:276): pid=2479 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474515.802:277): pid=2479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474515.847:278): pid=2479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474515.880:279): pid=2481 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401474515.880:280): pid=2481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474515.902:281): pid=2481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474515.908:282): pid=2484 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401474515.908:283): pid=2484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474515.928:284): pid=2484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474519.098:285): pid=2502 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035313633376431663234323365346263353962623663613637387C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401474519.099:286): pid=2502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474519.173:287): pid=2502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474519.186:288): pid=2506 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474519.186:289): pid=2506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474519.235:290): pid=2506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474529.252:291): pid=2514 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474529.253:292): pid=2514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474529.294:293): pid=2514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474529.302:294): pid=2516 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474529.302:295): pid=2516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474529.334:296): pid=2516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474829.669:297): pid=2651 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474829.669:298): pid=2651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474829.711:299): pid=2651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401474829.718:300): pid=2653 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401474829.719:301): pid=2653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401474829.751:302): pid=2653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401475130.160:303): pid=2776 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401475130.161:304): pid=2776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401475130.202:305): pid=2776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401475130.210:306): pid=2778 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401475130.211:307): pid=2778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401475130.243:308): pid=2778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401475201.124:309): pid=2814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401475201.124:310): pid=2814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401475201.124:311): pid=2814 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=2 res=1 >type=USER_START msg=audit(1401475201.130:312): pid=2814 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401475201.131:313): pid=2814 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401475201.187:314): pid=2814 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401475201.188:315): pid=2814 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401475430.563:316): pid=2914 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035313633376431663234323365346263353962623663613637387C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401475430.564:317): pid=2914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401475430.608:318): pid=2914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401475430.616:319): pid=2916 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401475430.617:320): pid=2916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401475430.649:321): pid=2916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401475730.975:322): pid=3044 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401475730.975:323): pid=3044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401475731.018:324): pid=3044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401475731.026:325): pid=3046 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401475731.026:326): pid=3046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401475731.059:327): pid=3046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401476031.485:328): pid=3172 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401476031.485:329): pid=3172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401476031.528:330): pid=3172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401476031.536:331): pid=3174 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401476031.536:332): pid=3174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401476031.569:333): pid=3174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401476101.194:334): pid=3206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401476101.194:335): pid=3206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401476101.194:336): pid=3206 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=3 res=1 >type=USER_START msg=audit(1401476101.199:337): pid=3206 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401476101.199:338): pid=3206 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401476101.359:339): pid=3206 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401476101.359:340): pid=3206 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401476331.929:341): pid=3307 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401476331.929:342): pid=3307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401476331.970:343): pid=3307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401476331.978:344): pid=3309 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401476331.979:345): pid=3309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401476332.009:346): pid=3309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401476461.364:347): pid=3367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401476461.365:348): pid=3367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401476461.365:349): pid=3367 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=4 res=1 >type=USER_START msg=audit(1401476461.369:350): pid=3367 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401476461.369:351): pid=3367 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401476461.523:352): avc: denied { read } for pid=3389 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401476461.523:352): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffcb7ded00 a2=90800 a3=0 items=0 ppid=3387 pid=3389 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401476461.603:353): pid=3367 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401476461.604:354): pid=3367 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401476632.376:355): pid=3466 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401476632.377:356): pid=3466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401476632.420:357): pid=3466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401476632.428:358): pid=3468 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401476632.428:359): pid=3468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401476632.461:360): pid=3468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401476932.804:361): pid=3596 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401476932.805:362): pid=3596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401476932.894:363): pid=3596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401476932.902:364): pid=3598 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401476932.902:365): pid=3598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401476932.933:366): pid=3598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401477001.608:367): pid=3629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401477001.609:368): pid=3629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401477001.609:369): pid=3629 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=5 res=1 >type=USER_START msg=audit(1401477001.613:370): pid=3629 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401477001.614:371): pid=3629 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401477001.753:372): pid=3629 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401477001.753:373): pid=3629 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_STOP msg=audit(1401477351.540:374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@253:4" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401477352.188:375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@253:3" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401477901.760:376): pid=3963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401477901.760:377): pid=3963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401477901.760:378): pid=3963 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=6 res=1 >type=USER_START msg=audit(1401477901.765:379): pid=3963 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401477901.765:380): pid=3963 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401477901.810:381): pid=3963 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401477901.811:382): pid=3963 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401478801.818:383): pid=4266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401478801.818:384): pid=4266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401478801.818:385): pid=4266 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=7 res=1 >type=USER_START msg=audit(1401478801.823:386): pid=4266 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401478801.823:387): pid=4266 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401478801.874:388): pid=4266 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401478801.875:389): pid=4266 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401479701.879:390): pid=4569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401479701.879:391): pid=4569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401479701.879:392): pid=4569 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=8 res=1 >type=USER_START msg=audit(1401479701.883:393): pid=4569 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401479701.883:394): pid=4569 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401479701.897:395): pid=4569 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401479701.898:396): pid=4569 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401480061.903:397): pid=4693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401480061.903:398): pid=4693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401480061.903:399): pid=4693 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=9 res=1 >type=USER_START msg=audit(1401480061.907:400): pid=4693 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401480061.907:401): pid=4693 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401480061.922:402): avc: denied { read } for pid=4715 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401480061.922:402): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff8c424070 a2=90800 a3=0 items=0 ppid=4713 pid=4715 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401480061.950:403): pid=4693 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401480061.950:404): pid=4693 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401480601.955:405): pid=4901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401480601.955:406): pid=4901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401480601.955:407): pid=4901 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=10 res=1 >type=USER_START msg=audit(1401480601.960:408): pid=4901 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401480601.960:409): pid=4901 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401480601.990:410): pid=4901 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401480601.991:411): pid=4901 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401481501.995:412): pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401481501.995:413): pid=5203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401481501.995:414): pid=5203 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=11 res=1 >type=USER_START msg=audit(1401481501.999:415): pid=5203 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401481501.999:416): pid=5203 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401481502.047:417): pid=5203 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401481502.047:418): pid=5203 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401482401.053:419): pid=5504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401482401.053:420): pid=5504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401482401.053:421): pid=5504 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=12 res=1 >type=USER_START msg=audit(1401482401.057:422): pid=5504 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401482401.057:423): pid=5504 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401482401.081:424): pid=5504 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401482401.082:425): pid=5504 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401483301.088:426): pid=5807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401483301.088:427): pid=5807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401483301.088:428): pid=5807 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=13 res=1 >type=USER_START msg=audit(1401483301.092:429): pid=5807 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401483301.092:430): pid=5807 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401483301.107:431): pid=5807 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401483301.108:432): pid=5807 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401483661.110:433): pid=5931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401483661.110:434): pid=5931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401483661.111:435): pid=5931 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=14 res=1 >type=USER_START msg=audit(1401483661.114:436): pid=5931 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401483661.115:437): pid=5931 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401483661.125:438): avc: denied { read } for pid=5953 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401483661.125:438): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff7b621b30 a2=90800 a3=0 items=0 ppid=5951 pid=5953 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401483661.174:439): pid=5931 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401483661.174:440): pid=5931 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401484201.179:441): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401484201.179:442): pid=6137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401484201.179:443): pid=6137 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=15 res=1 >type=USER_START msg=audit(1401484201.183:444): pid=6137 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401484201.183:445): pid=6137 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401484201.215:446): pid=6137 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401484201.215:447): pid=6137 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401485101.222:448): pid=6439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401485101.222:449): pid=6439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401485101.222:450): pid=6439 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=16 res=1 >type=USER_START msg=audit(1401485101.226:451): pid=6439 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401485101.226:452): pid=6439 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401485101.266:453): pid=6439 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401485101.266:454): pid=6439 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401486001.271:455): pid=6740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401486001.271:456): pid=6740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401486001.271:457): pid=6740 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=17 res=1 >type=USER_START msg=audit(1401486001.275:458): pid=6740 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401486001.275:459): pid=6740 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401486001.303:460): pid=6740 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401486001.303:461): pid=6740 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401486901.309:462): pid=7042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401486901.309:463): pid=7042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401486901.309:464): pid=7042 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=18 res=1 >type=USER_START msg=audit(1401486901.314:465): pid=7042 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401486901.314:466): pid=7042 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401486901.336:467): pid=7042 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401486901.336:468): pid=7042 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401487261.340:469): pid=7165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401487261.340:470): pid=7165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401487261.340:471): pid=7165 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=19 res=1 >type=USER_START msg=audit(1401487261.345:472): pid=7165 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401487261.345:473): pid=7165 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401487261.356:474): avc: denied { read } for pid=7187 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401487261.356:474): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffd0badd80 a2=90800 a3=0 items=0 ppid=7185 pid=7187 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401487261.416:475): pid=7165 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401487261.416:476): pid=7165 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401487801.422:477): pid=7370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401487801.422:478): pid=7370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401487801.422:479): pid=7370 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=20 res=1 >type=USER_START msg=audit(1401487801.426:480): pid=7370 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401487801.426:481): pid=7370 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401487801.463:482): pid=7370 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401487801.464:483): pid=7370 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401488701.468:484): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401488701.468:485): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401488701.468:486): pid=7670 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=21 res=1 >type=USER_START msg=audit(1401488701.472:487): pid=7670 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401488701.472:488): pid=7670 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401488701.489:489): pid=7670 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401488701.490:490): pid=7670 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401489601.495:491): pid=7972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401489601.495:492): pid=7972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401489601.495:493): pid=7972 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=22 res=1 >type=USER_START msg=audit(1401489601.499:494): pid=7972 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401489601.499:495): pid=7972 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401489601.535:496): pid=7972 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401489601.535:497): pid=7972 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401490501.540:498): pid=8274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401490501.540:499): pid=8274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401490501.541:500): pid=8274 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=23 res=1 >type=USER_START msg=audit(1401490501.545:501): pid=8274 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401490501.545:502): pid=8274 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401490501.578:503): pid=8274 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401490501.579:504): pid=8274 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401490861.583:505): pid=8398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401490861.583:506): pid=8398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401490861.583:507): pid=8398 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=24 res=1 >type=USER_START msg=audit(1401490861.587:508): pid=8398 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401490861.587:509): pid=8398 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401490861.598:510): avc: denied { read } for pid=8420 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401490861.598:510): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff01bf31f0 a2=90800 a3=0 items=0 ppid=8418 pid=8420 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401490861.626:511): pid=8398 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401490861.626:512): pid=8398 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401491401.630:513): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401491401.631:514): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401491401.631:515): pid=8603 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=25 res=1 >type=USER_START msg=audit(1401491401.635:516): pid=8603 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401491401.635:517): pid=8603 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401491401.665:518): pid=8603 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401491401.665:519): pid=8603 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401492301.671:520): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401492301.671:521): pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401492301.671:522): pid=8903 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=26 res=1 >type=USER_START msg=audit(1401492301.675:523): pid=8903 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401492301.675:524): pid=8903 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401492301.705:525): pid=8903 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401492301.706:526): pid=8903 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401493201.710:527): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401493201.710:528): pid=9205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401493201.710:529): pid=9205 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=27 res=1 >type=USER_START msg=audit(1401493201.714:530): pid=9205 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401493201.714:531): pid=9205 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401493201.871:532): pid=9205 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401493201.872:533): pid=9205 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401494101.877:534): pid=9505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401494101.877:535): pid=9505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401494101.877:536): pid=9505 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=28 res=1 >type=USER_START msg=audit(1401494101.881:537): pid=9505 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401494101.881:538): pid=9505 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401494101.897:539): pid=9505 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401494101.898:540): pid=9505 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401494461.901:541): pid=9628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401494461.901:542): pid=9628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401494461.901:543): pid=9628 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=29 res=1 >type=USER_START msg=audit(1401494461.906:544): pid=9628 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401494461.906:545): pid=9628 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401494461.919:546): avc: denied { read } for pid=9650 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401494461.919:546): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff62cc2c70 a2=90800 a3=0 items=0 ppid=9648 pid=9650 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401494461.956:547): pid=9628 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401494461.957:548): pid=9628 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401495001.962:549): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401495001.962:550): pid=9832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401495001.962:551): pid=9832 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=30 res=1 >type=USER_START msg=audit(1401495001.966:552): pid=9832 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401495001.966:553): pid=9832 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401495002.008:554): pid=9832 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401495002.008:555): pid=9832 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401495901.013:556): pid=10133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401495901.013:557): pid=10133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401495901.013:558): pid=10133 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=31 res=1 >type=USER_START msg=audit(1401495901.017:559): pid=10133 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401495901.017:560): pid=10133 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401495901.051:561): pid=10133 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401495901.051:562): pid=10133 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401496801.058:563): pid=10435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401496801.058:564): pid=10435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401496801.058:565): pid=10435 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=32 res=1 >type=USER_START msg=audit(1401496801.062:566): pid=10435 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401496801.062:567): pid=10435 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401496801.077:568): pid=10435 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401496801.078:569): pid=10435 uid=0 auid=0 ses=32 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401497701.082:570): pid=10736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401497701.082:571): pid=10736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401497701.082:572): pid=10736 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=33 res=1 >type=USER_START msg=audit(1401497701.086:573): pid=10736 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401497701.086:574): pid=10736 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401497701.127:575): pid=10736 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401497701.127:576): pid=10736 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401498061.131:577): pid=10859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401498061.131:578): pid=10859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401498061.132:579): pid=10859 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=34 res=1 >type=USER_START msg=audit(1401498061.135:580): pid=10859 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401498061.136:581): pid=10859 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401498061.147:582): avc: denied { read } for pid=10881 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401498061.147:582): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff141f8800 a2=90800 a3=0 items=0 ppid=10879 pid=10881 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=34 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401498061.186:583): pid=10859 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401498061.187:584): pid=10859 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401498601.191:585): pid=11065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401498601.191:586): pid=11065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401498601.191:587): pid=11065 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=35 res=1 >type=USER_START msg=audit(1401498601.196:588): pid=11065 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401498601.196:589): pid=11065 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401498601.211:590): pid=11065 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401498601.211:591): pid=11065 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401499501.218:592): pid=11366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401499501.218:593): pid=11366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401499501.218:594): pid=11366 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=36 res=1 >type=USER_START msg=audit(1401499501.222:595): pid=11366 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401499501.222:596): pid=11366 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401499501.238:597): pid=11366 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401499501.238:598): pid=11366 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401500401.243:599): pid=11668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401500401.243:600): pid=11668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401500401.243:601): pid=11668 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=37 res=1 >type=USER_START msg=audit(1401500401.247:602): pid=11668 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401500401.247:603): pid=11668 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401500401.268:604): pid=11668 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401500401.268:605): pid=11668 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401501301.274:606): pid=11966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401501301.274:607): pid=11966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401501301.274:608): pid=11966 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=38 res=1 >type=USER_START msg=audit(1401501301.278:609): pid=11966 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401501301.278:610): pid=11966 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401501301.327:611): pid=11966 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401501301.327:612): pid=11966 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401501661.331:613): pid=12092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401501661.331:614): pid=12092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401501661.332:615): pid=12092 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=39 res=1 >type=USER_START msg=audit(1401501661.336:616): pid=12092 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401501661.336:617): pid=12092 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401501661.347:618): avc: denied { read } for pid=12114 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401501661.347:618): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7ffff4d67bc0 a2=90800 a3=0 items=0 ppid=12112 pid=12114 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=39 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401501661.381:619): pid=12092 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401501661.381:620): pid=12092 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401502201.386:621): pid=12298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401502201.386:622): pid=12298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401502201.386:623): pid=12298 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=40 res=1 >type=USER_START msg=audit(1401502201.390:624): pid=12298 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401502201.390:625): pid=12298 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401502201.420:626): pid=12298 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401502201.421:627): pid=12298 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401503101.426:628): pid=12600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401503101.426:629): pid=12600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401503101.426:630): pid=12600 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=41 res=1 >type=USER_START msg=audit(1401503101.430:631): pid=12600 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401503101.430:632): pid=12600 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401503101.480:633): pid=12600 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401503101.480:634): pid=12600 uid=0 auid=0 ses=41 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401504001.486:635): pid=12904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401504001.486:636): pid=12904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401504001.487:637): pid=12904 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=42 res=1 >type=USER_START msg=audit(1401504001.491:638): pid=12904 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401504001.491:639): pid=12904 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401504001.505:640): pid=12904 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401504001.506:641): pid=12904 uid=0 auid=0 ses=42 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401504901.510:642): pid=13207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401504901.510:643): pid=13207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401504901.510:644): pid=13207 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=43 res=1 >type=USER_START msg=audit(1401504901.514:645): pid=13207 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401504901.515:646): pid=13207 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401504901.529:647): pid=13207 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401504901.530:648): pid=13207 uid=0 auid=0 ses=43 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401505261.535:649): pid=13332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401505261.535:650): pid=13332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401505261.535:651): pid=13332 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=44 res=1 >type=USER_START msg=audit(1401505261.539:652): pid=13332 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401505261.539:653): pid=13332 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401505261.551:654): avc: denied { read } for pid=13354 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401505261.551:654): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff7d6af430 a2=90800 a3=0 items=0 ppid=13352 pid=13354 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=44 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401505261.590:655): pid=13332 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401505261.590:656): pid=13332 uid=0 auid=0 ses=44 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401505801.594:657): pid=13539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401505801.594:658): pid=13539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401505801.594:659): pid=13539 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=45 res=1 >type=USER_START msg=audit(1401505801.598:660): pid=13539 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401505801.598:661): pid=13539 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401505801.631:662): pid=13539 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401505801.631:663): pid=13539 uid=0 auid=0 ses=45 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401506701.638:664): pid=13841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401506701.638:665): pid=13841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401506701.638:666): pid=13841 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=46 res=1 >type=USER_START msg=audit(1401506701.642:667): pid=13841 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401506701.642:668): pid=13841 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401506701.684:669): pid=13841 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401506701.685:670): pid=13841 uid=0 auid=0 ses=46 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401507601.689:671): pid=14142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401507601.689:672): pid=14142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401507601.689:673): pid=14142 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=47 res=1 >type=USER_START msg=audit(1401507601.693:674): pid=14142 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401507601.694:675): pid=14142 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401507601.708:676): pid=14142 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401507601.709:677): pid=14142 uid=0 auid=0 ses=47 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401508501.716:678): pid=14443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401508501.716:679): pid=14443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401508501.716:680): pid=14443 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=48 res=1 >type=USER_START msg=audit(1401508501.720:681): pid=14443 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401508501.720:682): pid=14443 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401508501.735:683): pid=14443 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401508501.736:684): pid=14443 uid=0 auid=0 ses=48 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401508861.739:685): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401508861.739:686): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401508861.739:687): pid=14567 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=49 res=1 >type=USER_START msg=audit(1401508861.743:688): pid=14567 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401508861.743:689): pid=14567 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401508861.817:690): avc: denied { read } for pid=14592 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401508861.817:690): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff8f76c3b0 a2=90800 a3=0 items=0 ppid=14590 pid=14592 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=49 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401508861.861:691): pid=14567 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401508861.861:692): pid=14567 uid=0 auid=0 ses=49 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401509401.866:693): pid=14776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401509401.866:694): pid=14776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401509401.866:695): pid=14776 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=50 res=1 >type=USER_START msg=audit(1401509401.870:696): pid=14776 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401509401.871:697): pid=14776 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401509401.903:698): pid=14776 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401509401.904:699): pid=14776 uid=0 auid=0 ses=50 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401510301.909:700): pid=15080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401510301.909:701): pid=15080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401510301.910:702): pid=15080 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=51 res=1 >type=USER_START msg=audit(1401510301.914:703): pid=15080 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401510301.914:704): pid=15080 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401510301.949:705): pid=15080 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401510301.949:706): pid=15080 uid=0 auid=0 ses=51 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401511201.955:707): pid=15382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401511201.955:708): pid=15382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401511201.955:709): pid=15382 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=52 res=1 >type=USER_START msg=audit(1401511201.960:710): pid=15382 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401511201.960:711): pid=15382 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401511202.002:712): pid=15382 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401511202.002:713): pid=15382 uid=0 auid=0 ses=52 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401512101.007:714): pid=15682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401512101.007:715): pid=15682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401512101.007:716): pid=15682 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=53 res=1 >type=USER_START msg=audit(1401512101.011:717): pid=15682 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401512101.011:718): pid=15682 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401512101.044:719): pid=15682 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401512101.045:720): pid=15682 uid=0 auid=0 ses=53 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401512461.049:721): pid=15806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401512461.050:722): pid=15806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401512461.050:723): pid=15806 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=54 res=1 >type=USER_START msg=audit(1401512461.054:724): pid=15806 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401512461.054:725): pid=15806 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401512461.069:726): avc: denied { read } for pid=15831 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401512461.069:726): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff143f00a0 a2=90800 a3=0 items=0 ppid=15829 pid=15831 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=54 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401512461.117:727): pid=15806 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401512461.118:728): pid=15806 uid=0 auid=0 ses=54 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401513001.121:729): pid=16015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401513001.121:730): pid=16015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401513001.121:731): pid=16015 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=55 res=1 >type=USER_START msg=audit(1401513001.125:732): pid=16015 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401513001.125:733): pid=16015 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401513001.148:734): pid=16015 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401513001.148:735): pid=16015 uid=0 auid=0 ses=55 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401513901.153:736): pid=16315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401513901.153:737): pid=16315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401513901.153:738): pid=16315 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=56 res=1 >type=USER_START msg=audit(1401513901.158:739): pid=16315 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401513901.158:740): pid=16315 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401513901.192:741): pid=16315 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401513901.193:742): pid=16315 uid=0 auid=0 ses=56 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401514801.198:743): pid=16616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401514801.198:744): pid=16616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401514801.198:745): pid=16616 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=57 res=1 >type=USER_START msg=audit(1401514801.202:746): pid=16616 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401514801.202:747): pid=16616 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401514801.253:748): pid=16616 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401514801.253:749): pid=16616 uid=0 auid=0 ses=57 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401515701.259:750): pid=16917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401515701.259:751): pid=16917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401515701.260:752): pid=16917 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=58 res=1 >type=USER_START msg=audit(1401515701.263:753): pid=16917 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401515701.264:754): pid=16917 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401515701.289:755): pid=16917 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401515701.289:756): pid=16917 uid=0 auid=0 ses=58 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401516061.292:757): pid=17041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401516061.292:758): pid=17041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401516061.292:759): pid=17041 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=59 res=1 >type=USER_START msg=audit(1401516061.296:760): pid=17041 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401516061.297:761): pid=17041 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401516061.311:762): avc: denied { read } for pid=17066 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401516061.311:762): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffbe82dcb0 a2=90800 a3=0 items=0 ppid=17064 pid=17066 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=59 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401516061.343:763): pid=17041 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401516061.343:764): pid=17041 uid=0 auid=0 ses=59 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401516601.348:765): pid=17251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401516601.348:766): pid=17251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401516601.348:767): pid=17251 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=60 res=1 >type=USER_START msg=audit(1401516601.352:768): pid=17251 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401516601.352:769): pid=17251 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401516601.397:770): pid=17251 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401516601.398:771): pid=17251 uid=0 auid=0 ses=60 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401517501.403:772): pid=17554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401517501.403:773): pid=17554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401517501.403:774): pid=17554 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=61 res=1 >type=USER_START msg=audit(1401517501.407:775): pid=17554 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401517501.407:776): pid=17554 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401517501.448:777): pid=17554 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401517501.449:778): pid=17554 uid=0 auid=0 ses=61 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401518401.455:779): pid=17858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401518401.455:780): pid=17858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401518401.455:781): pid=17858 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=62 res=1 >type=USER_START msg=audit(1401518401.459:782): pid=17858 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401518401.459:783): pid=17858 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401518401.475:784): pid=17858 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401518401.475:785): pid=17858 uid=0 auid=0 ses=62 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401519301.480:786): pid=18160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401519301.480:787): pid=18160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401519301.480:788): pid=18160 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=63 res=1 >type=USER_START msg=audit(1401519301.484:789): pid=18160 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401519301.484:790): pid=18160 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401519301.498:791): pid=18160 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401519301.499:792): pid=18160 uid=0 auid=0 ses=63 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401519661.504:793): pid=18284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401519661.504:794): pid=18284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401519661.504:795): pid=18284 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=64 res=1 >type=USER_START msg=audit(1401519661.508:796): pid=18284 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401519661.508:797): pid=18284 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401519661.523:798): avc: denied { read } for pid=18309 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401519661.523:798): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff728d8450 a2=90800 a3=0 items=0 ppid=18307 pid=18309 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=64 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401519661.542:799): pid=18284 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401519661.542:800): pid=18284 uid=0 auid=0 ses=64 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401519961.766:801): avc: denied { read } for pid=18417 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401519961.766:801): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7ffff27676a0 a2=90800 a3=0 items=0 ppid=18415 pid=18417 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=64 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1401520201.549:802): pid=18519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401520201.549:803): pid=18519 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401520201.550:804): pid=18519 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=65 res=1 >type=USER_START msg=audit(1401520201.555:805): pid=18519 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401520201.555:806): pid=18519 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401520201.595:807): pid=18519 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401520201.596:808): pid=18519 uid=0 auid=0 ses=65 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401521101.601:809): pid=18820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401521101.601:810): pid=18820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401521101.601:811): pid=18820 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=66 res=1 >type=USER_START msg=audit(1401521101.606:812): pid=18820 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401521101.606:813): pid=18820 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401521101.636:814): pid=18820 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401521101.637:815): pid=18820 uid=0 auid=0 ses=66 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401522001.643:816): pid=19138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401522001.643:817): pid=19138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401522001.644:818): pid=19138 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=67 res=1 >type=USER_START msg=audit(1401522001.649:819): pid=19138 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401522001.650:820): pid=19138 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401522001.678:821): pid=19138 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401522001.678:822): pid=19138 uid=0 auid=0 ses=67 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401522901.685:823): pid=19441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401522901.685:824): pid=19441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401522901.685:825): pid=19441 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=68 res=1 >type=USER_START msg=audit(1401522901.690:826): pid=19441 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401522901.690:827): pid=19441 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401522901.733:828): pid=19441 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401522901.734:829): pid=19441 uid=0 auid=0 ses=68 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401523261.737:830): pid=19564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401523261.737:831): pid=19564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401523261.737:832): pid=19564 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=69 res=1 >type=USER_START msg=audit(1401523261.741:833): pid=19564 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401523261.741:834): pid=19564 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401523261.753:835): avc: denied { read } for pid=19586 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401523261.753:835): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffb0467150 a2=90800 a3=0 items=0 ppid=19584 pid=19586 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=69 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401523263.815:836): pid=19564 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401523263.816:837): pid=19564 uid=0 auid=0 ses=69 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401523801.821:838): pid=19771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401523801.821:839): pid=19771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401523801.821:840): pid=19771 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=70 res=1 >type=USER_START msg=audit(1401523801.825:841): pid=19771 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401523801.826:842): pid=19771 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401523801.881:843): pid=19771 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401523801.881:844): pid=19771 uid=0 auid=0 ses=70 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401524701.887:845): pid=20074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401524701.887:846): pid=20074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401524701.887:847): pid=20074 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=71 res=1 >type=USER_START msg=audit(1401524701.891:848): pid=20074 uid=0 auid=0 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401524701.891:849): pid=20074 uid=0 auid=0 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401524701.907:850): pid=20074 uid=0 auid=0 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401524701.908:851): pid=20074 uid=0 auid=0 ses=71 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401525601.913:852): pid=20374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401525601.913:853): pid=20374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401525601.913:854): pid=20374 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=72 res=1 >type=USER_START msg=audit(1401525601.918:855): pid=20374 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401525601.918:856): pid=20374 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401525601.949:857): pid=20374 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401525601.950:858): pid=20374 uid=0 auid=0 ses=72 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401526501.956:859): pid=20675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401526501.956:860): pid=20675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401526501.956:861): pid=20675 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=73 res=1 >type=USER_START msg=audit(1401526501.960:862): pid=20675 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401526501.960:863): pid=20675 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401526502.000:864): pid=20675 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401526502.001:865): pid=20675 uid=0 auid=0 ses=73 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401526861.005:866): pid=20800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401526861.006:867): pid=20800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401526861.006:868): pid=20800 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=74 res=1 >type=USER_START msg=audit(1401526861.010:869): pid=20800 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401526861.010:870): pid=20800 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401526861.022:871): avc: denied { read } for pid=20822 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401526861.022:871): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff6866c810 a2=90800 a3=0 items=0 ppid=20820 pid=20822 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=74 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401526861.039:872): pid=20800 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401526861.040:873): pid=20800 uid=0 auid=0 ses=74 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401527401.044:874): pid=21004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401527401.044:875): pid=21004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401527401.044:876): pid=21004 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=75 res=1 >type=USER_START msg=audit(1401527401.049:877): pid=21004 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401527401.049:878): pid=21004 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401527401.067:879): pid=21004 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401527401.067:880): pid=21004 uid=0 auid=0 ses=75 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401528301.072:881): pid=21304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401528301.072:882): pid=21304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401528301.072:883): pid=21304 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=76 res=1 >type=USER_START msg=audit(1401528301.076:884): pid=21304 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401528301.076:885): pid=21304 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401528301.125:886): pid=21304 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401528301.125:887): pid=21304 uid=0 auid=0 ses=76 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401529201.131:888): pid=21605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401529201.131:889): pid=21605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401529201.131:890): pid=21605 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=77 res=1 >type=USER_START msg=audit(1401529201.135:891): pid=21605 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401529201.135:892): pid=21605 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401529201.151:893): pid=21605 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401529201.152:894): pid=21605 uid=0 auid=0 ses=77 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401530101.158:895): pid=21905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401530101.158:896): pid=21905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401530101.158:897): pid=21905 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=78 res=1 >type=USER_START msg=audit(1401530101.162:898): pid=21905 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401530101.162:899): pid=21905 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401530101.186:900): pid=21905 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401530101.186:901): pid=21905 uid=0 auid=0 ses=78 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401530461.189:902): pid=22029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401530461.189:903): pid=22029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401530461.190:904): pid=22029 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=79 res=1 >type=USER_START msg=audit(1401530461.194:905): pid=22029 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401530461.194:906): pid=22029 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401530461.205:907): avc: denied { read } for pid=22051 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401530461.205:907): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff30750c30 a2=90800 a3=0 items=0 ppid=22049 pid=22051 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=79 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401530461.254:908): pid=22029 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401530461.255:909): pid=22029 uid=0 auid=0 ses=79 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401531001.259:910): pid=22237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401531001.260:911): pid=22237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401531001.260:912): pid=22237 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=80 res=1 >type=USER_START msg=audit(1401531001.264:913): pid=22237 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401531001.264:914): pid=22237 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401531001.280:915): pid=22237 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401531001.280:916): pid=22237 uid=0 auid=0 ses=80 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401531901.287:917): pid=22540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401531901.287:918): pid=22540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401531901.287:919): pid=22540 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=81 res=1 >type=USER_START msg=audit(1401531901.291:920): pid=22540 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401531901.291:921): pid=22540 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401531901.341:922): pid=22540 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401531901.341:923): pid=22540 uid=0 auid=0 ses=81 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401532801.346:924): pid=22840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401532801.346:925): pid=22840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401532801.346:926): pid=22840 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=82 res=1 >type=USER_START msg=audit(1401532801.350:927): pid=22840 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401532801.350:928): pid=22840 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401532801.373:929): pid=22840 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401532801.374:930): pid=22840 uid=0 auid=0 ses=82 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401533701.379:931): pid=23142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401533701.379:932): pid=23142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401533701.380:933): pid=23142 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=83 res=1 >type=USER_START msg=audit(1401533701.384:934): pid=23142 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401533701.384:935): pid=23142 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401533701.399:936): pid=23142 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401533701.400:937): pid=23142 uid=0 auid=0 ses=83 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401534061.404:938): pid=23265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401534061.404:939): pid=23265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401534061.404:940): pid=23265 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=84 res=1 >type=USER_START msg=audit(1401534061.408:941): pid=23265 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401534061.409:942): pid=23265 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401534061.420:943): avc: denied { read } for pid=23287 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401534061.420:943): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff1e592ac0 a2=90800 a3=0 items=0 ppid=23285 pid=23287 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=84 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401534061.459:944): pid=23265 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401534061.459:945): pid=23265 uid=0 auid=0 ses=84 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401534601.465:946): pid=23471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401534601.465:947): pid=23471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401534601.465:948): pid=23471 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=85 res=1 >type=USER_START msg=audit(1401534601.469:949): pid=23471 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401534601.469:950): pid=23471 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401534601.485:951): pid=23471 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401534601.485:952): pid=23471 uid=0 auid=0 ses=85 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401535501.490:953): pid=23774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401535501.490:954): pid=23774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401535501.490:955): pid=23774 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=86 res=1 >type=USER_START msg=audit(1401535501.494:956): pid=23774 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401535501.494:957): pid=23774 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401535501.511:958): pid=23774 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401535501.511:959): pid=23774 uid=0 auid=0 ses=86 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401536401.517:960): pid=24075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401536401.517:961): pid=24075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401536401.517:962): pid=24075 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=87 res=1 >type=USER_START msg=audit(1401536401.521:963): pid=24075 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401536401.521:964): pid=24075 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401536401.730:965): pid=24075 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401536401.730:966): pid=24075 uid=0 auid=0 ses=87 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401537301.735:967): pid=24378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401537301.735:968): pid=24378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401537301.735:969): pid=24378 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=88 res=1 >type=USER_START msg=audit(1401537301.739:970): pid=24378 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401537301.739:971): pid=24378 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401537301.757:972): pid=24378 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401537301.758:973): pid=24378 uid=0 auid=0 ses=88 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401537661.762:974): pid=24501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401537661.762:975): pid=24501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401537661.762:976): pid=24501 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=89 res=1 >type=USER_START msg=audit(1401537661.766:977): pid=24501 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401537661.766:978): pid=24501 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401537661.780:979): avc: denied { read } for pid=24523 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401537661.780:979): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffc9622f60 a2=90800 a3=0 items=0 ppid=24521 pid=24523 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=89 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401537661.828:980): pid=24501 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401537661.829:981): pid=24501 uid=0 auid=0 ses=89 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401538201.833:982): pid=24708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401538201.834:983): pid=24708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401538201.834:984): pid=24708 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=90 res=1 >type=USER_START msg=audit(1401538201.838:985): pid=24708 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401538201.838:986): pid=24708 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401538201.860:987): pid=24708 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401538201.860:988): pid=24708 uid=0 auid=0 ses=90 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401539101.867:989): pid=25009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401539101.867:990): pid=25009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401539101.867:991): pid=25009 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=91 res=1 >type=USER_START msg=audit(1401539101.871:992): pid=25009 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401539101.871:993): pid=25009 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401539101.903:994): pid=25009 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401539101.904:995): pid=25009 uid=0 auid=0 ses=91 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401540001.909:996): pid=25310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401540001.909:997): pid=25310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401540001.909:998): pid=25310 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=92 res=1 >type=USER_START msg=audit(1401540001.913:999): pid=25310 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401540001.913:1000): pid=25310 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401540001.962:1001): pid=25310 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401540001.962:1002): pid=25310 uid=0 auid=0 ses=92 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401540901.968:1003): pid=25612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401540901.968:1004): pid=25612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401540901.968:1005): pid=25612 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=93 res=1 >type=USER_START msg=audit(1401540901.972:1006): pid=25612 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401540901.972:1007): pid=25612 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401540901.991:1008): pid=25612 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401540901.992:1009): pid=25612 uid=0 auid=0 ses=93 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401541261.995:1010): pid=25736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401541261.996:1011): pid=25736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401541261.996:1012): pid=25736 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=94 res=1 >type=USER_START msg=audit(1401541262.000:1013): pid=25736 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401541262.000:1014): pid=25736 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401541262.011:1015): avc: denied { read } for pid=25758 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401541262.011:1015): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffad3945f0 a2=90800 a3=0 items=0 ppid=25756 pid=25758 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=94 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401541262.034:1016): pid=25736 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401541262.034:1017): pid=25736 uid=0 auid=0 ses=94 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401541801.039:1018): pid=25941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401541801.040:1019): pid=25941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401541801.040:1020): pid=25941 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=95 res=1 >type=USER_START msg=audit(1401541801.044:1021): pid=25941 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401541801.044:1022): pid=25941 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401541801.060:1023): pid=25941 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401541801.060:1024): pid=25941 uid=0 auid=0 ses=95 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401542701.065:1025): pid=26242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401542701.065:1026): pid=26242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401542701.065:1027): pid=26242 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=96 res=1 >type=USER_START msg=audit(1401542701.069:1028): pid=26242 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401542701.069:1029): pid=26242 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401542701.092:1030): pid=26242 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401542701.093:1031): pid=26242 uid=0 auid=0 ses=96 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401543601.099:1032): pid=26542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401543601.099:1033): pid=26542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401543601.100:1034): pid=26542 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=97 res=1 >type=USER_START msg=audit(1401543601.104:1035): pid=26542 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401543601.104:1036): pid=26542 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401543601.135:1037): pid=26542 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401543601.136:1038): pid=26542 uid=0 auid=0 ses=97 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401544501.141:1039): pid=26843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401544501.141:1040): pid=26843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401544501.141:1041): pid=26843 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=98 res=1 >type=USER_START msg=audit(1401544501.145:1042): pid=26843 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401544501.145:1043): pid=26843 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401544501.170:1044): pid=26843 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401544501.171:1045): pid=26843 uid=0 auid=0 ses=98 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401544861.175:1046): pid=26965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401544861.175:1047): pid=26965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401544861.175:1048): pid=26965 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=99 res=1 >type=USER_START msg=audit(1401544861.179:1049): pid=26965 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401544861.179:1050): pid=26965 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401544861.190:1051): avc: denied { read } for pid=26987 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401544861.190:1051): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffceaac980 a2=90800 a3=0 items=0 ppid=26985 pid=26987 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=99 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401544861.213:1052): pid=26965 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401544861.214:1053): pid=26965 uid=0 auid=0 ses=99 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401545401.218:1054): pid=27168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401545401.218:1055): pid=27168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401545401.218:1056): pid=27168 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=100 res=1 >type=USER_START msg=audit(1401545401.222:1057): pid=27168 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401545401.222:1058): pid=27168 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401545401.272:1059): pid=27168 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401545401.272:1060): pid=27168 uid=0 auid=0 ses=100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401546301.279:1061): pid=27469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401546301.279:1062): pid=27469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401546301.279:1063): pid=27469 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=101 res=1 >type=USER_START msg=audit(1401546301.283:1064): pid=27469 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401546301.283:1065): pid=27469 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401546301.299:1066): pid=27469 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401546301.300:1067): pid=27469 uid=0 auid=0 ses=101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401547201.304:1068): pid=27770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401547201.304:1069): pid=27770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401547201.304:1070): pid=27770 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=102 res=1 >type=USER_START msg=audit(1401547201.308:1071): pid=27770 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401547201.308:1072): pid=27770 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401547201.335:1073): pid=27770 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401547201.335:1074): pid=27770 uid=0 auid=0 ses=102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401548101.341:1075): pid=28072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401548101.341:1076): pid=28072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401548101.341:1077): pid=28072 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=103 res=1 >type=USER_START msg=audit(1401548101.345:1078): pid=28072 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401548101.345:1079): pid=28072 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401548101.388:1080): pid=28072 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401548101.388:1081): pid=28072 uid=0 auid=0 ses=103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401548461.392:1082): pid=28196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401548461.392:1083): pid=28196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401548461.392:1084): pid=28196 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=104 res=1 >type=USER_START msg=audit(1401548461.396:1085): pid=28196 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401548461.396:1086): pid=28196 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401548461.408:1087): avc: denied { read } for pid=28218 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401548461.408:1087): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffe5bbccf0 a2=90800 a3=0 items=0 ppid=28216 pid=28218 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=104 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401548461.430:1088): pid=28196 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401548461.431:1089): pid=28196 uid=0 auid=0 ses=104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401549001.435:1090): pid=28403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401549001.435:1091): pid=28403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401549001.435:1092): pid=28403 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=105 res=1 >type=USER_START msg=audit(1401549001.439:1093): pid=28403 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401549001.439:1094): pid=28403 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401549001.470:1095): pid=28403 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401549001.471:1096): pid=28403 uid=0 auid=0 ses=105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401549901.476:1097): pid=28707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401549901.476:1098): pid=28707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401549901.476:1099): pid=28707 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=106 res=1 >type=USER_START msg=audit(1401549901.480:1100): pid=28707 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401549901.480:1101): pid=28707 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401549901.506:1102): pid=28707 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401549901.506:1103): pid=28707 uid=0 auid=0 ses=106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401550801.513:1104): pid=29009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401550801.513:1105): pid=29009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401550801.513:1106): pid=29009 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=107 res=1 >type=USER_START msg=audit(1401550801.517:1107): pid=29009 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401550801.517:1108): pid=29009 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401550801.544:1109): pid=29009 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401550801.544:1110): pid=29009 uid=0 auid=0 ses=107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401551701.549:1111): pid=29311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401551701.549:1112): pid=29311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401551701.549:1113): pid=29311 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=108 res=1 >type=USER_START msg=audit(1401551701.553:1114): pid=29311 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401551701.553:1115): pid=29311 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401551701.610:1116): pid=29311 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401551701.610:1117): pid=29311 uid=0 auid=0 ses=108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401552061.615:1118): pid=29438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401552061.615:1119): pid=29438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401552061.615:1120): pid=29438 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=109 res=1 >type=USER_START msg=audit(1401552061.619:1121): pid=29438 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401552061.619:1122): pid=29438 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401552061.631:1123): avc: denied { read } for pid=29460 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401552061.631:1123): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffb4617490 a2=90800 a3=0 items=0 ppid=29458 pid=29460 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=109 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401552061.654:1124): pid=29438 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401552061.654:1125): pid=29438 uid=0 auid=0 ses=109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401552601.658:1126): pid=29642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401552601.658:1127): pid=29642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401552601.658:1128): pid=29642 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=110 res=1 >type=USER_START msg=audit(1401552601.662:1129): pid=29642 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401552601.662:1130): pid=29642 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401552601.679:1131): pid=29642 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401552601.679:1132): pid=29642 uid=0 auid=0 ses=110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401553501.686:1133): pid=29945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401553501.686:1134): pid=29945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401553501.686:1135): pid=29945 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=111 res=1 >type=USER_START msg=audit(1401553501.690:1136): pid=29945 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401553501.690:1137): pid=29945 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401553501.739:1138): pid=29945 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401553501.740:1139): pid=29945 uid=0 auid=0 ses=111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401554401.744:1140): pid=30246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401554401.744:1141): pid=30246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401554401.744:1142): pid=30246 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=112 res=1 >type=USER_START msg=audit(1401554401.748:1143): pid=30246 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401554401.748:1144): pid=30246 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401554401.781:1145): pid=30246 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401554401.781:1146): pid=30246 uid=0 auid=0 ses=112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401555301.787:1147): pid=30550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401555301.787:1148): pid=30550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401555301.787:1149): pid=30550 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=113 res=1 >type=USER_START msg=audit(1401555301.791:1150): pid=30550 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401555301.791:1151): pid=30550 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401555301.808:1152): pid=30550 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401555301.809:1153): pid=30550 uid=0 auid=0 ses=113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401555661.812:1154): pid=30674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401555661.812:1155): pid=30674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401555661.813:1156): pid=30674 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=114 res=1 >type=USER_START msg=audit(1401555661.816:1157): pid=30674 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401555661.817:1158): pid=30674 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401555661.828:1159): avc: denied { read } for pid=30696 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401555661.828:1159): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffae685380 a2=90800 a3=0 items=0 ppid=30694 pid=30696 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=114 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401555661.870:1160): pid=30674 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401555661.871:1161): pid=30674 uid=0 auid=0 ses=114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401556201.876:1162): pid=30880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401556201.876:1163): pid=30880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401556201.876:1164): pid=30880 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=115 res=1 >type=USER_START msg=audit(1401556201.880:1165): pid=30880 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401556201.880:1166): pid=30880 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401556201.912:1167): pid=30880 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401556201.913:1168): pid=30880 uid=0 auid=0 ses=115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401557101.918:1169): pid=31183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401557101.918:1170): pid=31183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401557101.919:1171): pid=31183 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=116 res=1 >type=USER_START msg=audit(1401557101.922:1172): pid=31183 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401557101.923:1173): pid=31183 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401557101.971:1174): pid=31183 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401557101.972:1175): pid=31183 uid=0 auid=0 ses=116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401558001.978:1176): pid=31484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401558001.978:1177): pid=31484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401558001.978:1178): pid=31484 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=117 res=1 >type=USER_START msg=audit(1401558001.982:1179): pid=31484 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401558001.982:1180): pid=31484 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401558002.172:1181): pid=31484 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401558002.173:1182): pid=31484 uid=0 auid=0 ses=117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401558901.177:1183): pid=31786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401558901.177:1184): pid=31786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401558901.177:1185): pid=31786 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=118 res=1 >type=USER_START msg=audit(1401558901.181:1186): pid=31786 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401558901.182:1187): pid=31786 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401558901.204:1188): pid=31786 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401558901.204:1189): pid=31786 uid=0 auid=0 ses=118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401559261.209:1190): pid=31910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401559261.209:1191): pid=31910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401559261.210:1192): pid=31910 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=119 res=1 >type=USER_START msg=audit(1401559261.213:1193): pid=31910 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401559261.214:1194): pid=31910 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401559261.225:1195): avc: denied { read } for pid=31932 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401559261.225:1195): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff70bd5170 a2=90800 a3=0 items=0 ppid=31930 pid=31932 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=119 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401559261.268:1196): pid=31910 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401559261.268:1197): pid=31910 uid=0 auid=0 ses=119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401559801.272:1198): pid=32116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401559801.272:1199): pid=32116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401559801.272:1200): pid=32116 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=120 res=1 >type=USER_START msg=audit(1401559801.276:1201): pid=32116 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401559801.276:1202): pid=32116 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401559801.298:1203): pid=32116 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401559801.298:1204): pid=32116 uid=0 auid=0 ses=120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401560701.304:1205): pid=32417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401560701.304:1206): pid=32417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401560701.304:1207): pid=32417 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=121 res=1 >type=USER_START msg=audit(1401560701.308:1208): pid=32417 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401560701.308:1209): pid=32417 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401560701.341:1210): pid=32417 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401560701.342:1211): pid=32417 uid=0 auid=0 ses=121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1401560897.066:1212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401560897.066:1213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401561601.349:1214): pid=32722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401561601.349:1215): pid=32722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401561601.349:1216): pid=32722 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=122 res=1 >type=USER_START msg=audit(1401561601.355:1217): pid=32722 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401561601.355:1218): pid=32722 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401561601.388:1219): pid=32722 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401561601.389:1220): pid=32722 uid=0 auid=0 ses=122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401562501.395:1221): pid=579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401562501.395:1222): pid=579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401562501.396:1223): pid=579 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=123 res=1 >type=USER_START msg=audit(1401562501.400:1224): pid=579 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401562501.400:1225): pid=579 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401562501.434:1226): pid=579 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401562501.435:1227): pid=579 uid=0 auid=0 ses=123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401562861.438:1228): pid=725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401562861.438:1229): pid=725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401562861.438:1230): pid=725 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=124 res=1 >type=USER_START msg=audit(1401562861.442:1231): pid=725 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401562861.442:1232): pid=725 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401562861.454:1233): avc: denied { read } for pid=751 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401562861.454:1233): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff63e8eb90 a2=90800 a3=0 items=0 ppid=749 pid=751 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=124 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401562861.505:1234): pid=725 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401562861.506:1235): pid=725 uid=0 auid=0 ses=124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401563401.510:1236): pid=959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401563401.510:1237): pid=959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401563401.510:1238): pid=959 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=125 res=1 >type=USER_START msg=audit(1401563401.515:1239): pid=959 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401563401.515:1240): pid=959 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401563401.544:1241): pid=959 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401563401.545:1242): pid=959 uid=0 auid=0 ses=125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401564301.550:1243): pid=1263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401564301.550:1244): pid=1263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401564301.550:1245): pid=1263 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=126 res=1 >type=USER_START msg=audit(1401564301.554:1246): pid=1263 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401564301.554:1247): pid=1263 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401564301.590:1248): pid=1263 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401564301.590:1249): pid=1263 uid=0 auid=0 ses=126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401565201.596:1250): pid=1599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401565201.596:1251): pid=1599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401565201.596:1252): pid=1599 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=127 res=1 >type=USER_START msg=audit(1401565201.600:1253): pid=1599 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401565201.600:1254): pid=1599 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401565201.654:1255): pid=1599 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401565201.654:1256): pid=1599 uid=0 auid=0 ses=127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401566101.659:1257): pid=1954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401566101.659:1258): pid=1954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401566101.659:1259): pid=1954 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=128 res=1 >type=USER_START msg=audit(1401566101.663:1260): pid=1954 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401566101.663:1261): pid=1954 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401566101.697:1262): pid=1954 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401566101.697:1263): pid=1954 uid=0 auid=0 ses=128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401566461.702:1264): pid=2077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401566461.702:1265): pid=2077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401566461.702:1266): pid=2077 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=129 res=1 >type=USER_START msg=audit(1401566461.706:1267): pid=2077 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401566461.706:1268): pid=2077 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401566461.718:1269): avc: denied { read } for pid=2099 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401566461.718:1269): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffc9d539e0 a2=90800 a3=0 items=0 ppid=2097 pid=2099 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=129 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401566461.749:1270): pid=2077 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401566461.750:1271): pid=2077 uid=0 auid=0 ses=129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401567001.753:1272): pid=2285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401567001.753:1273): pid=2285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401567001.753:1274): pid=2285 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=130 res=1 >type=USER_START msg=audit(1401567001.758:1275): pid=2285 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401567001.758:1276): pid=2285 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401567001.783:1277): pid=2285 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401567001.783:1278): pid=2285 uid=0 auid=0 ses=130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401567901.788:1279): pid=2586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401567901.788:1280): pid=2586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401567901.788:1281): pid=2586 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=131 res=1 >type=USER_START msg=audit(1401567901.792:1282): pid=2586 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401567901.793:1283): pid=2586 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401567901.817:1284): pid=2586 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401567901.818:1285): pid=2586 uid=0 auid=0 ses=131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401568801.823:1286): pid=2890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401568801.823:1287): pid=2890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401568801.823:1288): pid=2890 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=132 res=1 >type=USER_START msg=audit(1401568801.827:1289): pid=2890 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401568801.827:1290): pid=2890 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401568801.879:1291): pid=2890 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401568801.879:1292): pid=2890 uid=0 auid=0 ses=132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401569701.886:1293): pid=3193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401569701.886:1294): pid=3193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401569701.886:1295): pid=3193 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=133 res=1 >type=USER_START msg=audit(1401569701.890:1296): pid=3193 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401569701.890:1297): pid=3193 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401569701.907:1298): pid=3193 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401569701.908:1299): pid=3193 uid=0 auid=0 ses=133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401570061.911:1300): pid=3318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401570061.911:1301): pid=3318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401570061.911:1302): pid=3318 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=134 res=1 >type=USER_START msg=audit(1401570061.915:1303): pid=3318 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401570061.915:1304): pid=3318 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401570061.926:1305): avc: denied { read } for pid=3340 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401570061.926:1305): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff3a965410 a2=90800 a3=0 items=0 ppid=3338 pid=3340 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=134 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401570061.950:1306): pid=3318 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401570061.951:1307): pid=3318 uid=0 auid=0 ses=134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401570601.955:1308): pid=3522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401570601.955:1309): pid=3522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401570601.955:1310): pid=3522 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=135 res=1 >type=USER_START msg=audit(1401570601.959:1311): pid=3522 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401570601.959:1312): pid=3522 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401570601.992:1313): pid=3522 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401570601.993:1314): pid=3522 uid=0 auid=0 ses=135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401571501.998:1315): pid=3825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401571501.998:1316): pid=3825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401571501.998:1317): pid=3825 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=136 res=1 >type=USER_START msg=audit(1401571502.003:1318): pid=3825 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401571502.003:1319): pid=3825 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401571502.038:1320): pid=3825 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401571502.039:1321): pid=3825 uid=0 auid=0 ses=136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401572401.044:1322): pid=4127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401572401.044:1323): pid=4127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401572401.044:1324): pid=4127 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=137 res=1 >type=USER_START msg=audit(1401572401.048:1325): pid=4127 uid=0 auid=0 ses=137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401572401.048:1326): pid=4127 uid=0 auid=0 ses=137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401572401.073:1327): pid=4127 uid=0 auid=0 ses=137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401572401.073:1328): pid=4127 uid=0 auid=0 ses=137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401573301.079:1329): pid=4430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401573301.079:1330): pid=4430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401573301.079:1331): pid=4430 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=138 res=1 >type=USER_START msg=audit(1401573301.083:1332): pid=4430 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401573301.083:1333): pid=4430 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401573301.130:1334): pid=4430 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401573301.130:1335): pid=4430 uid=0 auid=0 ses=138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401573661.135:1336): pid=4553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401573661.135:1337): pid=4553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401573661.135:1338): pid=4553 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=139 res=1 >type=USER_START msg=audit(1401573661.139:1339): pid=4553 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401573661.139:1340): pid=4553 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401573661.150:1341): avc: denied { read } for pid=4575 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401573661.150:1341): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffcb6e0650 a2=90800 a3=0 items=0 ppid=4573 pid=4575 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=139 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401573663.113:1342): pid=4553 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401573663.114:1343): pid=4553 uid=0 auid=0 ses=139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401574201.119:1344): pid=4760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401574201.119:1345): pid=4760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401574201.119:1346): pid=4760 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=140 res=1 >type=USER_START msg=audit(1401574201.123:1347): pid=4760 uid=0 auid=0 ses=140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401574201.123:1348): pid=4760 uid=0 auid=0 ses=140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401574201.169:1349): pid=4760 uid=0 auid=0 ses=140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401574201.170:1350): pid=4760 uid=0 auid=0 ses=140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401575101.174:1351): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401575101.174:1352): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401575101.175:1353): pid=5064 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=141 res=1 >type=USER_START msg=audit(1401575101.179:1354): pid=5064 uid=0 auid=0 ses=141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401575101.179:1355): pid=5064 uid=0 auid=0 ses=141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401575101.211:1356): pid=5064 uid=0 auid=0 ses=141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401575101.212:1357): pid=5064 uid=0 auid=0 ses=141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401576001.217:1358): pid=5366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401576001.217:1359): pid=5366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401576001.217:1360): pid=5366 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=142 res=1 >type=USER_START msg=audit(1401576001.221:1361): pid=5366 uid=0 auid=0 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401576001.221:1362): pid=5366 uid=0 auid=0 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401576001.450:1363): pid=5366 uid=0 auid=0 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401576001.451:1364): pid=5366 uid=0 auid=0 ses=142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401576901.457:1365): pid=5666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401576901.457:1366): pid=5666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401576901.457:1367): pid=5666 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=143 res=1 >type=USER_START msg=audit(1401576901.461:1368): pid=5666 uid=0 auid=0 ses=143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401576901.461:1369): pid=5666 uid=0 auid=0 ses=143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401576901.509:1370): pid=5666 uid=0 auid=0 ses=143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401576901.509:1371): pid=5666 uid=0 auid=0 ses=143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401577261.512:1372): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401577261.512:1373): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401577261.513:1374): pid=5790 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=144 res=1 >type=USER_START msg=audit(1401577261.516:1375): pid=5790 uid=0 auid=0 ses=144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401577261.516:1376): pid=5790 uid=0 auid=0 ses=144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401577261.528:1377): avc: denied { read } for pid=5812 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401577261.528:1377): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff2b53cb00 a2=90800 a3=0 items=0 ppid=5810 pid=5812 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=144 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401577261.559:1378): pid=5790 uid=0 auid=0 ses=144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401577261.560:1379): pid=5790 uid=0 auid=0 ses=144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401577801.565:1380): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401577801.565:1381): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401577801.565:1382): pid=5996 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=145 res=1 >type=USER_START msg=audit(1401577801.569:1383): pid=5996 uid=0 auid=0 ses=145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401577801.569:1384): pid=5996 uid=0 auid=0 ses=145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401577801.600:1385): pid=5996 uid=0 auid=0 ses=145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401577801.601:1386): pid=5996 uid=0 auid=0 ses=145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401578701.606:1387): pid=6298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401578701.606:1388): pid=6298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401578701.606:1389): pid=6298 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=146 res=1 >type=USER_START msg=audit(1401578701.610:1390): pid=6298 uid=0 auid=0 ses=146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401578701.611:1391): pid=6298 uid=0 auid=0 ses=146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401578701.651:1392): pid=6298 uid=0 auid=0 ses=146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401578701.651:1393): pid=6298 uid=0 auid=0 ses=146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401579601.657:1394): pid=6599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401579601.657:1395): pid=6599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401579601.657:1396): pid=6599 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=147 res=1 >type=USER_START msg=audit(1401579601.661:1397): pid=6599 uid=0 auid=0 ses=147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401579601.661:1398): pid=6599 uid=0 auid=0 ses=147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401579601.693:1399): pid=6599 uid=0 auid=0 ses=147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401579601.694:1400): pid=6599 uid=0 auid=0 ses=147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401580501.699:1401): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401580501.699:1402): pid=6899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401580501.699:1403): pid=6899 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=148 res=1 >type=USER_START msg=audit(1401580501.704:1404): pid=6899 uid=0 auid=0 ses=148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401580501.704:1405): pid=6899 uid=0 auid=0 ses=148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401580501.735:1406): pid=6899 uid=0 auid=0 ses=148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401580501.736:1407): pid=6899 uid=0 auid=0 ses=148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401580861.739:1408): pid=7022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401580861.740:1409): pid=7022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401580861.740:1410): pid=7022 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=149 res=1 >type=USER_START msg=audit(1401580861.744:1411): pid=7022 uid=0 auid=0 ses=149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401580861.744:1412): pid=7022 uid=0 auid=0 ses=149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401580861.755:1413): avc: denied { read } for pid=7044 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401580861.755:1413): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff71ba87f0 a2=90800 a3=0 items=0 ppid=7042 pid=7044 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=149 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401580861.777:1414): pid=7022 uid=0 auid=0 ses=149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401580861.778:1415): pid=7022 uid=0 auid=0 ses=149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401581401.783:1416): pid=7229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401581401.783:1417): pid=7229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401581401.784:1418): pid=7229 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=150 res=1 >type=USER_START msg=audit(1401581401.788:1419): pid=7229 uid=0 auid=0 ses=150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401581401.788:1420): pid=7229 uid=0 auid=0 ses=150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401581401.812:1421): pid=7229 uid=0 auid=0 ses=150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401581401.813:1422): pid=7229 uid=0 auid=0 ses=150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401582301.817:1423): pid=7528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401582301.817:1424): pid=7528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401582301.817:1425): pid=7528 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=151 res=1 >type=USER_START msg=audit(1401582301.821:1426): pid=7528 uid=0 auid=0 ses=151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401582301.821:1427): pid=7528 uid=0 auid=0 ses=151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401582301.878:1428): pid=7528 uid=0 auid=0 ses=151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401582301.879:1429): pid=7528 uid=0 auid=0 ses=151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401583201.884:1430): pid=7832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401583201.884:1431): pid=7832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401583201.884:1432): pid=7832 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=152 res=1 >type=USER_START msg=audit(1401583201.890:1433): pid=7832 uid=0 auid=0 ses=152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401583201.890:1434): pid=7832 uid=0 auid=0 ses=152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401583201.908:1435): pid=7832 uid=0 auid=0 ses=152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401583201.909:1436): pid=7832 uid=0 auid=0 ses=152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401584101.916:1437): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401584101.916:1438): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401584101.916:1439): pid=8135 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=153 res=1 >type=USER_START msg=audit(1401584101.920:1440): pid=8135 uid=0 auid=0 ses=153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401584101.920:1441): pid=8135 uid=0 auid=0 ses=153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401584101.936:1442): pid=8135 uid=0 auid=0 ses=153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401584101.936:1443): pid=8135 uid=0 auid=0 ses=153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401584461.939:1444): pid=8259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401584461.939:1445): pid=8259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401584461.939:1446): pid=8259 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=154 res=1 >type=USER_START msg=audit(1401584461.943:1447): pid=8259 uid=0 auid=0 ses=154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401584461.943:1448): pid=8259 uid=0 auid=0 ses=154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401584461.954:1449): avc: denied { read } for pid=8281 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401584461.954:1449): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffda0ee2e0 a2=90800 a3=0 items=0 ppid=8279 pid=8281 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=154 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401584461.998:1450): pid=8259 uid=0 auid=0 ses=154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401584461.999:1451): pid=8259 uid=0 auid=0 ses=154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401585001.003:1452): pid=8467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401585001.003:1453): pid=8467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401585001.003:1454): pid=8467 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=155 res=1 >type=USER_START msg=audit(1401585001.007:1455): pid=8467 uid=0 auid=0 ses=155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401585001.007:1456): pid=8467 uid=0 auid=0 ses=155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401585001.029:1457): pid=8467 uid=0 auid=0 ses=155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401585001.029:1458): pid=8467 uid=0 auid=0 ses=155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401585901.035:1459): pid=8769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401585901.035:1460): pid=8769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401585901.036:1461): pid=8769 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=156 res=1 >type=USER_START msg=audit(1401585901.040:1462): pid=8769 uid=0 auid=0 ses=156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401585901.040:1463): pid=8769 uid=0 auid=0 ses=156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401585901.057:1464): pid=8769 uid=0 auid=0 ses=156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401585901.058:1465): pid=8769 uid=0 auid=0 ses=156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401586801.062:1466): pid=9073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401586801.062:1467): pid=9073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401586801.062:1468): pid=9073 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=157 res=1 >type=USER_START msg=audit(1401586801.067:1469): pid=9073 uid=0 auid=0 ses=157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401586801.067:1470): pid=9073 uid=0 auid=0 ses=157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401586801.100:1471): pid=9073 uid=0 auid=0 ses=157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401586801.100:1472): pid=9073 uid=0 auid=0 ses=157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401587701.106:1473): pid=9376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401587701.106:1474): pid=9376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401587701.106:1475): pid=9376 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=158 res=1 >type=USER_START msg=audit(1401587701.110:1476): pid=9376 uid=0 auid=0 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401587701.110:1477): pid=9376 uid=0 auid=0 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401587701.143:1478): pid=9376 uid=0 auid=0 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401587701.144:1479): pid=9376 uid=0 auid=0 ses=158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401588061.148:1480): pid=9500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401588061.148:1481): pid=9500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401588061.148:1482): pid=9500 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=159 res=1 >type=USER_START msg=audit(1401588061.152:1483): pid=9500 uid=0 auid=0 ses=159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401588061.152:1484): pid=9500 uid=0 auid=0 ses=159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401588061.164:1485): avc: denied { read } for pid=9522 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401588061.164:1485): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffb92b8d30 a2=90800 a3=0 items=0 ppid=9520 pid=9522 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=159 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401588061.207:1486): pid=9500 uid=0 auid=0 ses=159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401588061.207:1487): pid=9500 uid=0 auid=0 ses=159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401588601.213:1488): pid=9705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401588601.213:1489): pid=9705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401588601.213:1490): pid=9705 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=160 res=1 >type=USER_START msg=audit(1401588601.217:1491): pid=9705 uid=0 auid=0 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401588601.217:1492): pid=9705 uid=0 auid=0 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401588601.239:1493): pid=9705 uid=0 auid=0 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401588601.240:1494): pid=9705 uid=0 auid=0 ses=160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401589501.244:1495): pid=10006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401589501.244:1496): pid=10006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401589501.244:1497): pid=10006 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=161 res=1 >type=USER_START msg=audit(1401589501.248:1498): pid=10006 uid=0 auid=0 ses=161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401589501.248:1499): pid=10006 uid=0 auid=0 ses=161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401589501.286:1500): pid=10006 uid=0 auid=0 ses=161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401589501.286:1501): pid=10006 uid=0 auid=0 ses=161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401590401.292:1502): pid=10309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401590401.292:1503): pid=10309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401590401.292:1504): pid=10309 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=162 res=1 >type=USER_START msg=audit(1401590401.296:1505): pid=10309 uid=0 auid=0 ses=162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401590401.296:1506): pid=10309 uid=0 auid=0 ses=162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401590401.354:1507): pid=10309 uid=0 auid=0 ses=162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401590401.354:1508): pid=10309 uid=0 auid=0 ses=162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401591301.360:1509): pid=10611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401591301.360:1510): pid=10611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401591301.360:1511): pid=10611 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=163 res=1 >type=USER_START msg=audit(1401591301.364:1512): pid=10611 uid=0 auid=0 ses=163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401591301.364:1513): pid=10611 uid=0 auid=0 ses=163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401591301.380:1514): pid=10611 uid=0 auid=0 ses=163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401591301.380:1515): pid=10611 uid=0 auid=0 ses=163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401591661.384:1516): pid=10735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401591661.384:1517): pid=10735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401591661.385:1518): pid=10735 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=164 res=1 >type=USER_START msg=audit(1401591661.389:1519): pid=10735 uid=0 auid=0 ses=164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401591661.389:1520): pid=10735 uid=0 auid=0 ses=164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401591661.400:1521): avc: denied { read } for pid=10757 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401591661.400:1521): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff2ac17950 a2=90800 a3=0 items=0 ppid=10755 pid=10757 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=164 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401591661.414:1522): pid=10735 uid=0 auid=0 ses=164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401591661.415:1523): pid=10735 uid=0 auid=0 ses=164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401592201.420:1524): pid=10942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401592201.420:1525): pid=10942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401592201.420:1526): pid=10942 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=165 res=1 >type=USER_START msg=audit(1401592201.424:1527): pid=10942 uid=0 auid=0 ses=165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401592201.424:1528): pid=10942 uid=0 auid=0 ses=165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401592201.457:1529): pid=10942 uid=0 auid=0 ses=165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401592201.458:1530): pid=10942 uid=0 auid=0 ses=165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401593101.464:1531): pid=11244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401593101.464:1532): pid=11244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401593101.464:1533): pid=11244 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=166 res=1 >type=USER_START msg=audit(1401593101.468:1534): pid=11244 uid=0 auid=0 ses=166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401593101.468:1535): pid=11244 uid=0 auid=0 ses=166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401593101.486:1536): pid=11244 uid=0 auid=0 ses=166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401593101.486:1537): pid=11244 uid=0 auid=0 ses=166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401594001.491:1538): pid=11548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401594001.491:1539): pid=11548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401594001.491:1540): pid=11548 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=167 res=1 >type=USER_START msg=audit(1401594001.495:1541): pid=11548 uid=0 auid=0 ses=167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401594001.495:1542): pid=11548 uid=0 auid=0 ses=167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401594001.528:1543): pid=11548 uid=0 auid=0 ses=167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401594001.528:1544): pid=11548 uid=0 auid=0 ses=167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401594901.534:1545): pid=11848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401594901.534:1546): pid=11848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401594901.534:1547): pid=11848 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=168 res=1 >type=USER_START msg=audit(1401594901.538:1548): pid=11848 uid=0 auid=0 ses=168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401594901.538:1549): pid=11848 uid=0 auid=0 ses=168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401594901.553:1550): pid=11848 uid=0 auid=0 ses=168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401594901.554:1551): pid=11848 uid=0 auid=0 ses=168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401595261.558:1552): pid=11974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401595261.558:1553): pid=11974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401595261.558:1554): pid=11974 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=169 res=1 >type=USER_START msg=audit(1401595261.562:1555): pid=11974 uid=0 auid=0 ses=169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401595261.562:1556): pid=11974 uid=0 auid=0 ses=169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401595261.576:1557): avc: denied { read } for pid=11999 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401595261.576:1557): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7ffffd37b3c0 a2=90800 a3=0 items=0 ppid=11997 pid=11999 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=169 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401595261.596:1558): pid=11974 uid=0 auid=0 ses=169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401595261.597:1559): pid=11974 uid=0 auid=0 ses=169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401595801.602:1560): pid=12181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401595801.603:1561): pid=12181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401595801.603:1562): pid=12181 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=170 res=1 >type=USER_START msg=audit(1401595801.607:1563): pid=12181 uid=0 auid=0 ses=170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401595801.607:1564): pid=12181 uid=0 auid=0 ses=170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401595801.648:1565): pid=12181 uid=0 auid=0 ses=170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401595801.649:1566): pid=12181 uid=0 auid=0 ses=170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401596701.653:1567): pid=12482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401596701.653:1568): pid=12482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401596701.653:1569): pid=12482 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=171 res=1 >type=USER_START msg=audit(1401596701.658:1570): pid=12482 uid=0 auid=0 ses=171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401596701.658:1571): pid=12482 uid=0 auid=0 ses=171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401596701.675:1572): pid=12482 uid=0 auid=0 ses=171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401596701.676:1573): pid=12482 uid=0 auid=0 ses=171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401597601.682:1574): pid=12786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401597601.682:1575): pid=12786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401597601.682:1576): pid=12786 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=172 res=1 >type=USER_START msg=audit(1401597601.686:1577): pid=12786 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401597601.686:1578): pid=12786 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401597601.707:1579): pid=12786 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401597601.707:1580): pid=12786 uid=0 auid=0 ses=172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401598501.711:1581): pid=13089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401598501.712:1582): pid=13089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401598501.712:1583): pid=13089 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=173 res=1 >type=USER_START msg=audit(1401598501.716:1584): pid=13089 uid=0 auid=0 ses=173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401598501.716:1585): pid=13089 uid=0 auid=0 ses=173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401598501.766:1586): pid=13089 uid=0 auid=0 ses=173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401598501.766:1587): pid=13089 uid=0 auid=0 ses=173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401598801.771:1588): pid=13194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401598801.771:1589): pid=13194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401598801.771:1590): pid=13194 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=174 res=1 >type=USER_START msg=audit(1401598801.776:1591): pid=13194 uid=0 auid=0 ses=174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401598801.776:1592): pid=13194 uid=0 auid=0 ses=174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401598801.810:1593): pid=13194 uid=0 auid=0 ses=174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401598801.811:1594): pid=13194 uid=0 auid=0 ses=174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401598861.813:1595): pid=13221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401598861.813:1596): pid=13221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401598861.813:1597): pid=13221 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=175 res=1 >type=USER_START msg=audit(1401598861.817:1598): pid=13221 uid=0 auid=0 ses=175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401598861.818:1599): pid=13221 uid=0 auid=0 ses=175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401598861.832:1600): avc: denied { read } for pid=13246 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401598861.832:1600): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff57c9f9d0 a2=90800 a3=0 items=0 ppid=13244 pid=13246 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=175 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401598861.863:1601): pid=13221 uid=0 auid=0 ses=175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401598861.863:1602): pid=13221 uid=0 auid=0 ses=175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401599401.868:1603): pid=13432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401599401.868:1604): pid=13432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401599401.868:1605): pid=13432 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=176 res=1 >type=USER_START msg=audit(1401599401.872:1606): pid=13432 uid=0 auid=0 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401599401.872:1607): pid=13432 uid=0 auid=0 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401599401.894:1608): pid=13432 uid=0 auid=0 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401599401.895:1609): pid=13432 uid=0 auid=0 ses=176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401600301.901:1610): pid=13733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401600301.901:1611): pid=13733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401600301.901:1612): pid=13733 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=177 res=1 >type=USER_START msg=audit(1401600301.906:1613): pid=13733 uid=0 auid=0 ses=177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401600301.906:1614): pid=13733 uid=0 auid=0 ses=177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401600301.921:1615): pid=13733 uid=0 auid=0 ses=177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401600301.922:1616): pid=13733 uid=0 auid=0 ses=177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401601201.926:1617): pid=14034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401601201.926:1618): pid=14034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401601201.927:1619): pid=14034 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=178 res=1 >type=USER_START msg=audit(1401601201.931:1620): pid=14034 uid=0 auid=0 ses=178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401601201.931:1621): pid=14034 uid=0 auid=0 ses=178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401601201.988:1622): pid=14034 uid=0 auid=0 ses=178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401601201.988:1623): pid=14034 uid=0 auid=0 ses=178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401602101.994:1624): pid=14336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401602101.994:1625): pid=14336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401602101.994:1626): pid=14336 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=179 res=1 >type=USER_START msg=audit(1401602101.998:1627): pid=14336 uid=0 auid=0 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401602101.998:1628): pid=14336 uid=0 auid=0 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401602102.013:1629): pid=14336 uid=0 auid=0 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401602102.014:1630): pid=14336 uid=0 auid=0 ses=179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401602461.018:1631): pid=14460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401602461.018:1632): pid=14460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401602461.018:1633): pid=14460 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=180 res=1 >type=USER_START msg=audit(1401602461.022:1634): pid=14460 uid=0 auid=0 ses=180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401602461.022:1635): pid=14460 uid=0 auid=0 ses=180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401602461.036:1636): avc: denied { read } for pid=14485 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401602461.036:1636): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff073c9f60 a2=90800 a3=0 items=0 ppid=14483 pid=14485 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=180 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401602461.056:1637): pid=14460 uid=0 auid=0 ses=180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401602461.056:1638): pid=14460 uid=0 auid=0 ses=180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401603001.060:1639): pid=14671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401603001.061:1640): pid=14671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401603001.061:1641): pid=14671 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=181 res=1 >type=USER_START msg=audit(1401603001.065:1642): pid=14671 uid=0 auid=0 ses=181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401603001.065:1643): pid=14671 uid=0 auid=0 ses=181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401603001.107:1644): pid=14671 uid=0 auid=0 ses=181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401603001.107:1645): pid=14671 uid=0 auid=0 ses=181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401603901.113:1646): pid=14973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401603901.113:1647): pid=14973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401603901.113:1648): pid=14973 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=182 res=1 >type=USER_START msg=audit(1401603901.117:1649): pid=14973 uid=0 auid=0 ses=182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401603901.117:1650): pid=14973 uid=0 auid=0 ses=182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401603901.168:1651): pid=14973 uid=0 auid=0 ses=182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401603901.169:1652): pid=14973 uid=0 auid=0 ses=182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401604801.175:1653): pid=15276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401604801.175:1654): pid=15276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401604801.175:1655): pid=15276 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=183 res=1 >type=USER_START msg=audit(1401604801.179:1656): pid=15276 uid=0 auid=0 ses=183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401604801.179:1657): pid=15276 uid=0 auid=0 ses=183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401604801.194:1658): pid=15276 uid=0 auid=0 ses=183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401604801.195:1659): pid=15276 uid=0 auid=0 ses=183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401605701.199:1660): pid=15578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401605701.199:1661): pid=15578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401605701.199:1662): pid=15578 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=184 res=1 >type=USER_START msg=audit(1401605701.203:1663): pid=15578 uid=0 auid=0 ses=184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401605701.203:1664): pid=15578 uid=0 auid=0 ses=184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401605701.245:1665): pid=15578 uid=0 auid=0 ses=184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401605701.245:1666): pid=15578 uid=0 auid=0 ses=184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401606061.250:1667): pid=15702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401606061.250:1668): pid=15702 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401606061.250:1669): pid=15702 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=185 res=1 >type=USER_START msg=audit(1401606061.254:1670): pid=15702 uid=0 auid=0 ses=185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401606061.254:1671): pid=15702 uid=0 auid=0 ses=185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401606061.268:1672): avc: denied { read } for pid=15727 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401606061.268:1672): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffb4596ab0 a2=90800 a3=0 items=0 ppid=15725 pid=15727 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=185 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401606061.288:1673): pid=15702 uid=0 auid=0 ses=185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401606061.289:1674): pid=15702 uid=0 auid=0 ses=185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401606601.293:1675): pid=15910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="unbound" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401606601.293:1676): pid=15910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="unbound" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401606601.293:1677): pid=15910 uid=0 old-auid=4294967295 new-auid=996 old-ses=4294967295 new-ses=186 res=1 >type=USER_ACCT msg=audit(1401606601.294:1678): pid=15911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401606601.294:1679): pid=15911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401606601.294:1680): pid=15911 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=187 res=1 >type=USER_START msg=audit(1401606601.302:1681): pid=15910 uid=0 auid=996 ses=186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="unbound" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401606601.302:1682): pid=15910 uid=0 auid=996 ses=186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="unbound" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_START msg=audit(1401606601.302:1683): pid=15911 uid=0 auid=0 ses=187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401606601.302:1684): pid=15911 uid=0 auid=0 ses=187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401606601.308:1685): pid=15914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting acct="unbound" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1401606601.309:1686): pid=15914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="unbound" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401606601.340:1687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="user@996" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1401606601.398:1688): pid=15911 uid=0 auid=0 ses=187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401606601.398:1689): pid=15911 uid=0 auid=0 ses=187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401606601.551:1690): pid=15910 uid=0 auid=996 ses=186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="unbound" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401606601.552:1691): pid=15910 uid=0 auid=996 ses=186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="unbound" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401607501.559:1692): pid=16218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401607501.559:1693): pid=16218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401607501.559:1694): pid=16218 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=188 res=1 >type=USER_START msg=audit(1401607501.564:1695): pid=16218 uid=0 auid=0 ses=188 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401607501.564:1696): pid=16218 uid=0 auid=0 ses=188 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401607501.580:1697): pid=16218 uid=0 auid=0 ses=188 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401607501.581:1698): pid=16218 uid=0 auid=0 ses=188 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401607681.269:1699): avc: denied { read } for pid=16289 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401607681.269:1699): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7ffff0177710 a2=90800 a3=0 items=0 ppid=16287 pid=16289 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=185 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1401608401.587:1700): pid=16557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401608401.587:1701): pid=16557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401608401.587:1702): pid=16557 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=189 res=1 >type=USER_START msg=audit(1401608401.593:1703): pid=16557 uid=0 auid=0 ses=189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401608401.593:1704): pid=16557 uid=0 auid=0 ses=189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401608401.611:1705): pid=16557 uid=0 auid=0 ses=189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401608401.612:1706): pid=16557 uid=0 auid=0 ses=189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401609301.622:1707): pid=18893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401609301.622:1708): pid=18893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401609301.623:1709): pid=18893 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=190 res=1 >type=USER_START msg=audit(1401609301.629:1710): pid=18893 uid=0 auid=0 ses=190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401609301.629:1711): pid=18893 uid=0 auid=0 ses=190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401609301.651:1712): pid=18893 uid=0 auid=0 ses=190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401609301.652:1713): pid=18893 uid=0 auid=0 ses=190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401609661.656:1714): pid=19017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401609661.656:1715): pid=19017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401609661.656:1716): pid=19017 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=191 res=1 >type=USER_START msg=audit(1401609661.661:1717): pid=19017 uid=0 auid=0 ses=191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401609661.661:1718): pid=19017 uid=0 auid=0 ses=191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401609661.674:1719): avc: denied { read } for pid=19039 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401609661.674:1719): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff6d5edac0 a2=90800 a3=0 items=0 ppid=19037 pid=19039 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=191 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401609661.889:1720): pid=19017 uid=0 auid=0 ses=191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401609661.890:1721): pid=19017 uid=0 auid=0 ses=191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401610201.895:1722): pid=19224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401610201.895:1723): pid=19224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401610201.895:1724): pid=19224 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=192 res=1 >type=USER_START msg=audit(1401610201.900:1725): pid=19224 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401610201.900:1726): pid=19224 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401610201.929:1727): pid=19224 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401610201.929:1728): pid=19224 uid=0 auid=0 ses=192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401611101.935:1729): pid=19526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401611101.935:1730): pid=19526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401611101.935:1731): pid=19526 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=193 res=1 >type=USER_START msg=audit(1401611101.939:1732): pid=19526 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401611101.939:1733): pid=19526 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401611101.979:1734): pid=19526 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401611101.979:1735): pid=19526 uid=0 auid=0 ses=193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401612001.986:1736): pid=19830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401612001.986:1737): pid=19830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401612001.986:1738): pid=19830 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=194 res=1 >type=USER_START msg=audit(1401612001.990:1739): pid=19830 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401612001.990:1740): pid=19830 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401612002.023:1741): pid=19830 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401612002.024:1742): pid=19830 uid=0 auid=0 ses=194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401612901.028:1743): pid=20131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401612901.028:1744): pid=20131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401612901.028:1745): pid=20131 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=195 res=1 >type=USER_START msg=audit(1401612901.032:1746): pid=20131 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401612901.032:1747): pid=20131 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401612901.065:1748): pid=20131 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401612901.065:1749): pid=20131 uid=0 auid=0 ses=195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401613261.070:1750): pid=20255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401613261.070:1751): pid=20255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401613261.070:1752): pid=20255 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=196 res=1 >type=USER_START msg=audit(1401613261.074:1753): pid=20255 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401613261.074:1754): pid=20255 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401613261.086:1755): avc: denied { read } for pid=20277 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401613261.086:1755): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff885d5e80 a2=90800 a3=0 items=0 ppid=20275 pid=20277 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=196 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401613261.117:1756): pid=20255 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401613261.117:1757): pid=20255 uid=0 auid=0 ses=196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401613801.121:1758): pid=20461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401613801.121:1759): pid=20461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401613801.121:1760): pid=20461 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=197 res=1 >type=USER_START msg=audit(1401613801.125:1761): pid=20461 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401613801.125:1762): pid=20461 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401613801.142:1763): pid=20461 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401613801.142:1764): pid=20461 uid=0 auid=0 ses=197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401614701.148:1765): pid=20764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401614701.148:1766): pid=20764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401614701.148:1767): pid=20764 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=198 res=1 >type=USER_START msg=audit(1401614701.152:1768): pid=20764 uid=0 auid=0 ses=198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401614701.152:1769): pid=20764 uid=0 auid=0 ses=198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401614701.186:1770): pid=20764 uid=0 auid=0 ses=198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401614701.186:1771): pid=20764 uid=0 auid=0 ses=198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401615601.192:1772): pid=21068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401615601.192:1773): pid=21068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401615601.192:1774): pid=21068 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=199 res=1 >type=USER_START msg=audit(1401615601.196:1775): pid=21068 uid=0 auid=0 ses=199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401615601.196:1776): pid=21068 uid=0 auid=0 ses=199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401615601.237:1777): pid=21068 uid=0 auid=0 ses=199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401615601.238:1778): pid=21068 uid=0 auid=0 ses=199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401616501.244:1779): pid=21370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401616501.244:1780): pid=21370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401616501.244:1781): pid=21370 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=200 res=1 >type=USER_START msg=audit(1401616501.248:1782): pid=21370 uid=0 auid=0 ses=200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401616501.249:1783): pid=21370 uid=0 auid=0 ses=200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401616501.263:1784): pid=21370 uid=0 auid=0 ses=200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401616501.264:1785): pid=21370 uid=0 auid=0 ses=200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401616861.267:1786): pid=21494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401616861.267:1787): pid=21494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401616861.267:1788): pid=21494 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=201 res=1 >type=USER_START msg=audit(1401616861.271:1789): pid=21494 uid=0 auid=0 ses=201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401616861.271:1790): pid=21494 uid=0 auid=0 ses=201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401616861.283:1791): avc: denied { read } for pid=21516 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401616861.283:1791): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffa1db9010 a2=90800 a3=0 items=0 ppid=21514 pid=21516 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=201 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401616861.305:1792): pid=21494 uid=0 auid=0 ses=201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401616861.306:1793): pid=21494 uid=0 auid=0 ses=201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401617401.310:1794): pid=21701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401617401.310:1795): pid=21701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401617401.310:1796): pid=21701 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=202 res=1 >type=USER_START msg=audit(1401617401.314:1797): pid=21701 uid=0 auid=0 ses=202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401617401.314:1798): pid=21701 uid=0 auid=0 ses=202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401617401.356:1799): pid=21701 uid=0 auid=0 ses=202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401617401.356:1800): pid=21701 uid=0 auid=0 ses=202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401618301.362:1801): pid=22003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401618301.362:1802): pid=22003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401618301.362:1803): pid=22003 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=203 res=1 >type=USER_START msg=audit(1401618301.366:1804): pid=22003 uid=0 auid=0 ses=203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401618301.366:1805): pid=22003 uid=0 auid=0 ses=203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401618301.381:1806): pid=22003 uid=0 auid=0 ses=203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401618301.381:1807): pid=22003 uid=0 auid=0 ses=203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401619201.388:1808): pid=22306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401619201.388:1809): pid=22306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401619201.388:1810): pid=22306 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=204 res=1 >type=USER_START msg=audit(1401619201.392:1811): pid=22306 uid=0 auid=0 ses=204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401619201.392:1812): pid=22306 uid=0 auid=0 ses=204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401619201.430:1813): pid=22306 uid=0 auid=0 ses=204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401619201.430:1814): pid=22306 uid=0 auid=0 ses=204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401620101.435:1815): pid=22607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401620101.435:1816): pid=22607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401620101.435:1817): pid=22607 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=205 res=1 >type=USER_START msg=audit(1401620101.439:1818): pid=22607 uid=0 auid=0 ses=205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401620101.439:1819): pid=22607 uid=0 auid=0 ses=205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401620101.489:1820): pid=22607 uid=0 auid=0 ses=205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401620101.490:1821): pid=22607 uid=0 auid=0 ses=205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401620461.494:1822): pid=22731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401620461.495:1823): pid=22731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401620461.495:1824): pid=22731 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=206 res=1 >type=USER_START msg=audit(1401620461.499:1825): pid=22731 uid=0 auid=0 ses=206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401620461.499:1826): pid=22731 uid=0 auid=0 ses=206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401620461.510:1827): avc: denied { read } for pid=22753 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401620461.510:1827): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffe225e290 a2=90800 a3=0 items=0 ppid=22751 pid=22753 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=206 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401620461.528:1828): pid=22731 uid=0 auid=0 ses=206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401620461.529:1829): pid=22731 uid=0 auid=0 ses=206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401621001.533:1830): pid=22937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401621001.533:1831): pid=22937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401621001.533:1832): pid=22937 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=207 res=1 >type=USER_START msg=audit(1401621001.537:1833): pid=22937 uid=0 auid=0 ses=207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401621001.537:1834): pid=22937 uid=0 auid=0 ses=207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401621001.593:1835): pid=22937 uid=0 auid=0 ses=207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401621001.594:1836): pid=22937 uid=0 auid=0 ses=207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401621901.598:1837): pid=23239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401621901.598:1838): pid=23239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401621901.598:1839): pid=23239 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=208 res=1 >type=USER_START msg=audit(1401621901.602:1840): pid=23239 uid=0 auid=0 ses=208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401621901.602:1841): pid=23239 uid=0 auid=0 ses=208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401621901.627:1842): pid=23239 uid=0 auid=0 ses=208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401621901.628:1843): pid=23239 uid=0 auid=0 ses=208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401622801.633:1844): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401622801.633:1845): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401622801.633:1846): pid=23540 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=209 res=1 >type=USER_START msg=audit(1401622801.637:1847): pid=23540 uid=0 auid=0 ses=209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401622801.638:1848): pid=23540 uid=0 auid=0 ses=209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401622801.665:1849): pid=23540 uid=0 auid=0 ses=209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401622801.665:1850): pid=23540 uid=0 auid=0 ses=209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401623701.672:1851): pid=23844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401623701.672:1852): pid=23844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401623701.672:1853): pid=23844 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=210 res=1 >type=USER_START msg=audit(1401623701.676:1854): pid=23844 uid=0 auid=0 ses=210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401623701.676:1855): pid=23844 uid=0 auid=0 ses=210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401623701.725:1856): pid=23844 uid=0 auid=0 ses=210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401623701.726:1857): pid=23844 uid=0 auid=0 ses=210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401624061.728:1858): pid=23966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401624061.728:1859): pid=23966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401624061.729:1860): pid=23966 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=211 res=1 >type=USER_START msg=audit(1401624061.733:1861): pid=23966 uid=0 auid=0 ses=211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401624061.733:1862): pid=23966 uid=0 auid=0 ses=211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401624061.745:1863): avc: denied { read } for pid=23988 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401624061.745:1863): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff296256d0 a2=90800 a3=0 items=0 ppid=23986 pid=23988 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=211 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401624064.211:1864): pid=23966 uid=0 auid=0 ses=211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401624064.212:1865): pid=23966 uid=0 auid=0 ses=211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401624601.216:1866): pid=24174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401624601.216:1867): pid=24174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401624601.216:1868): pid=24174 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=212 res=1 >type=USER_START msg=audit(1401624601.220:1869): pid=24174 uid=0 auid=0 ses=212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401624601.220:1870): pid=24174 uid=0 auid=0 ses=212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401624601.236:1871): pid=24174 uid=0 auid=0 ses=212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401624601.236:1872): pid=24174 uid=0 auid=0 ses=212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401625501.242:1873): pid=24475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401625501.242:1874): pid=24475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401625501.242:1875): pid=24475 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=213 res=1 >type=USER_START msg=audit(1401625501.246:1876): pid=24475 uid=0 auid=0 ses=213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401625501.246:1877): pid=24475 uid=0 auid=0 ses=213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401625501.298:1878): pid=24475 uid=0 auid=0 ses=213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401625501.298:1879): pid=24475 uid=0 auid=0 ses=213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401626401.303:1880): pid=24776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401626401.303:1881): pid=24776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401626401.303:1882): pid=24776 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=214 res=1 >type=USER_START msg=audit(1401626401.307:1883): pid=24776 uid=0 auid=0 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401626401.307:1884): pid=24776 uid=0 auid=0 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401626401.324:1885): pid=24776 uid=0 auid=0 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401626401.325:1886): pid=24776 uid=0 auid=0 ses=214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401627301.330:1887): pid=25080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401627301.331:1888): pid=25080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401627301.331:1889): pid=25080 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=215 res=1 >type=USER_START msg=audit(1401627301.335:1890): pid=25080 uid=0 auid=0 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401627301.335:1891): pid=25080 uid=0 auid=0 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401627301.367:1892): pid=25080 uid=0 auid=0 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401627301.367:1893): pid=25080 uid=0 auid=0 ses=215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401627661.372:1894): pid=25203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401627661.372:1895): pid=25203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401627661.372:1896): pid=25203 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=216 res=1 >type=USER_START msg=audit(1401627661.377:1897): pid=25203 uid=0 auid=0 ses=216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401627661.377:1898): pid=25203 uid=0 auid=0 ses=216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401627661.390:1899): avc: denied { read } for pid=25225 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401627661.390:1899): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff9ec4c120 a2=90800 a3=0 items=0 ppid=25223 pid=25225 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=216 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401627661.412:1900): pid=25203 uid=0 auid=0 ses=216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401627661.413:1901): pid=25203 uid=0 auid=0 ses=216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401628201.417:1902): pid=25411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401628201.417:1903): pid=25411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401628201.417:1904): pid=25411 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=217 res=1 >type=USER_START msg=audit(1401628201.421:1905): pid=25411 uid=0 auid=0 ses=217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401628201.421:1906): pid=25411 uid=0 auid=0 ses=217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401628201.453:1907): pid=25411 uid=0 auid=0 ses=217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401628201.454:1908): pid=25411 uid=0 auid=0 ses=217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401629101.459:1909): pid=25715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401629101.459:1910): pid=25715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401629101.459:1911): pid=25715 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=218 res=1 >type=USER_START msg=audit(1401629101.463:1912): pid=25715 uid=0 auid=0 ses=218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401629101.463:1913): pid=25715 uid=0 auid=0 ses=218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401629101.521:1914): pid=25715 uid=0 auid=0 ses=218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401629101.522:1915): pid=25715 uid=0 auid=0 ses=218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401630001.527:1916): pid=26018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401630001.527:1917): pid=26018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401630001.527:1918): pid=26018 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=219 res=1 >type=USER_START msg=audit(1401630001.532:1919): pid=26018 uid=0 auid=0 ses=219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401630001.532:1920): pid=26018 uid=0 auid=0 ses=219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401630001.559:1921): pid=26018 uid=0 auid=0 ses=219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401630001.559:1922): pid=26018 uid=0 auid=0 ses=219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401630901.566:1923): pid=26321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401630901.566:1924): pid=26321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401630901.566:1925): pid=26321 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=220 res=1 >type=USER_START msg=audit(1401630901.573:1926): pid=26321 uid=0 auid=0 ses=220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401630901.573:1927): pid=26321 uid=0 auid=0 ses=220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401630901.587:1928): pid=26321 uid=0 auid=0 ses=220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401630901.588:1929): pid=26321 uid=0 auid=0 ses=220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401631261.591:1930): pid=26443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401631261.591:1931): pid=26443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401631261.591:1932): pid=26443 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=221 res=1 >type=USER_START msg=audit(1401631261.595:1933): pid=26443 uid=0 auid=0 ses=221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401631261.595:1934): pid=26443 uid=0 auid=0 ses=221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401631261.606:1935): avc: denied { read } for pid=26465 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401631261.606:1935): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff4ef50900 a2=90800 a3=0 items=0 ppid=26463 pid=26465 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=221 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401631261.642:1936): pid=26443 uid=0 auid=0 ses=221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401631261.643:1937): pid=26443 uid=0 auid=0 ses=221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401631801.647:1938): pid=26651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401631801.647:1939): pid=26651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401631801.648:1940): pid=26651 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=222 res=1 >type=USER_START msg=audit(1401631801.652:1941): pid=26651 uid=0 auid=0 ses=222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401631801.652:1942): pid=26651 uid=0 auid=0 ses=222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401631801.673:1943): pid=26651 uid=0 auid=0 ses=222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401631801.674:1944): pid=26651 uid=0 auid=0 ses=222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401632701.680:1945): pid=26952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401632701.680:1946): pid=26952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401632701.680:1947): pid=26952 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=223 res=1 >type=USER_START msg=audit(1401632701.685:1948): pid=26952 uid=0 auid=0 ses=223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401632701.685:1949): pid=26952 uid=0 auid=0 ses=223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401632701.704:1950): pid=26952 uid=0 auid=0 ses=223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401632701.704:1951): pid=26952 uid=0 auid=0 ses=223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401633601.709:1952): pid=27254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401633601.709:1953): pid=27254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401633601.709:1954): pid=27254 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=224 res=1 >type=USER_START msg=audit(1401633601.713:1955): pid=27254 uid=0 auid=0 ses=224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401633601.713:1956): pid=27254 uid=0 auid=0 ses=224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401633601.738:1957): pid=27254 uid=0 auid=0 ses=224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401633601.739:1958): pid=27254 uid=0 auid=0 ses=224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401634501.744:1959): pid=27557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401634501.744:1960): pid=27557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401634501.744:1961): pid=27557 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=225 res=1 >type=USER_START msg=audit(1401634501.748:1962): pid=27557 uid=0 auid=0 ses=225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401634501.748:1963): pid=27557 uid=0 auid=0 ses=225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401634501.782:1964): pid=27557 uid=0 auid=0 ses=225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401634501.782:1965): pid=27557 uid=0 auid=0 ses=225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401634861.786:1966): pid=27680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401634861.786:1967): pid=27680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401634861.786:1968): pid=27680 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=226 res=1 >type=USER_START msg=audit(1401634861.790:1969): pid=27680 uid=0 auid=0 ses=226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401634861.790:1970): pid=27680 uid=0 auid=0 ses=226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401634861.802:1971): avc: denied { read } for pid=27702 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401634861.802:1971): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff14773850 a2=90800 a3=0 items=0 ppid=27700 pid=27702 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=226 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401634861.861:1972): pid=27680 uid=0 auid=0 ses=226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401634861.862:1973): pid=27680 uid=0 auid=0 ses=226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401635401.868:1974): pid=27885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401635401.868:1975): pid=27885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401635401.868:1976): pid=27885 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=227 res=1 >type=USER_START msg=audit(1401635401.872:1977): pid=27885 uid=0 auid=0 ses=227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401635401.872:1978): pid=27885 uid=0 auid=0 ses=227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401635401.893:1979): pid=27885 uid=0 auid=0 ses=227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401635401.894:1980): pid=27885 uid=0 auid=0 ses=227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401636301.898:1981): pid=28187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401636301.898:1982): pid=28187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401636301.898:1983): pid=28187 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=228 res=1 >type=USER_START msg=audit(1401636301.902:1984): pid=28187 uid=0 auid=0 ses=228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401636301.902:1985): pid=28187 uid=0 auid=0 ses=228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401636301.918:1986): pid=28187 uid=0 auid=0 ses=228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401636301.919:1987): pid=28187 uid=0 auid=0 ses=228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401637201.924:1988): pid=28489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401637201.924:1989): pid=28489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401637201.924:1990): pid=28489 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=229 res=1 >type=USER_START msg=audit(1401637201.928:1991): pid=28489 uid=0 auid=0 ses=229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401637201.928:1992): pid=28489 uid=0 auid=0 ses=229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401637201.971:1993): pid=28489 uid=0 auid=0 ses=229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401637201.971:1994): pid=28489 uid=0 auid=0 ses=229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401638101.977:1995): pid=28793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401638101.977:1996): pid=28793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401638101.977:1997): pid=28793 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=230 res=1 >type=USER_START msg=audit(1401638101.981:1998): pid=28793 uid=0 auid=0 ses=230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401638101.981:1999): pid=28793 uid=0 auid=0 ses=230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401638102.013:2000): pid=28793 uid=0 auid=0 ses=230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401638102.014:2001): pid=28793 uid=0 auid=0 ses=230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401638461.018:2002): pid=28916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401638461.018:2003): pid=28916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401638461.018:2004): pid=28916 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=231 res=1 >type=USER_START msg=audit(1401638461.022:2005): pid=28916 uid=0 auid=0 ses=231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401638461.022:2006): pid=28916 uid=0 auid=0 ses=231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401638461.033:2007): avc: denied { read } for pid=28938 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401638461.033:2007): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff3a6c2af0 a2=90800 a3=0 items=0 ppid=28936 pid=28938 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=231 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401638461.048:2008): pid=28916 uid=0 auid=0 ses=231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401638461.049:2009): pid=28916 uid=0 auid=0 ses=231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401639001.053:2010): pid=29122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401639001.053:2011): pid=29122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401639001.053:2012): pid=29122 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=232 res=1 >type=USER_START msg=audit(1401639001.057:2013): pid=29122 uid=0 auid=0 ses=232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401639001.057:2014): pid=29122 uid=0 auid=0 ses=232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401639001.084:2015): pid=29122 uid=0 auid=0 ses=232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401639001.084:2016): pid=29122 uid=0 auid=0 ses=232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401639901.090:2017): pid=29426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401639901.090:2018): pid=29426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401639901.091:2019): pid=29426 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=233 res=1 >type=USER_START msg=audit(1401639901.094:2020): pid=29426 uid=0 auid=0 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401639901.095:2021): pid=29426 uid=0 auid=0 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401639901.110:2022): pid=29426 uid=0 auid=0 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401639901.110:2023): pid=29426 uid=0 auid=0 ses=233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401640801.115:2024): pid=29728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401640801.115:2025): pid=29728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401640801.115:2026): pid=29728 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=234 res=1 >type=USER_START msg=audit(1401640801.119:2027): pid=29728 uid=0 auid=0 ses=234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401640801.119:2028): pid=29728 uid=0 auid=0 ses=234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401640801.160:2029): pid=29728 uid=0 auid=0 ses=234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401640801.160:2030): pid=29728 uid=0 auid=0 ses=234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401641701.166:2031): pid=30031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401641701.166:2032): pid=30031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401641701.166:2033): pid=30031 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=235 res=1 >type=USER_START msg=audit(1401641701.170:2034): pid=30031 uid=0 auid=0 ses=235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401641701.170:2035): pid=30031 uid=0 auid=0 ses=235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401641701.194:2036): pid=30031 uid=0 auid=0 ses=235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401641701.194:2037): pid=30031 uid=0 auid=0 ses=235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401642061.198:2038): pid=30155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401642061.198:2039): pid=30155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401642061.199:2040): pid=30155 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=236 res=1 >type=USER_START msg=audit(1401642061.202:2041): pid=30155 uid=0 auid=0 ses=236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401642061.202:2042): pid=30155 uid=0 auid=0 ses=236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401642061.214:2043): avc: denied { read } for pid=30177 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401642061.214:2043): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff6f9965b0 a2=90800 a3=0 items=0 ppid=30175 pid=30177 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=236 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401642061.247:2044): pid=30155 uid=0 auid=0 ses=236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401642061.248:2045): pid=30155 uid=0 auid=0 ses=236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401642601.254:2046): pid=30361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401642601.254:2047): pid=30361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401642601.254:2048): pid=30361 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=237 res=1 >type=USER_START msg=audit(1401642601.257:2049): pid=30361 uid=0 auid=0 ses=237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401642601.258:2050): pid=30361 uid=0 auid=0 ses=237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401642601.306:2051): pid=30361 uid=0 auid=0 ses=237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401642601.307:2052): pid=30361 uid=0 auid=0 ses=237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401643501.311:2053): pid=30664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401643501.311:2054): pid=30664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401643501.311:2055): pid=30664 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=238 res=1 >type=USER_START msg=audit(1401643501.315:2056): pid=30664 uid=0 auid=0 ses=238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401643501.316:2057): pid=30664 uid=0 auid=0 ses=238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401643501.337:2058): pid=30664 uid=0 auid=0 ses=238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401643501.338:2059): pid=30664 uid=0 auid=0 ses=238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401644401.344:2060): pid=30966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401644401.344:2061): pid=30966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401644401.345:2062): pid=30966 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=239 res=1 >type=USER_START msg=audit(1401644401.349:2063): pid=30966 uid=0 auid=0 ses=239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401644401.349:2064): pid=30966 uid=0 auid=0 ses=239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401644401.364:2065): pid=30966 uid=0 auid=0 ses=239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401644401.365:2066): pid=30966 uid=0 auid=0 ses=239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401645301.370:2067): pid=31267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401645301.370:2068): pid=31267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401645301.370:2069): pid=31267 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=240 res=1 >type=USER_START msg=audit(1401645301.374:2070): pid=31267 uid=0 auid=0 ses=240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401645301.374:2071): pid=31267 uid=0 auid=0 ses=240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401645301.424:2072): pid=31267 uid=0 auid=0 ses=240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401645301.425:2073): pid=31267 uid=0 auid=0 ses=240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401645661.428:2074): pid=31393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401645661.428:2075): pid=31393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401645661.429:2076): pid=31393 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=241 res=1 >type=USER_START msg=audit(1401645661.432:2077): pid=31393 uid=0 auid=0 ses=241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401645661.432:2078): pid=31393 uid=0 auid=0 ses=241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401645661.444:2079): avc: denied { read } for pid=31415 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401645661.444:2079): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7ffff26c16c0 a2=90800 a3=0 items=0 ppid=31413 pid=31415 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=241 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401645661.480:2080): pid=31393 uid=0 auid=0 ses=241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401645661.481:2081): pid=31393 uid=0 auid=0 ses=241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401646201.485:2082): pid=31597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401646201.485:2083): pid=31597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401646201.486:2084): pid=31597 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=242 res=1 >type=USER_START msg=audit(1401646201.490:2085): pid=31597 uid=0 auid=0 ses=242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401646201.490:2086): pid=31597 uid=0 auid=0 ses=242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401646201.527:2087): pid=31597 uid=0 auid=0 ses=242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401646201.528:2088): pid=31597 uid=0 auid=0 ses=242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401647101.534:2089): pid=31901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401647101.534:2090): pid=31901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401647101.534:2091): pid=31901 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=243 res=1 >type=USER_START msg=audit(1401647101.539:2092): pid=31901 uid=0 auid=0 ses=243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401647101.539:2093): pid=31901 uid=0 auid=0 ses=243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401647101.574:2094): pid=31901 uid=0 auid=0 ses=243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401647101.575:2095): pid=31901 uid=0 auid=0 ses=243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1401647297.066:2096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401647297.066:2097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401648001.580:2098): pid=32204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401648001.580:2099): pid=32204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401648001.580:2100): pid=32204 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=244 res=1 >type=USER_START msg=audit(1401648001.585:2101): pid=32204 uid=0 auid=0 ses=244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401648001.585:2102): pid=32204 uid=0 auid=0 ses=244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401648001.618:2103): pid=32204 uid=0 auid=0 ses=244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401648001.619:2104): pid=32204 uid=0 auid=0 ses=244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401648901.624:2105): pid=32505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401648901.624:2106): pid=32505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401648901.624:2107): pid=32505 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=245 res=1 >type=USER_START msg=audit(1401648901.629:2108): pid=32505 uid=0 auid=0 ses=245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401648901.629:2109): pid=32505 uid=0 auid=0 ses=245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401648901.696:2110): pid=32505 uid=0 auid=0 ses=245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401648901.696:2111): pid=32505 uid=0 auid=0 ses=245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401649261.700:2112): pid=32629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401649261.700:2113): pid=32629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401649261.700:2114): pid=32629 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=246 res=1 >type=USER_START msg=audit(1401649261.704:2115): pid=32629 uid=0 auid=0 ses=246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401649261.704:2116): pid=32629 uid=0 auid=0 ses=246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401649261.716:2117): avc: denied { read } for pid=32651 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401649261.716:2117): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff6150a260 a2=90800 a3=0 items=0 ppid=32649 pid=32651 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=246 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401649261.755:2118): pid=32629 uid=0 auid=0 ses=246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401649261.756:2119): pid=32629 uid=0 auid=0 ses=246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401649801.760:2120): pid=374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401649801.760:2121): pid=374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401649801.760:2122): pid=374 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=247 res=1 >type=USER_START msg=audit(1401649801.765:2123): pid=374 uid=0 auid=0 ses=247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401649801.765:2124): pid=374 uid=0 auid=0 ses=247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401649801.799:2125): pid=374 uid=0 auid=0 ses=247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401649801.800:2126): pid=374 uid=0 auid=0 ses=247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401650701.805:2127): pid=718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401650701.805:2128): pid=718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401650701.805:2129): pid=718 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=248 res=1 >type=USER_START msg=audit(1401650701.809:2130): pid=718 uid=0 auid=0 ses=248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401650701.809:2131): pid=718 uid=0 auid=0 ses=248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401650701.843:2132): pid=718 uid=0 auid=0 ses=248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401650701.844:2133): pid=718 uid=0 auid=0 ses=248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401651601.850:2134): pid=1048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401651601.850:2135): pid=1048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401651601.850:2136): pid=1048 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=249 res=1 >type=USER_START msg=audit(1401651601.854:2137): pid=1048 uid=0 auid=0 ses=249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401651601.854:2138): pid=1048 uid=0 auid=0 ses=249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401651601.887:2139): pid=1048 uid=0 auid=0 ses=249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401651601.888:2140): pid=1048 uid=0 auid=0 ses=249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401652501.892:2141): pid=1355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401652501.893:2142): pid=1355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401652501.893:2143): pid=1355 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=250 res=1 >type=USER_START msg=audit(1401652501.897:2144): pid=1355 uid=0 auid=0 ses=250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401652501.897:2145): pid=1355 uid=0 auid=0 ses=250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401652501.930:2146): pid=1355 uid=0 auid=0 ses=250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401652501.930:2147): pid=1355 uid=0 auid=0 ses=250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401652861.935:2148): pid=1493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401652861.935:2149): pid=1493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401652861.936:2150): pid=1493 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=251 res=1 >type=USER_START msg=audit(1401652861.940:2151): pid=1493 uid=0 auid=0 ses=251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401652861.940:2152): pid=1493 uid=0 auid=0 ses=251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401652861.951:2153): avc: denied { read } for pid=1521 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401652861.951:2153): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffaba8d190 a2=90800 a3=0 items=0 ppid=1519 pid=1521 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=251 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401652861.982:2154): pid=1493 uid=0 auid=0 ses=251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401652861.983:2155): pid=1493 uid=0 auid=0 ses=251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401653401.986:2156): pid=1751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401653401.987:2157): pid=1751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401653401.987:2158): pid=1751 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=252 res=1 >type=USER_START msg=audit(1401653401.991:2159): pid=1751 uid=0 auid=0 ses=252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401653401.991:2160): pid=1751 uid=0 auid=0 ses=252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401653402.017:2161): pid=1751 uid=0 auid=0 ses=252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401653402.018:2162): pid=1751 uid=0 auid=0 ses=252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401654301.024:2163): pid=2079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401654301.024:2164): pid=2079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401654301.024:2165): pid=2079 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=253 res=1 >type=USER_START msg=audit(1401654301.029:2166): pid=2079 uid=0 auid=0 ses=253 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401654301.029:2167): pid=2079 uid=0 auid=0 ses=253 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401654301.078:2168): pid=2079 uid=0 auid=0 ses=253 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401654301.079:2169): pid=2079 uid=0 auid=0 ses=253 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401655201.084:2170): pid=2384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401655201.084:2171): pid=2384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401655201.084:2172): pid=2384 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=254 res=1 >type=USER_START msg=audit(1401655201.088:2173): pid=2384 uid=0 auid=0 ses=254 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401655201.088:2174): pid=2384 uid=0 auid=0 ses=254 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401655201.103:2175): pid=2384 uid=0 auid=0 ses=254 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401655201.104:2176): pid=2384 uid=0 auid=0 ses=254 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401656101.110:2177): pid=2685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401656101.110:2178): pid=2685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401656101.110:2179): pid=2685 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=255 res=1 >type=USER_START msg=audit(1401656101.114:2180): pid=2685 uid=0 auid=0 ses=255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401656101.115:2181): pid=2685 uid=0 auid=0 ses=255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401656101.132:2182): pid=2685 uid=0 auid=0 ses=255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401656101.133:2183): pid=2685 uid=0 auid=0 ses=255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401656461.136:2184): pid=2808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401656461.136:2185): pid=2808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401656461.136:2186): pid=2808 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=256 res=1 >type=USER_START msg=audit(1401656461.140:2187): pid=2808 uid=0 auid=0 ses=256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401656461.140:2188): pid=2808 uid=0 auid=0 ses=256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401656461.152:2189): avc: denied { read } for pid=2830 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401656461.152:2189): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff0eb938f0 a2=90800 a3=0 items=0 ppid=2828 pid=2830 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=256 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401656461.189:2190): pid=2808 uid=0 auid=0 ses=256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401656461.190:2191): pid=2808 uid=0 auid=0 ses=256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401657001.194:2192): pid=3013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401657001.194:2193): pid=3013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401657001.194:2194): pid=3013 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=257 res=1 >type=USER_START msg=audit(1401657001.199:2195): pid=3013 uid=0 auid=0 ses=257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401657001.199:2196): pid=3013 uid=0 auid=0 ses=257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401657001.220:2197): pid=3013 uid=0 auid=0 ses=257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401657001.221:2198): pid=3013 uid=0 auid=0 ses=257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401657901.226:2199): pid=3314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401657901.226:2200): pid=3314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401657901.226:2201): pid=3314 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=258 res=1 >type=USER_START msg=audit(1401657901.230:2202): pid=3314 uid=0 auid=0 ses=258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401657901.230:2203): pid=3314 uid=0 auid=0 ses=258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401657901.263:2204): pid=3314 uid=0 auid=0 ses=258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401657901.263:2205): pid=3314 uid=0 auid=0 ses=258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401658801.269:2206): pid=3616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401658801.270:2207): pid=3616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401658801.270:2208): pid=3616 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=259 res=1 >type=USER_START msg=audit(1401658801.274:2209): pid=3616 uid=0 auid=0 ses=259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401658801.274:2210): pid=3616 uid=0 auid=0 ses=259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401658801.307:2211): pid=3616 uid=0 auid=0 ses=259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401658801.307:2212): pid=3616 uid=0 auid=0 ses=259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401659701.312:2213): pid=3918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401659701.312:2214): pid=3918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401659701.312:2215): pid=3918 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=260 res=1 >type=USER_START msg=audit(1401659701.316:2216): pid=3918 uid=0 auid=0 ses=260 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401659701.316:2217): pid=3918 uid=0 auid=0 ses=260 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401659701.332:2218): pid=3918 uid=0 auid=0 ses=260 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401659701.333:2219): pid=3918 uid=0 auid=0 ses=260 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401660061.338:2220): pid=4042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401660061.338:2221): pid=4042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401660061.338:2222): pid=4042 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=261 res=1 >type=USER_START msg=audit(1401660061.342:2223): pid=4042 uid=0 auid=0 ses=261 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401660061.342:2224): pid=4042 uid=0 auid=0 ses=261 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401660061.354:2225): avc: denied { read } for pid=4064 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401660061.354:2225): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff5afbba80 a2=90800 a3=0 items=0 ppid=4062 pid=4064 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=261 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401660061.392:2226): pid=4042 uid=0 auid=0 ses=261 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401660061.393:2227): pid=4042 uid=0 auid=0 ses=261 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401660601.396:2228): pid=4248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401660601.396:2229): pid=4248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401660601.397:2230): pid=4248 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=262 res=1 >type=USER_START msg=audit(1401660601.401:2231): pid=4248 uid=0 auid=0 ses=262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401660601.401:2232): pid=4248 uid=0 auid=0 ses=262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401660601.416:2233): pid=4248 uid=0 auid=0 ses=262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401660601.417:2234): pid=4248 uid=0 auid=0 ses=262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401661501.422:2235): pid=4550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401661501.422:2236): pid=4550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401661501.422:2237): pid=4550 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=263 res=1 >type=USER_START msg=audit(1401661501.426:2238): pid=4550 uid=0 auid=0 ses=263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401661501.426:2239): pid=4550 uid=0 auid=0 ses=263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401661501.458:2240): pid=4550 uid=0 auid=0 ses=263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401661501.459:2241): pid=4550 uid=0 auid=0 ses=263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401662401.464:2242): pid=4851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401662401.464:2243): pid=4851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401662401.464:2244): pid=4851 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=264 res=1 >type=USER_START msg=audit(1401662401.468:2245): pid=4851 uid=0 auid=0 ses=264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401662401.468:2246): pid=4851 uid=0 auid=0 ses=264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401662401.517:2247): pid=4851 uid=0 auid=0 ses=264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401662401.517:2248): pid=4851 uid=0 auid=0 ses=264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401663301.524:2249): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401663301.524:2250): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401663301.524:2251): pid=5156 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=265 res=1 >type=USER_START msg=audit(1401663301.528:2252): pid=5156 uid=0 auid=0 ses=265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401663301.528:2253): pid=5156 uid=0 auid=0 ses=265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401663301.545:2254): pid=5156 uid=0 auid=0 ses=265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401663301.545:2255): pid=5156 uid=0 auid=0 ses=265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401663661.548:2256): pid=5280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401663661.548:2257): pid=5280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401663661.548:2258): pid=5280 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=266 res=1 >type=USER_START msg=audit(1401663661.553:2259): pid=5280 uid=0 auid=0 ses=266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401663661.553:2260): pid=5280 uid=0 auid=0 ses=266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401663661.564:2261): avc: denied { read } for pid=5302 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401663661.564:2261): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffda9c09c0 a2=90800 a3=0 items=0 ppid=5300 pid=5302 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=266 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401663661.587:2262): pid=5280 uid=0 auid=0 ses=266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401663661.587:2263): pid=5280 uid=0 auid=0 ses=266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401664201.592:2264): pid=5486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401664201.592:2265): pid=5486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401664201.592:2266): pid=5486 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=267 res=1 >type=USER_START msg=audit(1401664201.596:2267): pid=5486 uid=0 auid=0 ses=267 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401664201.596:2268): pid=5486 uid=0 auid=0 ses=267 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401664201.629:2269): pid=5486 uid=0 auid=0 ses=267 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401664201.630:2270): pid=5486 uid=0 auid=0 ses=267 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401665101.635:2271): pid=5787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401665101.635:2272): pid=5787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401665101.635:2273): pid=5787 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=268 res=1 >type=USER_START msg=audit(1401665101.639:2274): pid=5787 uid=0 auid=0 ses=268 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401665101.639:2275): pid=5787 uid=0 auid=0 ses=268 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401665101.671:2276): pid=5787 uid=0 auid=0 ses=268 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401665101.672:2277): pid=5787 uid=0 auid=0 ses=268 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401666001.678:2278): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401666001.678:2279): pid=6091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401666001.678:2280): pid=6091 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=269 res=1 >type=USER_START msg=audit(1401666001.682:2281): pid=6091 uid=0 auid=0 ses=269 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401666001.682:2282): pid=6091 uid=0 auid=0 ses=269 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401666001.781:2283): pid=6091 uid=0 auid=0 ses=269 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401666001.782:2284): pid=6091 uid=0 auid=0 ses=269 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401666901.786:2285): pid=6393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401666901.786:2286): pid=6393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401666901.786:2287): pid=6393 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=270 res=1 >type=USER_START msg=audit(1401666901.791:2288): pid=6393 uid=0 auid=0 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401666901.791:2289): pid=6393 uid=0 auid=0 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401666901.812:2290): pid=6393 uid=0 auid=0 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401666901.812:2291): pid=6393 uid=0 auid=0 ses=270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401667261.817:2292): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401667261.817:2293): pid=6517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401667261.818:2294): pid=6517 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=271 res=1 >type=USER_START msg=audit(1401667261.822:2295): pid=6517 uid=0 auid=0 ses=271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401667261.822:2296): pid=6517 uid=0 auid=0 ses=271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401667261.833:2297): avc: denied { read } for pid=6539 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401667261.833:2297): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff9b98ea30 a2=90800 a3=0 items=0 ppid=6537 pid=6539 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=271 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401667261.850:2298): pid=6517 uid=0 auid=0 ses=271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401667261.851:2299): pid=6517 uid=0 auid=0 ses=271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401667801.856:2300): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401667801.856:2301): pid=6725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401667801.856:2302): pid=6725 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=272 res=1 >type=USER_START msg=audit(1401667801.860:2303): pid=6725 uid=0 auid=0 ses=272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401667801.860:2304): pid=6725 uid=0 auid=0 ses=272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401667801.911:2305): pid=6725 uid=0 auid=0 ses=272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401667801.912:2306): pid=6725 uid=0 auid=0 ses=272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401668701.917:2307): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401668701.917:2308): pid=7028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401668701.917:2309): pid=7028 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=273 res=1 >type=USER_START msg=audit(1401668701.921:2310): pid=7028 uid=0 auid=0 ses=273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401668701.921:2311): pid=7028 uid=0 auid=0 ses=273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401668701.954:2312): pid=7028 uid=0 auid=0 ses=273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401668701.955:2313): pid=7028 uid=0 auid=0 ses=273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401669601.961:2314): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401669601.961:2315): pid=7332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401669601.961:2316): pid=7332 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=274 res=1 >type=USER_START msg=audit(1401669601.965:2317): pid=7332 uid=0 auid=0 ses=274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401669601.965:2318): pid=7332 uid=0 auid=0 ses=274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401669601.981:2319): pid=7332 uid=0 auid=0 ses=274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401669601.982:2320): pid=7332 uid=0 auid=0 ses=274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401670501.988:2321): pid=7633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401670501.988:2322): pid=7633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401670501.988:2323): pid=7633 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=275 res=1 >type=USER_START msg=audit(1401670501.993:2324): pid=7633 uid=0 auid=0 ses=275 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401670501.993:2325): pid=7633 uid=0 auid=0 ses=275 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401670502.042:2326): pid=7633 uid=0 auid=0 ses=275 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401670502.043:2327): pid=7633 uid=0 auid=0 ses=275 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401670861.046:2328): pid=7759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401670861.046:2329): pid=7759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401670861.046:2330): pid=7759 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=276 res=1 >type=USER_START msg=audit(1401670861.050:2331): pid=7759 uid=0 auid=0 ses=276 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401670861.050:2332): pid=7759 uid=0 auid=0 ses=276 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401670861.064:2333): avc: denied { read } for pid=7781 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401670861.064:2333): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff7add57f0 a2=90800 a3=0 items=0 ppid=7779 pid=7781 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=276 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401670861.079:2334): pid=7759 uid=0 auid=0 ses=276 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401670861.080:2335): pid=7759 uid=0 auid=0 ses=276 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401671401.084:2336): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401671401.084:2337): pid=7964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401671401.084:2338): pid=7964 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=277 res=1 >type=USER_START msg=audit(1401671401.088:2339): pid=7964 uid=0 auid=0 ses=277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401671401.088:2340): pid=7964 uid=0 auid=0 ses=277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401671401.130:2341): pid=7964 uid=0 auid=0 ses=277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401671401.131:2342): pid=7964 uid=0 auid=0 ses=277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401672301.136:2343): pid=8267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401672301.136:2344): pid=8267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401672301.136:2345): pid=8267 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=278 res=1 >type=USER_START msg=audit(1401672301.140:2346): pid=8267 uid=0 auid=0 ses=278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401672301.141:2347): pid=8267 uid=0 auid=0 ses=278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401672301.165:2348): pid=8267 uid=0 auid=0 ses=278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401672301.165:2349): pid=8267 uid=0 auid=0 ses=278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401673201.170:2350): pid=8570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401673201.170:2351): pid=8570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401673201.170:2352): pid=8570 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=279 res=1 >type=USER_START msg=audit(1401673201.175:2353): pid=8570 uid=0 auid=0 ses=279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401673201.175:2354): pid=8570 uid=0 auid=0 ses=279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401673201.190:2355): pid=8570 uid=0 auid=0 ses=279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401673201.190:2356): pid=8570 uid=0 auid=0 ses=279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401674101.196:2357): pid=8872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401674101.196:2358): pid=8872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401674101.196:2359): pid=8872 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=280 res=1 >type=USER_START msg=audit(1401674101.200:2360): pid=8872 uid=0 auid=0 ses=280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401674101.200:2361): pid=8872 uid=0 auid=0 ses=280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401674101.250:2362): pid=8872 uid=0 auid=0 ses=280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401674101.250:2363): pid=8872 uid=0 auid=0 ses=280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401674461.255:2364): pid=8995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401674461.255:2365): pid=8995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401674461.255:2366): pid=8995 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=281 res=1 >type=USER_START msg=audit(1401674461.259:2367): pid=8995 uid=0 auid=0 ses=281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401674461.259:2368): pid=8995 uid=0 auid=0 ses=281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401674461.271:2369): avc: denied { read } for pid=9017 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401674461.271:2369): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffdb88c5c0 a2=90800 a3=0 items=0 ppid=9015 pid=9017 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=281 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401674463.241:2370): pid=8995 uid=0 auid=0 ses=281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401674463.242:2371): pid=8995 uid=0 auid=0 ses=281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401675001.246:2372): pid=9207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401675001.246:2373): pid=9207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401675001.246:2374): pid=9207 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=282 res=1 >type=USER_START msg=audit(1401675001.251:2375): pid=9207 uid=0 auid=0 ses=282 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401675001.251:2376): pid=9207 uid=0 auid=0 ses=282 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401675001.265:2377): pid=9207 uid=0 auid=0 ses=282 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401675001.266:2378): pid=9207 uid=0 auid=0 ses=282 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401675901.270:2379): pid=9510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401675901.270:2380): pid=9510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401675901.271:2381): pid=9510 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=283 res=1 >type=USER_START msg=audit(1401675901.274:2382): pid=9510 uid=0 auid=0 ses=283 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401675901.275:2383): pid=9510 uid=0 auid=0 ses=283 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401675901.323:2384): pid=9510 uid=0 auid=0 ses=283 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401675901.323:2385): pid=9510 uid=0 auid=0 ses=283 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401676801.329:2386): pid=9811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401676801.329:2387): pid=9811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401676801.329:2388): pid=9811 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=284 res=1 >type=USER_START msg=audit(1401676801.333:2389): pid=9811 uid=0 auid=0 ses=284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401676801.333:2390): pid=9811 uid=0 auid=0 ses=284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401676801.491:2391): pid=9811 uid=0 auid=0 ses=284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401676801.491:2392): pid=9811 uid=0 auid=0 ses=284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401677701.497:2393): pid=10113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401677701.497:2394): pid=10113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401677701.497:2395): pid=10113 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=285 res=1 >type=USER_START msg=audit(1401677701.501:2396): pid=10113 uid=0 auid=0 ses=285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401677701.502:2397): pid=10113 uid=0 auid=0 ses=285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401677701.516:2398): pid=10113 uid=0 auid=0 ses=285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401677701.517:2399): pid=10113 uid=0 auid=0 ses=285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401678061.519:2400): pid=10240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401678061.519:2401): pid=10240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401678061.519:2402): pid=10240 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=286 res=1 >type=USER_START msg=audit(1401678061.523:2403): pid=10240 uid=0 auid=0 ses=286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401678061.524:2404): pid=10240 uid=0 auid=0 ses=286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401678061.537:2405): avc: denied { read } for pid=10262 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401678061.537:2405): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff30bef150 a2=90800 a3=0 items=0 ppid=10260 pid=10262 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=286 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401678061.553:2406): pid=10240 uid=0 auid=0 ses=286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401678061.553:2407): pid=10240 uid=0 auid=0 ses=286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401678601.558:2408): pid=10453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401678601.558:2409): pid=10453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401678601.558:2410): pid=10453 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=287 res=1 >type=USER_START msg=audit(1401678601.562:2411): pid=10453 uid=0 auid=0 ses=287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401678601.562:2412): pid=10453 uid=0 auid=0 ses=287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401678601.583:2413): pid=10453 uid=0 auid=0 ses=287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401678601.584:2414): pid=10453 uid=0 auid=0 ses=287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401679501.590:2415): pid=10754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401679501.590:2416): pid=10754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401679501.590:2417): pid=10754 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=288 res=1 >type=USER_START msg=audit(1401679501.594:2418): pid=10754 uid=0 auid=0 ses=288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401679501.594:2419): pid=10754 uid=0 auid=0 ses=288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401679501.644:2420): pid=10754 uid=0 auid=0 ses=288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401679501.645:2421): pid=10754 uid=0 auid=0 ses=288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401680401.649:2422): pid=11058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401680401.649:2423): pid=11058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401680401.649:2424): pid=11058 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=289 res=1 >type=USER_START msg=audit(1401680401.654:2425): pid=11058 uid=0 auid=0 ses=289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401680401.654:2426): pid=11058 uid=0 auid=0 ses=289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401680401.820:2427): pid=11058 uid=0 auid=0 ses=289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401680401.820:2428): pid=11058 uid=0 auid=0 ses=289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401681301.826:2429): pid=11361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401681301.826:2430): pid=11361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401681301.826:2431): pid=11361 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=290 res=1 >type=USER_START msg=audit(1401681301.830:2432): pid=11361 uid=0 auid=0 ses=290 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401681301.830:2433): pid=11361 uid=0 auid=0 ses=290 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401681301.864:2434): pid=11361 uid=0 auid=0 ses=290 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401681301.864:2435): pid=11361 uid=0 auid=0 ses=290 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401681661.868:2436): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401681661.868:2437): pid=11485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401681661.868:2438): pid=11485 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=291 res=1 >type=USER_START msg=audit(1401681661.872:2439): pid=11485 uid=0 auid=0 ses=291 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401681661.872:2440): pid=11485 uid=0 auid=0 ses=291 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401681661.888:2441): avc: denied { read } for pid=11510 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401681661.888:2441): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff72a9e9a0 a2=90800 a3=0 items=0 ppid=11508 pid=11510 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=291 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401681661.911:2442): pid=11485 uid=0 auid=0 ses=291 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401681661.912:2443): pid=11485 uid=0 auid=0 ses=291 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401682201.918:2444): pid=11695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401682201.918:2445): pid=11695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401682201.918:2446): pid=11695 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=292 res=1 >type=USER_START msg=audit(1401682201.922:2447): pid=11695 uid=0 auid=0 ses=292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401682201.922:2448): pid=11695 uid=0 auid=0 ses=292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401682201.942:2449): pid=11695 uid=0 auid=0 ses=292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401682201.943:2450): pid=11695 uid=0 auid=0 ses=292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401683101.947:2451): pid=12000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401683101.947:2452): pid=12000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401683101.947:2453): pid=12000 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=293 res=1 >type=USER_START msg=audit(1401683101.951:2454): pid=12000 uid=0 auid=0 ses=293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401683101.951:2455): pid=12000 uid=0 auid=0 ses=293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401683101.967:2456): pid=12000 uid=0 auid=0 ses=293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401683101.968:2457): pid=12000 uid=0 auid=0 ses=293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401684001.973:2458): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401684001.973:2459): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401684001.973:2460): pid=12305 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=294 res=1 >type=USER_START msg=audit(1401684001.977:2461): pid=12305 uid=0 auid=0 ses=294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401684001.977:2462): pid=12305 uid=0 auid=0 ses=294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401684002.010:2463): pid=12305 uid=0 auid=0 ses=294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401684002.010:2464): pid=12305 uid=0 auid=0 ses=294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401684901.015:2465): pid=12610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401684901.015:2466): pid=12610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401684901.015:2467): pid=12610 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=295 res=1 >type=USER_START msg=audit(1401684901.020:2468): pid=12610 uid=0 auid=0 ses=295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401684901.020:2469): pid=12610 uid=0 auid=0 ses=295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401684901.045:2470): pid=12610 uid=0 auid=0 ses=295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401684901.046:2471): pid=12610 uid=0 auid=0 ses=295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401685261.050:2472): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401685261.050:2473): pid=12735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401685261.050:2474): pid=12735 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=296 res=1 >type=USER_START msg=audit(1401685261.054:2475): pid=12735 uid=0 auid=0 ses=296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401685261.054:2476): pid=12735 uid=0 auid=0 ses=296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401685261.068:2477): avc: denied { read } for pid=12760 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401685261.068:2477): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffdbc065f0 a2=90800 a3=0 items=0 ppid=12758 pid=12760 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=296 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401685261.122:2478): pid=12735 uid=0 auid=0 ses=296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401685261.122:2479): pid=12735 uid=0 auid=0 ses=296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401685801.127:2480): pid=12945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401685801.127:2481): pid=12945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401685801.127:2482): pid=12945 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=297 res=1 >type=USER_START msg=audit(1401685801.131:2483): pid=12945 uid=0 auid=0 ses=297 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401685801.131:2484): pid=12945 uid=0 auid=0 ses=297 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401685801.163:2485): pid=12945 uid=0 auid=0 ses=297 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401685801.163:2486): pid=12945 uid=0 auid=0 ses=297 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401686701.170:2487): pid=13248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401686701.170:2488): pid=13248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401686701.170:2489): pid=13248 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=298 res=1 >type=USER_START msg=audit(1401686701.174:2490): pid=13248 uid=0 auid=0 ses=298 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401686701.174:2491): pid=13248 uid=0 auid=0 ses=298 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401686701.197:2492): pid=13248 uid=0 auid=0 ses=298 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401686701.198:2493): pid=13248 uid=0 auid=0 ses=298 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401687601.202:2494): pid=13554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401687601.202:2495): pid=13554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401687601.202:2496): pid=13554 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=299 res=1 >type=USER_START msg=audit(1401687601.207:2497): pid=13554 uid=0 auid=0 ses=299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401687601.207:2498): pid=13554 uid=0 auid=0 ses=299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401687601.255:2499): pid=13554 uid=0 auid=0 ses=299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401687601.255:2500): pid=13554 uid=0 auid=0 ses=299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401688501.261:2501): pid=13857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401688501.261:2502): pid=13857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401688501.261:2503): pid=13857 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=300 res=1 >type=USER_START msg=audit(1401688501.265:2504): pid=13857 uid=0 auid=0 ses=300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401688501.265:2505): pid=13857 uid=0 auid=0 ses=300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401688501.300:2506): pid=13857 uid=0 auid=0 ses=300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401688501.300:2507): pid=13857 uid=0 auid=0 ses=300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401688861.304:2508): pid=13981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401688861.304:2509): pid=13981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401688861.304:2510): pid=13981 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=301 res=1 >type=USER_START msg=audit(1401688861.309:2511): pid=13981 uid=0 auid=0 ses=301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401688861.309:2512): pid=13981 uid=0 auid=0 ses=301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401688861.324:2513): avc: denied { read } for pid=14006 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401688861.324:2513): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffe496b710 a2=90800 a3=0 items=0 ppid=14004 pid=14006 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=301 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401688861.342:2514): pid=13981 uid=0 auid=0 ses=301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401688861.343:2515): pid=13981 uid=0 auid=0 ses=301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401689401.349:2516): pid=14190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401689401.349:2517): pid=14190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401689401.349:2518): pid=14190 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=302 res=1 >type=USER_START msg=audit(1401689401.353:2519): pid=14190 uid=0 auid=0 ses=302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401689401.353:2520): pid=14190 uid=0 auid=0 ses=302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401689401.377:2521): pid=14190 uid=0 auid=0 ses=302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401689401.378:2522): pid=14190 uid=0 auid=0 ses=302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401690301.382:2523): pid=14492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401690301.382:2524): pid=14492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401690301.383:2525): pid=14492 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=303 res=1 >type=USER_START msg=audit(1401690301.387:2526): pid=14492 uid=0 auid=0 ses=303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401690301.387:2527): pid=14492 uid=0 auid=0 ses=303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401690301.419:2528): pid=14492 uid=0 auid=0 ses=303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401690301.419:2529): pid=14492 uid=0 auid=0 ses=303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401691201.426:2530): pid=14795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401691201.426:2531): pid=14795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401691201.426:2532): pid=14795 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=304 res=1 >type=USER_START msg=audit(1401691201.430:2533): pid=14795 uid=0 auid=0 ses=304 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401691201.430:2534): pid=14795 uid=0 auid=0 ses=304 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401691201.448:2535): pid=14795 uid=0 auid=0 ses=304 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401691201.449:2536): pid=14795 uid=0 auid=0 ses=304 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401692101.453:2537): pid=15097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401692101.453:2538): pid=15097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401692101.453:2539): pid=15097 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=305 res=1 >type=USER_START msg=audit(1401692101.457:2540): pid=15097 uid=0 auid=0 ses=305 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401692101.457:2541): pid=15097 uid=0 auid=0 ses=305 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401692101.474:2542): pid=15097 uid=0 auid=0 ses=305 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401692101.475:2543): pid=15097 uid=0 auid=0 ses=305 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401692461.478:2544): pid=15221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401692461.479:2545): pid=15221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401692461.479:2546): pid=15221 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=306 res=1 >type=USER_START msg=audit(1401692461.483:2547): pid=15221 uid=0 auid=0 ses=306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401692461.483:2548): pid=15221 uid=0 auid=0 ses=306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401692461.497:2549): avc: denied { read } for pid=15246 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401692461.497:2549): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffc6bd8bb0 a2=90800 a3=0 items=0 ppid=15244 pid=15246 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=306 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401692461.526:2550): pid=15221 uid=0 auid=0 ses=306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401692461.526:2551): pid=15221 uid=0 auid=0 ses=306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401693001.498:2552): avc: denied { read } for pid=15434 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401693001.498:2552): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff4fbca6b0 a2=90800 a3=0 items=0 ppid=15432 pid=15434 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=306 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=USER_ACCT msg=audit(1401693001.532:2553): pid=15445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401693001.532:2554): pid=15445 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401693001.532:2555): pid=15445 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=307 res=1 >type=USER_START msg=audit(1401693001.538:2556): pid=15445 uid=0 auid=0 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401693001.538:2557): pid=15445 uid=0 auid=0 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401693001.582:2558): pid=15445 uid=0 auid=0 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401693001.583:2559): pid=15445 uid=0 auid=0 ses=307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401693901.591:2560): pid=15759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401693901.591:2561): pid=15759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401693901.591:2562): pid=15759 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=308 res=1 >type=USER_START msg=audit(1401693901.596:2563): pid=15759 uid=0 auid=0 ses=308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401693901.596:2564): pid=15759 uid=0 auid=0 ses=308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401693901.616:2565): pid=15759 uid=0 auid=0 ses=308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401693901.617:2566): pid=15759 uid=0 auid=0 ses=308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401694801.623:2567): pid=16080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401694801.623:2568): pid=16080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401694801.624:2569): pid=16080 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=309 res=1 >type=USER_START msg=audit(1401694801.629:2570): pid=16080 uid=0 auid=0 ses=309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401694801.629:2571): pid=16080 uid=0 auid=0 ses=309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401694801.652:2572): pid=16080 uid=0 auid=0 ses=309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401694801.653:2573): pid=16080 uid=0 auid=0 ses=309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401695701.659:2574): pid=16380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401695701.659:2575): pid=16380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401695701.659:2576): pid=16380 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=310 res=1 >type=USER_START msg=audit(1401695701.664:2577): pid=16380 uid=0 auid=0 ses=310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401695701.664:2578): pid=16380 uid=0 auid=0 ses=310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401695701.695:2579): pid=16380 uid=0 auid=0 ses=310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401695701.695:2580): pid=16380 uid=0 auid=0 ses=310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401696061.699:2581): pid=16506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401696061.699:2582): pid=16506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401696061.699:2583): pid=16506 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=311 res=1 >type=USER_START msg=audit(1401696061.704:2584): pid=16506 uid=0 auid=0 ses=311 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401696061.704:2585): pid=16506 uid=0 auid=0 ses=311 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401696061.716:2586): avc: denied { read } for pid=16528 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401696061.716:2586): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffbe823150 a2=90800 a3=0 items=0 ppid=16526 pid=16528 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=311 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401696061.746:2587): pid=16506 uid=0 auid=0 ses=311 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401696061.747:2588): pid=16506 uid=0 auid=0 ses=311 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401696601.751:2589): pid=16712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401696601.751:2590): pid=16712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401696601.751:2591): pid=16712 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=312 res=1 >type=USER_START msg=audit(1401696601.755:2592): pid=16712 uid=0 auid=0 ses=312 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401696601.755:2593): pid=16712 uid=0 auid=0 ses=312 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401696601.813:2594): pid=16712 uid=0 auid=0 ses=312 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401696601.814:2595): pid=16712 uid=0 auid=0 ses=312 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401697501.819:2596): pid=17014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401697501.819:2597): pid=17014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401697501.819:2598): pid=17014 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=313 res=1 >type=USER_START msg=audit(1401697501.823:2599): pid=17014 uid=0 auid=0 ses=313 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401697501.823:2600): pid=17014 uid=0 auid=0 ses=313 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401697501.838:2601): pid=17014 uid=0 auid=0 ses=313 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401697501.839:2602): pid=17014 uid=0 auid=0 ses=313 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401698401.845:2603): pid=17315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401698401.845:2604): pid=17315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401698401.845:2605): pid=17315 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=314 res=1 >type=USER_START msg=audit(1401698401.849:2606): pid=17315 uid=0 auid=0 ses=314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401698401.849:2607): pid=17315 uid=0 auid=0 ses=314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401698401.866:2608): pid=17315 uid=0 auid=0 ses=314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401698401.867:2609): pid=17315 uid=0 auid=0 ses=314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401699301.871:2610): pid=17615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401699301.871:2611): pid=17615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401699301.871:2612): pid=17615 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=315 res=1 >type=USER_START msg=audit(1401699301.875:2613): pid=17615 uid=0 auid=0 ses=315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401699301.875:2614): pid=17615 uid=0 auid=0 ses=315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401699301.924:2615): pid=17615 uid=0 auid=0 ses=315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401699301.925:2616): pid=17615 uid=0 auid=0 ses=315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401699661.930:2617): pid=17738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401699661.930:2618): pid=17738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401699661.930:2619): pid=17738 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=316 res=1 >type=USER_START msg=audit(1401699661.934:2620): pid=17738 uid=0 auid=0 ses=316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401699661.934:2621): pid=17738 uid=0 auid=0 ses=316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401699661.946:2622): avc: denied { read } for pid=17760 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401699661.946:2622): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff76b90d50 a2=90800 a3=0 items=0 ppid=17758 pid=17760 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=316 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401699661.976:2623): pid=17738 uid=0 auid=0 ses=316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401699661.977:2624): pid=17738 uid=0 auid=0 ses=316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401700201.980:2625): pid=17944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401700201.980:2626): pid=17944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401700201.981:2627): pid=17944 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=317 res=1 >type=USER_START msg=audit(1401700201.985:2628): pid=17944 uid=0 auid=0 ses=317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401700201.985:2629): pid=17944 uid=0 auid=0 ses=317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401700202.026:2630): pid=17944 uid=0 auid=0 ses=317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401700202.026:2631): pid=17944 uid=0 auid=0 ses=317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401701101.033:2632): pid=18245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401701101.033:2633): pid=18245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401701101.033:2634): pid=18245 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=318 res=1 >type=USER_START msg=audit(1401701101.037:2635): pid=18245 uid=0 auid=0 ses=318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401701101.037:2636): pid=18245 uid=0 auid=0 ses=318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401701101.052:2637): pid=18245 uid=0 auid=0 ses=318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401701101.053:2638): pid=18245 uid=0 auid=0 ses=318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401702001.057:2639): pid=18549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401702001.057:2640): pid=18549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401702001.057:2641): pid=18549 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=319 res=1 >type=USER_START msg=audit(1401702001.061:2642): pid=18549 uid=0 auid=0 ses=319 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401702001.061:2643): pid=18549 uid=0 auid=0 ses=319 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401702001.087:2644): pid=18549 uid=0 auid=0 ses=319 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401702001.088:2645): pid=18549 uid=0 auid=0 ses=319 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401702901.093:2646): pid=18852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401702901.093:2647): pid=18852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401702901.093:2648): pid=18852 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=320 res=1 >type=USER_START msg=audit(1401702901.097:2649): pid=18852 uid=0 auid=0 ses=320 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401702901.098:2650): pid=18852 uid=0 auid=0 ses=320 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401702901.122:2651): pid=18852 uid=0 auid=0 ses=320 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401702901.122:2652): pid=18852 uid=0 auid=0 ses=320 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401703261.126:2653): pid=18974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401703261.126:2654): pid=18974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401703261.127:2655): pid=18974 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=321 res=1 >type=USER_START msg=audit(1401703261.130:2656): pid=18974 uid=0 auid=0 ses=321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401703261.131:2657): pid=18974 uid=0 auid=0 ses=321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401703261.143:2658): avc: denied { read } for pid=18996 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401703261.143:2658): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff77ee0790 a2=90800 a3=0 items=0 ppid=18994 pid=18996 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=321 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401703261.160:2659): pid=18974 uid=0 auid=0 ses=321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401703261.160:2660): pid=18974 uid=0 auid=0 ses=321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401703801.165:2661): pid=19182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401703801.165:2662): pid=19182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401703801.165:2663): pid=19182 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=322 res=1 >type=USER_START msg=audit(1401703801.169:2664): pid=19182 uid=0 auid=0 ses=322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401703801.169:2665): pid=19182 uid=0 auid=0 ses=322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401703801.192:2666): pid=19182 uid=0 auid=0 ses=322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401703801.192:2667): pid=19182 uid=0 auid=0 ses=322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401704701.198:2668): pid=19484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401704701.198:2669): pid=19484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401704701.198:2670): pid=19484 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=323 res=1 >type=USER_START msg=audit(1401704701.202:2671): pid=19484 uid=0 auid=0 ses=323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401704701.202:2672): pid=19484 uid=0 auid=0 ses=323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401704701.253:2673): pid=19484 uid=0 auid=0 ses=323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401704701.253:2674): pid=19484 uid=0 auid=0 ses=323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401705601.259:2675): pid=19787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401705601.259:2676): pid=19787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401705601.259:2677): pid=19787 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=324 res=1 >type=USER_START msg=audit(1401705601.264:2678): pid=19787 uid=0 auid=0 ses=324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401705601.264:2679): pid=19787 uid=0 auid=0 ses=324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401705601.281:2680): pid=19787 uid=0 auid=0 ses=324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401705601.281:2681): pid=19787 uid=0 auid=0 ses=324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401706501.286:2682): pid=20088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401706501.286:2683): pid=20088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401706501.286:2684): pid=20088 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=325 res=1 >type=USER_START msg=audit(1401706501.290:2685): pid=20088 uid=0 auid=0 ses=325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401706501.290:2686): pid=20088 uid=0 auid=0 ses=325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401706501.306:2687): pid=20088 uid=0 auid=0 ses=325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401706501.307:2688): pid=20088 uid=0 auid=0 ses=325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401706861.312:2689): pid=20211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401706861.312:2690): pid=20211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401706861.312:2691): pid=20211 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=326 res=1 >type=USER_START msg=audit(1401706861.316:2692): pid=20211 uid=0 auid=0 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401706861.316:2693): pid=20211 uid=0 auid=0 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401706861.328:2694): avc: denied { read } for pid=20233 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401706861.328:2694): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff6de20240 a2=90800 a3=0 items=0 ppid=20231 pid=20233 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=326 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401706861.363:2695): pid=20211 uid=0 auid=0 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401706861.363:2696): pid=20211 uid=0 auid=0 ses=326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401707401.367:2697): pid=20417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401707401.367:2698): pid=20417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401707401.367:2699): pid=20417 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=327 res=1 >type=USER_START msg=audit(1401707401.371:2700): pid=20417 uid=0 auid=0 ses=327 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401707401.371:2701): pid=20417 uid=0 auid=0 ses=327 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401707401.402:2702): pid=20417 uid=0 auid=0 ses=327 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401707401.402:2703): pid=20417 uid=0 auid=0 ses=327 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401708301.407:2704): pid=20718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401708301.407:2705): pid=20718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401708301.407:2706): pid=20718 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=328 res=1 >type=USER_START msg=audit(1401708301.412:2707): pid=20718 uid=0 auid=0 ses=328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401708301.412:2708): pid=20718 uid=0 auid=0 ses=328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401708301.435:2709): pid=20718 uid=0 auid=0 ses=328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401708301.436:2710): pid=20718 uid=0 auid=0 ses=328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401709201.441:2711): pid=21021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401709201.442:2712): pid=21021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401709201.442:2713): pid=21021 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=329 res=1 >type=USER_START msg=audit(1401709201.446:2714): pid=21021 uid=0 auid=0 ses=329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401709201.446:2715): pid=21021 uid=0 auid=0 ses=329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401709201.479:2716): pid=21021 uid=0 auid=0 ses=329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401709201.479:2717): pid=21021 uid=0 auid=0 ses=329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401710101.485:2718): pid=21322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401710101.485:2719): pid=21322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401710101.486:2720): pid=21322 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=330 res=1 >type=USER_START msg=audit(1401710101.489:2721): pid=21322 uid=0 auid=0 ses=330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401710101.490:2722): pid=21322 uid=0 auid=0 ses=330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401710101.513:2723): pid=21322 uid=0 auid=0 ses=330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401710101.514:2724): pid=21322 uid=0 auid=0 ses=330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401710461.517:2725): pid=21446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401710461.517:2726): pid=21446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401710461.517:2727): pid=21446 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=331 res=1 >type=USER_START msg=audit(1401710461.521:2728): pid=21446 uid=0 auid=0 ses=331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401710461.521:2729): pid=21446 uid=0 auid=0 ses=331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401710461.533:2730): avc: denied { read } for pid=21468 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401710461.533:2730): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffba0848c0 a2=90800 a3=0 items=0 ppid=21466 pid=21468 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=331 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401710461.572:2731): pid=21446 uid=0 auid=0 ses=331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401710461.572:2732): pid=21446 uid=0 auid=0 ses=331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401711001.577:2733): pid=21653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401711001.577:2734): pid=21653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401711001.577:2735): pid=21653 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=332 res=1 >type=USER_START msg=audit(1401711001.581:2736): pid=21653 uid=0 auid=0 ses=332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401711001.581:2737): pid=21653 uid=0 auid=0 ses=332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401711001.613:2738): pid=21653 uid=0 auid=0 ses=332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401711001.614:2739): pid=21653 uid=0 auid=0 ses=332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401711901.619:2740): pid=21954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401711901.619:2741): pid=21954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401711901.619:2742): pid=21954 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=333 res=1 >type=USER_START msg=audit(1401711901.624:2743): pid=21954 uid=0 auid=0 ses=333 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401711901.624:2744): pid=21954 uid=0 auid=0 ses=333 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401711901.641:2745): pid=21954 uid=0 auid=0 ses=333 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401711901.641:2746): pid=21954 uid=0 auid=0 ses=333 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401712801.648:2747): pid=22255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401712801.648:2748): pid=22255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401712801.648:2749): pid=22255 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=334 res=1 >type=USER_START msg=audit(1401712801.652:2750): pid=22255 uid=0 auid=0 ses=334 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401712801.652:2751): pid=22255 uid=0 auid=0 ses=334 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401712801.701:2752): pid=22255 uid=0 auid=0 ses=334 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401712801.701:2753): pid=22255 uid=0 auid=0 ses=334 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401713701.706:2754): pid=22553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401713701.706:2755): pid=22553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401713701.706:2756): pid=22553 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=335 res=1 >type=USER_START msg=audit(1401713701.710:2757): pid=22553 uid=0 auid=0 ses=335 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401713701.710:2758): pid=22553 uid=0 auid=0 ses=335 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401713701.725:2759): pid=22553 uid=0 auid=0 ses=335 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401713701.726:2760): pid=22553 uid=0 auid=0 ses=335 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401714061.730:2761): pid=22680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401714061.731:2762): pid=22680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401714061.731:2763): pid=22680 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=336 res=1 >type=USER_START msg=audit(1401714061.735:2764): pid=22680 uid=0 auid=0 ses=336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401714061.735:2765): pid=22680 uid=0 auid=0 ses=336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401714061.746:2766): avc: denied { read } for pid=22702 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401714061.746:2766): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fffbd14e900 a2=90800 a3=0 items=0 ppid=22700 pid=22702 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=336 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401714061.769:2767): pid=22680 uid=0 auid=0 ses=336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401714061.770:2768): pid=22680 uid=0 auid=0 ses=336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401714601.774:2769): pid=22885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401714601.774:2770): pid=22885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401714601.774:2771): pid=22885 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=337 res=1 >type=USER_START msg=audit(1401714601.778:2772): pid=22885 uid=0 auid=0 ses=337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401714601.778:2773): pid=22885 uid=0 auid=0 ses=337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401714601.794:2774): pid=22885 uid=0 auid=0 ses=337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401714601.794:2775): pid=22885 uid=0 auid=0 ses=337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401715501.800:2776): pid=23188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401715501.800:2777): pid=23188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401715501.800:2778): pid=23188 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=338 res=1 >type=USER_START msg=audit(1401715501.804:2779): pid=23188 uid=0 auid=0 ses=338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401715501.804:2780): pid=23188 uid=0 auid=0 ses=338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401715501.833:2781): pid=23188 uid=0 auid=0 ses=338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401715501.834:2782): pid=23188 uid=0 auid=0 ses=338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401716401.839:2783): pid=23489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401716401.839:2784): pid=23489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401716401.839:2785): pid=23489 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=339 res=1 >type=USER_START msg=audit(1401716401.844:2786): pid=23489 uid=0 auid=0 ses=339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401716401.844:2787): pid=23489 uid=0 auid=0 ses=339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401716401.891:2788): pid=23489 uid=0 auid=0 ses=339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401716401.891:2789): pid=23489 uid=0 auid=0 ses=339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401717301.897:2790): pid=23793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401717301.897:2791): pid=23793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401717301.897:2792): pid=23793 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=340 res=1 >type=USER_START msg=audit(1401717301.902:2793): pid=23793 uid=0 auid=0 ses=340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401717301.902:2794): pid=23793 uid=0 auid=0 ses=340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401717301.918:2795): pid=23793 uid=0 auid=0 ses=340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401717301.918:2796): pid=23793 uid=0 auid=0 ses=340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401717661.921:2797): pid=23915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401717661.921:2798): pid=23915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401717661.921:2799): pid=23915 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=341 res=1 >type=USER_START msg=audit(1401717661.926:2800): pid=23915 uid=0 auid=0 ses=341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401717661.926:2801): pid=23915 uid=0 auid=0 ses=341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401717661.938:2802): avc: denied { read } for pid=23937 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401717661.938:2802): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff0beb9ce0 a2=90800 a3=0 items=0 ppid=23935 pid=23937 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=341 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401717661.971:2803): pid=23915 uid=0 auid=0 ses=341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401717661.972:2804): pid=23915 uid=0 auid=0 ses=341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401717861.874:2805): pid=24012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting acct="unbound" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401717861.875:2806): pid=24013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1401717861.875:2807): pid=24012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="unbound" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1401717861.876:2808): pid=24013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401717861.878:2809): pid=920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=920 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401717861.878:2810): pid=920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=920 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401717861.884:2811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rngd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401717861.884:2812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717861.884:2813): pid=24026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401717861.884:2814): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="smartd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401717861.884:2815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="avahi-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401717861.885:2816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="irqbalance" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401717861.885:2817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="chronyd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401717861.886:2818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="mcelog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_STOP msg=audit(1401717861.886:2819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401717861.887:2820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401717861.888:2821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401717861.889:2822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401717861.889:2823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401717861.893:2824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401717861.893:2825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@8:32" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401717861.893:2826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@8:2" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=DAEMON_START msg=audit(1401717926.458:3478): auditd start, ver=2.3.6 format=raw kernel=3.14.4-200.fc20.x86_64 auid=4294967295 pid=626 subj=system_u:system_r:auditd_t:s0 res=success >type=SERVICE_START msg=audit(1401717926.461:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="smartd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401717926.478:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401717926.487:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="irqbalance" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401717926.493:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401717926.501:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ipmievd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1401717926.502:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="mcelog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401717926.504:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1401717926.513:13): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1401717926.513:13): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=cef450 items=0 ppid=639 pid=673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=SERVICE_START msg=audit(1401717926.520:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iptables" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401717926.640:15): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="avahi-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401717926.643:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401717926.768:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="chronyd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401717926.913:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="wdmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401717926.914:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sanlock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401717927.037:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401717927.050:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401717927.056:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsid" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401717927.399:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401717928.225:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="tuned" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401717928.900:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1401717929.315:26): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1401717929.315:26): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=41a396 a2=0 a3=0 items=0 ppid=1011 pid=1012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=NETFILTER_CFG msg=audit(1401717929.687:27): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1401717929.687:27): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1401717929.687:27): arch=c000003e syscall=56 success=yes exit=1058 a0=6c020011 a1=7f60041a8160 a2=100 a3=7f600cfd0240 items=0 ppid=1 pid=976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_START msg=audit(1401717930.934:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1401717931.645:29): dev=em1 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1401717931.645:29): arch=c000003e syscall=16 success=yes exit=0 a0=3 a1=89a2 a2=7fffce9bda80 a3=ffffffffffffff0d items=0 ppid=1297 pid=1325 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:brctl_t:s0 key=(null) >type=SERVICE_START msg=audit(1401717936.381:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717936.518:31): pid=1472 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D7063696B4D5662 terminal=? res=success' >type=USER_START msg=audit(1401717936.519:32): pid=1472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717936.520:33): pid=1472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717936.568:34): pid=1491 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=USER_START msg=audit(1401717936.569:35): pid=1491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717936.577:36): pid=1491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717936.653:37): pid=1495 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401717936.654:38): pid=1495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717936.655:39): pid=1495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717936.662:40): pid=1497 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401717936.662:41): pid=1497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717936.794:42): pid=1497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717936.814:43): pid=1516 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401717936.815:44): pid=1516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717936.825:45): pid=1516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717936.836:46): pid=1518 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401717936.836:47): pid=1518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717936.842:48): pid=1518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717936.853:49): pid=1520 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401717936.854:50): pid=1520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717936.859:51): pid=1520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717936.866:52): pid=1524 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401717936.866:53): pid=1524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717936.871:54): pid=1524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717938.632:55): pid=1533 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D33203139322E3136382E322E313A2F686F6D652F73746F726167652F69736F202F726865762F646174612D63656E7465722F6D6E742F3139322E3136382E322E313A5F686F6D655F73746F726167655F69736F terminal=? res=success' >type=USER_START msg=audit(1401717938.633:56): pid=1533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717938.769:57): pid=1533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717938.950:58): pid=1545 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401717938.951:59): pid=1545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717939.090:60): pid=1545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717939.096:61): pid=1547 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401717939.096:62): pid=1547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717939.609:63): pid=1547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717939.616:64): pid=1555 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6E206E6F64652E73746172747570202D76206D616E75616C202D2D6F703D757064617465 terminal=? res=success' >type=USER_START msg=audit(1401717939.616:65): pid=1555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717939.617:66): pid=1555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717939.624:67): pid=1557 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401717939.624:68): pid=1557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717939.632:69): pid=1557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717939.658:70): pid=1562 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401717939.658:71): pid=1562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717939.770:72): pid=1562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717939.776:73): pid=1569 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401717939.777:74): pid=1569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717939.862:75): pid=1569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401717939.869:76): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@253:3" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401717939.870:77): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@253:4" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717939.873:78): pid=1600 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401717939.873:79): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717939.916:80): pid=1600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717939.923:81): pid=1604 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401717939.923:82): pid=1604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717940.106:83): pid=1604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717940.119:84): pid=1615 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401717940.119:85): pid=1615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717940.162:86): pid=1615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717940.169:87): pid=1617 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401717940.169:88): pid=1617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717940.310:89): pid=1617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717940.317:90): pid=1627 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401717940.317:91): pid=1627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717940.482:92): pid=1627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717940.489:93): pid=1637 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401717940.489:94): pid=1637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717940.715:95): pid=1637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717940.724:96): pid=1663 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401717940.724:97): pid=1663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717940.765:98): pid=1663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717940.780:99): pid=1669 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401717940.781:100): pid=1669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717940.788:101): pid=1671 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401717940.788:102): pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717940.811:103): pid=1669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717940.822:104): pid=1674 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401717940.823:105): pid=1674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717940.828:106): pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401717940.837:107): pid=1676 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401717940.837:108): pid=1676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401717940.862:109): pid=1674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1401717940.873:110): avc: denied { read } for pid=1679 comm="sanlock" name="253:6" dev="sysfs" ino=24187 scontext=system_u:system_r:sanlock_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1401717940.873:110): arch=c000003e syscall=2 success=no exit=-13 a0=7f27dcd6f870 a1=80000 a2=7f27dcd6f884 a3=0 items=0 ppid=1 pid=1679 auid=4294967295 uid=179 gid=179 euid=179 suid=179 fsuid=179 egid=179 sgid=179 fsgid=179 tty=(none) ses=4294967295 comm="sanlock" exe="/usr/sbin/sanlock" subj=system_u:system_r:sanlock_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1401717940.880:111): pid=1676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401718040.396:112): pid=1737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=1737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401718040.396:113): pid=1737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=1737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401718040.418:114): pid=1736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1737 suid=74 rport=39512 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401718040.418:115): pid=1736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1737 suid=74 rport=39512 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401718040.642:116): pid=1736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39512 acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401718040.642:117): pid=1736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=02:88:7d:f7:9f:c4:13:b7:4f:c4:b0:65:ba:87:47:42 rport=39512 acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_ACCT msg=audit(1401718040.740:118): pid=1736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1401718040.740:119): pid=1736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=ssh res=failed' >type=CRYPTO_KEY_USER msg=audit(1401718040.740:120): pid=1736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1737 suid=74 rport=39512 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401718040.740:121): pid=1736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=1736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401718040.741:122): pid=1736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=1736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_LOGIN msg=audit(1401718040.741:123): pid=1736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=ssh res=failed' >type=SERVICE_START msg=audit(1401718049.955:124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsi" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1401718051.111:125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-activation-net" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401718051.111:126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-activation-net" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401718051.115:127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-journal-flush" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401718051.115:128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-journal-flush" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401718051.222:129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401718051.299:130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401718051.330:131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401718051.353:132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401718051.353:133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401718051.364:134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit-wait" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401718051.364:135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit-wait" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401718051.364:136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-start" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401718051.364:137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-start" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401718051.384:138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SYSTEM_BOOT msg=audit(1401718051.455:139): pid=1835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='init exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SYSTEM_RUNLEVEL msg=audit(1401718051.459:140): pid=1835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401718051.479:141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401718051.479:142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401718064.126:143): pid=1843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=1843 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401718064.126:144): pid=1843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=1843 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401718064.126:145): pid=1842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1843 suid=74 rport=39513 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401718064.126:146): pid=1842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1843 suid=74 rport=39513 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401718064.181:147): pid=1842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39513 acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401718064.181:148): pid=1842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=02:88:7d:f7:9f:c4:13:b7:4f:c4:b0:65:ba:87:47:42 rport=39513 acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_ACCT msg=audit(1401718064.184:149): pid=1842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401718064.184:150): pid=1842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1843 suid=74 rport=39513 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401718064.185:151): pid=1842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1401718064.186:152): pid=1842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=LOGIN msg=audit(1401718064.186:153): pid=1842 uid=0 old-auid=4294967295 new-auid=1000 old-ses=4294967295 new-ses=1 res=1 >type=USER_ROLE_CHANGE msg=audit(1401718064.241:154): pid=1842 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_ACCT msg=audit(1401718064.274:155): pid=1845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting acct="alitke" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1401718064.275:156): pid=1845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="alitke" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1401718064.304:157): pid=1842 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401718064.305:158): pid=1849 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=1849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401718064.305:159): pid=1842 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1842 suid=0 rport=39513 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401718064.305:160): pid=1849 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=1849 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRED_ACQ msg=audit(1401718064.306:161): pid=1849 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1401718064.310:162): pid=1842 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1401718064.311:163): pid=1842 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1401718064.702:164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="user@1000" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401718081.471:165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401718081.471:166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401718201.170:167): pid=1992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401718201.170:168): pid=1992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401718201.171:169): pid=1992 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=2 res=1 >type=USER_START msg=audit(1401718201.178:170): pid=1992 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401718201.179:171): pid=1992 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401718201.185:172): pid=1995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1401718201.186:173): pid=1995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401718201.210:174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="user@0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1401718201.273:175): pid=1992 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401718201.274:176): pid=1992 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401718241.183:177): pid=2024 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401718241.183:178): pid=2024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401718241.228:179): pid=2024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401718241.237:180): pid=2026 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401718241.237:181): pid=2026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401718241.267:182): pid=2026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401718527.999:183): pid=20070 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F756D6F756E74202D66202D6C202F726865762F646174612D63656E7465722F6D6E742F3139322E3136382E322E313A5F686F6D655F73746F726167655F69736F terminal=? res=success' >type=USER_START msg=audit(1401718527.999:184): pid=20070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401718528.043:185): pid=20070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401718528.051:186): pid=20073 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401718528.051:187): pid=20073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401718528.074:188): pid=20073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401718528.081:189): pid=20080 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401718528.081:190): pid=20080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401718528.152:191): pid=20080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401718528.169:192): pid=20108 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D722031202D75 terminal=? res=success' >type=USER_START msg=audit(1401718528.169:193): pid=20108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401718528.190:194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@253:3" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401718528.681:195): pid=20108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401718528.688:196): pid=20142 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401718528.689:197): pid=20142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401718528.690:198): pid=20142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401718528.696:199): pid=20144 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401718528.696:200): pid=20144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401718528.737:201): pid=20144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401718813.211:202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401718813.211:203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401719101.284:204): pid=20810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401719101.284:205): pid=20810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401719101.285:206): pid=20810 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=3 res=1 >type=USER_START msg=audit(1401719101.291:207): pid=20810 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401719101.292:208): pid=20810 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401719101.631:209): pid=20810 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401719101.632:210): pid=20810 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_AUTH msg=audit(1401719318.504:211): pid=20883 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="alitke" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_ACCT msg=audit(1401719318.505:212): pid=20883 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="alitke" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401719318.506:213): pid=20883 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd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terminal=pts/0 res=success' >type=USER_START msg=audit(1401719318.507:214): pid=20883 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401719332.711:215): pid=20883 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401719340.978:216): pid=20903 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=73657276696365206C696276697274642072657374617274 terminal=pts/0 res=success' >type=USER_START msg=audit(1401719340.978:217): pid=20903 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_STOP msg=audit(1401719341.052:218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401719341.060:219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401719341.061:220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401719341.589:221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719341.591:222): pid=20903 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=NETFILTER_CFG msg=audit(1401719341.979:223): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1401719341.979:223): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1401719341.979:223): arch=c000003e syscall=56 success=yes exit=21010 a0=6c020011 a1=7f01c41ab160 a2=100 a3=7f01cdf33240 items=0 ppid=1 pid=20946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=USER_CMD msg=audit(1401719347.067:224): pid=21012 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=73657276696365207664736D642072657374617274 terminal=pts/0 res=success' >type=USER_START msg=audit(1401719347.068:225): pid=21012 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_STOP msg=audit(1401719350.145:226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401719351.052:227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719351.054:228): pid=21012 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401719351.186:229): pid=21100 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D7032773476546F terminal=? res=success' >type=USER_START msg=audit(1401719351.187:230): pid=21100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719351.188:231): pid=21100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719351.216:232): pid=21119 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=USER_START msg=audit(1401719351.216:233): pid=21119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719351.224:234): pid=21119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719351.252:235): pid=21123 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401719351.252:236): pid=21123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719351.254:237): pid=21123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719351.260:238): pid=21125 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401719351.261:239): pid=21125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719351.390:240): pid=21125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719351.409:241): pid=21145 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719351.409:242): pid=21145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719351.419:243): pid=21145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719351.428:244): pid=21147 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719351.429:245): pid=21147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719351.436:246): pid=21147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719351.446:247): pid=21149 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719351.446:248): pid=21149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719351.453:249): pid=21149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719351.464:250): pid=21153 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719351.464:251): pid=21153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719351.471:252): pid=21153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719354.797:253): pid=21162 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D33203139322E3136382E322E313A2F686F6D652F73746F726167652F69736F202F726865762F646174612D63656E7465722F6D6E742F3139322E3136382E322E313A5F686F6D655F73746F726167655F69736F terminal=? res=success' >type=USER_START msg=audit(1401719354.798:254): pid=21162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719354.821:255): pid=21162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719355.062:256): pid=21169 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401719355.062:257): pid=21169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719355.064:258): pid=21169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719355.070:259): pid=21171 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401719355.071:260): pid=21171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719355.585:261): pid=21171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719355.591:262): pid=21182 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6E206E6F64652E73746172747570202D76206D616E75616C202D2D6F703D757064617465 terminal=? res=success' >type=USER_START msg=audit(1401719355.592:263): pid=21182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719355.593:264): pid=21182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719355.599:265): pid=21184 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719355.599:266): pid=21184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719355.609:267): pid=21184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719355.635:268): pid=21189 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401719355.635:269): pid=21189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719355.657:270): pid=21189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719355.665:271): pid=21201 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401719355.665:272): pid=21201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719355.683:273): pid=21201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719355.691:274): pid=21221 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719355.692:275): pid=21221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719355.725:276): pid=21221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401719355.729:277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@253:3" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719355.737:278): pid=21230 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719355.738:279): pid=21230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719355.781:280): pid=21230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719355.789:281): pid=21232 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719355.790:282): pid=21232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719355.833:283): pid=21232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719355.848:284): pid=21238 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719355.849:285): pid=21238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719355.853:286): pid=21240 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719355.854:287): pid=21240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719355.882:288): pid=21238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719355.893:289): pid=21243 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719355.893:290): pid=21243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719355.896:291): pid=21240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719355.905:292): pid=21245 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719355.905:293): pid=21245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719355.937:294): pid=21243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719355.950:295): pid=21245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1401719355.963:296): avc: denied { read } for pid=21250 comm="sanlock" name="253:6" dev="sysfs" ino=24187 scontext=system_u:system_r:sanlock_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1401719355.963:296): arch=c000003e syscall=2 success=no exit=-13 a0=7f27dcd6f870 a1=80000 a2=7f27dcd6f884 a3=0 items=0 ppid=1 pid=21250 auid=4294967295 uid=179 gid=179 euid=179 suid=179 fsuid=179 egid=179 sgid=179 fsgid=179 tty=(none) ses=4294967295 comm="sanlock" exe="/usr/sbin/sanlock" subj=system_u:system_r:sanlock_t:s0-s0:c0.c1023 key=(null) >type=USER_CMD msg=audit(1401719377.424:297): pid=21276 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719377.424:298): pid=21276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719377.464:299): pid=21276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719377.517:300): pid=21279 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719377.518:301): pid=21279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719377.548:302): pid=21279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1401719377.567:303): pid=20921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="brewer-3" uuid=b6d88230-7c33-4484-9d50-6a392030e33d vm-ctx=system_u:system_r:svirt_t:s0:c161,c819 img-ctx=system_u:object_r:svirt_image_t:s0:c161,c819 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1401719377.567:304): pid=20921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="brewer-3" uuid=b6d88230-7c33-4484-9d50-6a392030e33d vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1401719377.895:305): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1401719377.895:305): arch=c000003e syscall=16 success=yes exit=0 a0=1b a1=89a2 a2=7f01d7675f70 a3=0 items=0 ppid=1 pid=20928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1401719377.910:306): pid=20921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="brewer-3" uuid=b6d88230-7c33-4484-9d50-6a392030e33d net=00:1a:4a:3f:44:b2 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401719378.046:307): pid=20921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="brewer-3" uuid=b6d88230-7c33-4484-9d50-6a392030e33d net=00:1a:4a:3f:44:b2 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401719378.081:308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-machined" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401719378.087:309): pid=20921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="brewer-3" uuid=b6d88230-7c33-4484-9d50-6a392030e33d cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d3.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401719378.087:310): pid=20921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="brewer-3" uuid=b6d88230-7c33-4484-9d50-6a392030e33d cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d3.scope/" class=path path="/rhev/data-center/mnt/192.168.2.1:_home_storage_iso/e453999e-ec9f-420b-941c-a9f9cc4432bb/images/11111111-1111-1111-1111-111111111111/CorePlus-current.iso" rdev=? acl=r exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401719378.088:311): pid=20921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="brewer-3" uuid=b6d88230-7c33-4484-9d50-6a392030e33d cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d3.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401719378.323:312): pid=20921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="brewer-3" uuid=b6d88230-7c33-4484-9d50-6a392030e33d old-disk="?" new-disk="/rhev/data-center/mnt/192.168.2.1:_home_storage_iso/e453999e-ec9f-420b-941c-a9f9cc4432bb/images/11111111-1111-1111-1111-111111111111/CorePlus-current.iso" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401719378.323:313): pid=20921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="brewer-3" uuid=b6d88230-7c33-4484-9d50-6a392030e33d old-disk="?" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/119241f1-d78d-49e0-96c5-375ada61e4e2/67845f45-a4e3-4b12-8d79-62d4b33aca61" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401719378.323:314): pid=20921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="brewer-3" uuid=b6d88230-7c33-4484-9d50-6a392030e33d old-net=? new-net=00:1a:4a:3f:44:b2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401719378.323:315): pid=20921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="brewer-3" uuid=b6d88230-7c33-4484-9d50-6a392030e33d old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401719378.323:316): pid=20921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="brewer-3" uuid=b6d88230-7c33-4484-9d50-6a392030e33d old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1401719378.323:317): pid=20921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="brewer-3" uuid=b6d88230-7c33-4484-9d50-6a392030e33d vm-pid=21397 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719378.384:318): pid=21404 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719378.386:319): pid=21404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719378.456:320): pid=21404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719416.653:321): pid=21446 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719416.653:322): pid=21446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719416.689:323): pid=21446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719416.696:324): pid=21448 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719416.696:325): pid=21448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719416.923:326): pid=21448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719416.932:327): pid=21460 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719416.932:328): pid=21460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719416.967:329): pid=21460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401719426.004:330): pid=20921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=snapshot vm="brewer-3" uuid=b6d88230-7c33-4484-9d50-6a392030e33d old-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/119241f1-d78d-49e0-96c5-375ada61e4e2/67845f45-a4e3-4b12-8d79-62d4b33aca61" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/119241f1-d78d-49e0-96c5-375ada61e4e2/3d826cd5-97a1-4c1b-9701-4a3de8ff2262" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719430.241:331): pid=21476 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719430.241:332): pid=21476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1401719430.312:333): avc: denied { read } for pid=21397 comm="qemu-system-x86" path="/dev/dm-15" dev="devtmpfs" ino=25442 scontext=system_u:system_r:svirt_t:s0:c161,c819 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401719430.312:333): arch=c000003e syscall=209 success=no exit=-13 a0=7ff35d117000 a1=1 a2=7ff35eaac7e0 a3=0 items=0 ppid=1 pid=21397 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c161,c819 key=(null) >type=USER_END msg=audit(1401719430.340:334): pid=21476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719430.348:335): pid=21478 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C766368616E6765202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6175746F6261636B7570206E202D2D617661696C61626C6520792061323436333836622D663331642D343531642D623861362D3266346330646661323762342F62306638666638302D373633332D346561662D626137662D303765623030303831383230 terminal=? res=success' >type=USER_START msg=audit(1401719430.348:336): pid=21478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719430.532:337): pid=21478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719430.541:338): pid=21490 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719430.541:339): pid=21490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719430.577:340): pid=21490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401719440.003:341): pid=20921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=snapshot vm="brewer-3" uuid=b6d88230-7c33-4484-9d50-6a392030e33d old-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/119241f1-d78d-49e0-96c5-375ada61e4e2/3d826cd5-97a1-4c1b-9701-4a3de8ff2262" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/119241f1-d78d-49e0-96c5-375ada61e4e2/b0f8ff80-7633-4eaf-ba7f-07eb00081820" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719452.815:342): pid=21511 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=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 terminal=pts/0 res=success' >type=USER_START msg=audit(1401719452.816:343): pid=21511 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401719459.128:344): pid=21511 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401719479.658:345): pid=21534 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=636174202F7661722F6C6F672F6C6962766972742F71656D752F6272657765722D332E6C6F67 terminal=pts/0 res=success' >type=USER_START msg=audit(1401719479.659:346): pid=21534 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401719479.660:347): pid=21534 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401719656.387:348): pid=21641 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719656.389:349): pid=21641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719656.435:350): pid=21641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719656.443:351): pid=21643 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719656.443:352): pid=21643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719656.478:353): pid=21643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401719692.934:354): pid=21672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=21672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401719692.934:355): pid=21672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=21672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401719692.936:356): pid=21671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21672 suid=74 rport=39964 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401719692.936:357): pid=21671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21672 suid=74 rport=39964 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401719693.002:358): pid=21671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39964 acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401719693.002:359): pid=21671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=02:88:7d:f7:9f:c4:13:b7:4f:c4:b0:65:ba:87:47:42 rport=39964 acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_ACCT msg=audit(1401719693.054:360): pid=21671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401719693.054:361): pid=21671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21672 suid=74 rport=39964 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401719693.054:362): pid=21671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1401719693.056:363): pid=21671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=LOGIN msg=audit(1401719693.056:364): pid=21671 uid=0 old-auid=4294967295 new-auid=1000 old-ses=4294967295 new-ses=4 res=1 >type=USER_ROLE_CHANGE msg=audit(1401719693.096:365): pid=21671 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_START msg=audit(1401719693.105:366): pid=21671 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401719693.105:367): pid=21671 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21671 suid=0 rport=39964 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401719693.105:368): pid=21674 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=21674 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401719693.105:369): pid=21674 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=21674 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRED_ACQ msg=audit(1401719693.106:370): pid=21674 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1401719693.109:371): pid=21671 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_START msg=audit(1401719693.110:372): pid=21671 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401719693.151:373): pid=21671 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21674 suid=1000 rport=39964 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_END msg=audit(1401719693.153:374): pid=21671 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRED_DISP msg=audit(1401719693.154:375): pid=21671 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_END msg=audit(1401719693.155:376): pid=21671 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1401719693.156:377): pid=21671 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401719693.156:378): pid=21671 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=21671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401719693.156:379): pid=21671 uid=0 auid=1000 ses=4 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=21671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401719698.322:380): pid=21691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=21691 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401719698.323:381): pid=21691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=21691 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401719698.324:382): pid=21690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21691 suid=74 rport=39966 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401719698.324:383): pid=21690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=21691 suid=74 rport=39966 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401719698.388:384): pid=21690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=39966 acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401719698.388:385): pid=21690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=02:88:7d:f7:9f:c4:13:b7:4f:c4:b0:65:ba:87:47:42 rport=39966 acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_ACCT msg=audit(1401719698.391:386): pid=21690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401719698.391:387): pid=21690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21691 suid=74 rport=39966 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401719698.392:388): pid=21690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1401719698.393:389): pid=21690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=LOGIN msg=audit(1401719698.393:390): pid=21690 uid=0 old-auid=4294967295 new-auid=1000 old-ses=4294967295 new-ses=5 res=1 >type=USER_ROLE_CHANGE msg=audit(1401719698.431:391): pid=21690 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_START msg=audit(1401719698.441:392): pid=21690 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401719698.441:393): pid=21690 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21690 suid=0 rport=39966 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401719698.441:394): pid=21693 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=21693 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401719698.441:395): pid=21693 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=21693 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRED_ACQ msg=audit(1401719698.442:396): pid=21693 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1401719698.445:397): pid=21690 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_START msg=audit(1401719698.446:398): pid=21690 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401719698.468:399): pid=21690 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21693 suid=1000 rport=39966 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_END msg=audit(1401719698.470:400): pid=21690 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRED_DISP msg=audit(1401719698.471:401): pid=21690 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_END msg=audit(1401719698.473:402): pid=21690 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_LOGOUT msg=audit(1401719698.474:403): pid=21690 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401719698.474:404): pid=21690 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=21690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401719698.474:405): pid=21690 uid=0 auid=1000 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=21690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401719849.615:406): pid=21794 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="alitke" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_ACCT msg=audit(1401719849.616:407): pid=21794 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="alitke" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401719849.617:408): pid=21794 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/yum.repos.d" cmd=7767657420687474703A2F2F6665646F726170656F706C652E6F72672F67726F7570732F766972742F766972742D707265766965772F6665646F72612D766972742D707265766965772E7265706F terminal=pts/0 res=success' >type=USER_START msg=audit(1401719849.618:409): pid=21794 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401719849.690:410): pid=21794 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401719861.552:411): pid=21832 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/yum.repos.d" cmd=7669206665646F72612D766972742D707265766965772E7265706F terminal=pts/0 res=success' >type=USER_START msg=audit(1401719861.553:412): pid=21832 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401719874.645:413): pid=21832 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401719889.912:414): pid=21852 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/yum.repos.d" cmd=79756D202D2D656E61626C657265706F206665646F72612D766972742D70726576696577207570646174652071656D752D6B6D76 terminal=pts/0 res=success' >type=USER_START msg=audit(1401719889.912:415): pid=21852 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1401719890.695:416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="polkit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401719890.734:417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="packagekit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401719890.738:418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="packagekit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719891.023:419): pid=21852 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401719893.106:420): pid=21868 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/yum.repos.d" cmd=79756D202D2D656E61626C657265706F206665646F72612D766972742D70726576696577207570646174652071656D752D6B766D terminal=pts/0 res=success' >type=USER_START msg=audit(1401719893.106:421): pid=21868 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1401719893.190:422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="packagekit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401719893.194:423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="packagekit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401719952.783:424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="packagekit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719954.106:425): pid=21868 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401719956.777:426): pid=21944 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719956.779:427): pid=21944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719956.828:428): pid=21944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719956.836:429): pid=21946 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401719956.837:430): pid=21946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719956.872:431): pid=21946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1401719963.866:432): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1401719964.093:433): pid=20921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="brewer-3" uuid=b6d88230-7c33-4484-9d50-6a392030e33d vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719964.167:434): pid=22016 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C7673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C76675F6E616D652C617474722C73697A652C7365675F73746172745F70652C646576696365732C746167732061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401719964.168:435): pid=22016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719964.204:436): pid=22016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719964.212:437): pid=22018 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=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 terminal=? res=success' >type=USER_START msg=audit(1401719964.212:438): pid=22018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719964.255:439): pid=22018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719979.078:440): pid=22036 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F756D6F756E74202D66202D6C202F726865762F646174612D63656E7465722F6D6E742F3139322E3136382E322E313A5F686F6D655F73746F726167655F69736F terminal=? res=success' >type=USER_START msg=audit(1401719979.078:441): pid=22036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719979.097:442): pid=22036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719979.104:443): pid=22039 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401719979.105:444): pid=22039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719979.128:445): pid=22039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719979.134:446): pid=22042 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401719979.134:447): pid=22042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719979.192:448): pid=22042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719979.215:449): pid=22061 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D722032202D75 terminal=? res=success' >type=USER_START msg=audit(1401719979.215:450): pid=22061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401719979.234:451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@253:3" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719979.724:452): pid=22061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719979.731:453): pid=22079 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401719979.731:454): pid=22079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719979.732:455): pid=22079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401719979.738:456): pid=22081 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401719979.738:457): pid=22081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401719979.783:458): pid=22081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401720001.644:459): pid=22091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401720001.644:460): pid=22091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401720001.644:461): pid=22091 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=6 res=1 >type=USER_START msg=audit(1401720001.651:462): pid=22091 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401720001.651:463): pid=22091 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401720001.692:464): pid=22091 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401720001.693:465): pid=22091 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401720017.508:466): pid=22098 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/yum.repos.d" cmd=73657276696365206C696276697274642072657374617274 terminal=pts/0 res=success' >type=USER_START msg=audit(1401720017.508:467): pid=22098 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_STOP msg=audit(1401720017.541:468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401720017.550:469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401720017.550:470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401720017.833:471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720017.835:472): pid=22098 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401720017.840:473): pid=22142 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/etc/yum.repos.d" cmd=73657276696365207664736D642072657374617274 terminal=pts/0 res=success' >type=USER_START msg=audit(1401720017.841:474): pid=22142 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=NETFILTER_CFG msg=audit(1401720018.239:475): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1401720018.239:475): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1401720018.239:475): arch=c000003e syscall=56 success=yes exit=22217 a0=6c020011 a1=7f718c1ab690 a2=4 a3=7f719490f240 items=0 ppid=1 pid=22140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_STOP msg=audit(1401720027.573:476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1401720028.386:477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720028.387:478): pid=22142 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401720028.519:479): pid=22294 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D70727943417044 terminal=? res=success' >type=USER_START msg=audit(1401720028.521:480): pid=22294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720028.521:481): pid=22294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720028.555:482): pid=22313 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=USER_START msg=audit(1401720028.555:483): pid=22313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720028.562:484): pid=22313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720028.589:485): pid=22317 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401720028.590:486): pid=22317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720028.592:487): pid=22317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720028.598:488): pid=22319 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401720028.599:489): pid=22319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720028.614:490): pid=22319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720028.643:491): pid=22331 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720028.644:492): pid=22331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720028.655:493): pid=22331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720028.667:494): pid=22337 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D65 terminal=? res=success' >type=USER_START msg=audit(1401720028.668:495): pid=22337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720028.676:496): pid=22337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720028.699:497): pid=22341 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720028.699:498): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720028.706:499): pid=22341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720028.726:500): pid=22344 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720028.726:501): pid=22344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720028.733:502): pid=22344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720034.114:503): pid=22357 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D33203139322E3136382E322E313A2F686F6D652F73746F726167652F69736F202F726865762F646174612D63656E7465722F6D6E742F3139322E3136382E322E313A5F686F6D655F73746F726167655F69736F terminal=? res=success' >type=USER_START msg=audit(1401720034.114:504): pid=22357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720034.138:505): pid=22357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720034.248:506): pid=22364 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401720034.248:507): pid=22364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720034.251:508): pid=22364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720034.257:509): pid=22366 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401720034.258:510): pid=22366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720034.769:511): pid=22366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720034.778:512): pid=22377 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6E206E6F64652E73746172747570202D76206D616E75616C202D2D6F703D757064617465 terminal=? res=success' >type=USER_START msg=audit(1401720034.779:513): pid=22377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720034.780:514): pid=22377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720034.787:515): pid=22379 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720034.787:516): pid=22379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720034.797:517): pid=22379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720034.824:518): pid=22383 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401720034.824:519): pid=22383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720034.846:520): pid=22383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720034.854:521): pid=22395 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401720034.854:522): pid=22395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401720034.912:523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@253:3" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720034.935:524): pid=22395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720034.944:525): pid=22425 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720034.944:526): pid=22425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720034.990:527): pid=22425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720035.003:528): pid=22428 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035313633376431663234323365346263353962623663613637387C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401720035.003:529): pid=22428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720035.047:530): pid=22428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720035.056:531): pid=22430 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720035.057:532): pid=22430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720035.102:533): pid=22430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720035.119:534): pid=22436 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720035.119:535): pid=22436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720035.126:536): pid=22438 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720035.127:537): pid=22438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720035.154:538): pid=22436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720035.169:539): pid=22441 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720035.169:540): pid=22441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720035.173:541): pid=22438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720035.182:542): pid=22443 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720035.183:543): pid=22443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720035.212:544): pid=22441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1401720035.220:545): avc: denied { read } for pid=22447 comm="sanlock" name="253:6" dev="sysfs" ino=24187 scontext=system_u:system_r:sanlock_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1401720035.220:545): arch=c000003e syscall=2 success=no exit=-13 a0=7f27dcd6f870 a1=80000 a2=7f27dcd6f884 a3=0 items=0 ppid=1 pid=22447 auid=4294967295 uid=179 gid=179 euid=179 suid=179 fsuid=179 egid=179 sgid=179 fsgid=179 tty=(none) ses=4294967295 comm="sanlock" exe="/usr/sbin/sanlock" subj=system_u:system_r:sanlock_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1401720035.248:546): pid=22443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720050.846:547): pid=22472 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720050.847:548): pid=22472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720050.881:549): pid=22472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1401720050.900:550): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="brewer-4" uuid=234cd4a6-3b1c-41f4-9220-1d3dfa3cb60e vm-ctx=system_u:system_r:svirt_t:s0:c530,c727 img-ctx=system_u:object_r:svirt_image_t:s0:c530,c727 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1401720050.900:551): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="brewer-4" uuid=234cd4a6-3b1c-41f4-9220-1d3dfa3cb60e vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1401720051.058:552): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1401720051.058:552): arch=c000003e syscall=16 success=yes exit=0 a0=1b a1=89a2 a2=7f719e051f70 a3=11 items=0 ppid=1 pid=22123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1401720051.071:553): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="brewer-4" uuid=234cd4a6-3b1c-41f4-9220-1d3dfa3cb60e net=00:1a:4a:3f:44:b3 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720051.158:554): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="brewer-4" uuid=234cd4a6-3b1c-41f4-9220-1d3dfa3cb60e net=00:1a:4a:3f:44:b3 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720051.166:555): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="brewer-4" uuid=234cd4a6-3b1c-41f4-9220-1d3dfa3cb60e cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d4.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720051.166:556): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="brewer-4" uuid=234cd4a6-3b1c-41f4-9220-1d3dfa3cb60e cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d4.scope/" class=path path="/rhev/data-center/mnt/192.168.2.1:_home_storage_iso/e453999e-ec9f-420b-941c-a9f9cc4432bb/images/11111111-1111-1111-1111-111111111111/CorePlus-current.iso" rdev=? acl=r exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720051.166:557): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="brewer-4" uuid=234cd4a6-3b1c-41f4-9220-1d3dfa3cb60e cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d4.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720051.389:558): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="brewer-4" uuid=234cd4a6-3b1c-41f4-9220-1d3dfa3cb60e old-disk="?" new-disk="/rhev/data-center/mnt/192.168.2.1:_home_storage_iso/e453999e-ec9f-420b-941c-a9f9cc4432bb/images/11111111-1111-1111-1111-111111111111/CorePlus-current.iso" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720051.389:559): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="brewer-4" uuid=234cd4a6-3b1c-41f4-9220-1d3dfa3cb60e old-disk="?" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/2b9117f5-c3f5-41a9-937d-38338a63208f/aefad89e-2c3e-49da-ac5b-6a6c5d21b362" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720051.389:560): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="brewer-4" uuid=234cd4a6-3b1c-41f4-9220-1d3dfa3cb60e old-net=? new-net=00:1a:4a:3f:44:b3 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720051.389:561): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="brewer-4" uuid=234cd4a6-3b1c-41f4-9220-1d3dfa3cb60e old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720051.389:562): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="brewer-4" uuid=234cd4a6-3b1c-41f4-9220-1d3dfa3cb60e old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1401720051.389:563): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="brewer-4" uuid=234cd4a6-3b1c-41f4-9220-1d3dfa3cb60e vm-pid=22586 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720051.451:564): pid=22592 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720051.452:565): pid=22592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720051.487:566): pid=22592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720065.716:567): pid=22621 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720065.717:568): pid=22621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720065.792:569): pid=22621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720065.800:570): pid=22623 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720065.801:571): pid=22623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720065.945:572): pid=22623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720065.954:573): pid=22635 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720065.955:574): pid=22635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720065.989:575): pid=22635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720075.004:576): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=snapshot vm="brewer-4" uuid=234cd4a6-3b1c-41f4-9220-1d3dfa3cb60e old-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/2b9117f5-c3f5-41a9-937d-38338a63208f/aefad89e-2c3e-49da-ac5b-6a6c5d21b362" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/2b9117f5-c3f5-41a9-937d-38338a63208f/ee8fff64-cba3-4335-aa80-98b07a06cc1f" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1401720077.855:577): avc: denied { read } for pid=22586 comm="qemu-system-x86" path="/dev/dm-16" dev="devtmpfs" ino=25443 scontext=system_u:system_r:svirt_t:s0:c530,c727 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401720077.855:577): arch=c000003e syscall=209 success=no exit=-13 a0=7f2daa65e000 a1=1 a2=7f2dabc4d770 a3=0 items=0 ppid=1 pid=22586 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c530,c727 key=(null) >type=USER_CMD msg=audit(1401720078.436:578): pid=22649 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C7673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C76675F6E616D652C617474722C73697A652C7365675F73746172745F70652C646576696365732C746167732061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401720078.436:579): pid=22649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720078.472:580): pid=22649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720078.480:581): pid=22651 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720078.480:582): pid=22651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720078.625:583): pid=22651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720078.635:584): pid=22663 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720078.635:585): pid=22663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720078.670:586): pid=22663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720088.003:587): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=snapshot vm="brewer-4" uuid=234cd4a6-3b1c-41f4-9220-1d3dfa3cb60e old-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/2b9117f5-c3f5-41a9-937d-38338a63208f/ee8fff64-cba3-4335-aa80-98b07a06cc1f" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/2b9117f5-c3f5-41a9-937d-38338a63208f/1652d4f4-ceac-464b-ba47-f895d20f8571" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1401720088.038:588): avc: denied { ioctl } for pid=22586 comm="qemu-system-x86" path="/dev/dm-16" dev="devtmpfs" ino=25443 scontext=system_u:system_r:svirt_t:s0:c530,c727 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401720088.038:588): arch=c000003e syscall=16 success=no exit=-13 a0=6b a1=1268 a2=7fff94c803dc a3=0 items=0 ppid=1 pid=22586 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c530,c727 key=(null) >type=AVC msg=audit(1401720088.038:589): avc: denied { read } for pid=22586 comm="qemu-system-x86" path="/dev/dm-16" dev="devtmpfs" ino=25443 scontext=system_u:system_r:svirt_t:s0:c530,c727 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401720088.038:589): arch=c000003e syscall=17 success=no exit=-13 a0=6b a1=7f2dabb47200 a2=1000 a3=0 items=0 ppid=1 pid=22586 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c530,c727 key=(null) >type=AVC msg=audit(1401720088.038:590): avc: denied { read } for pid=22586 comm="qemu-system-x86" path="/dev/dm-16" dev="devtmpfs" ino=25443 scontext=system_u:system_r:svirt_t:s0:c530,c727 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401720088.038:590): arch=c000003e syscall=17 success=no exit=-13 a0=6b a1=7f2dabb47400 a2=1000 a3=0 items=0 ppid=1 pid=22586 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c530,c727 key=(null) >type=AVC msg=audit(1401720088.038:591): avc: denied { read } for pid=22586 comm="qemu-system-x86" path="/dev/dm-16" dev="devtmpfs" ino=25443 scontext=system_u:system_r:svirt_t:s0:c530,c727 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401720088.038:591): arch=c000003e syscall=17 success=no exit=-13 a0=6b a1=7f2dabb47800 a2=1000 a3=0 items=0 ppid=1 pid=22586 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c530,c727 key=(null) >type=AVC msg=audit(1401720088.038:592): avc: denied { read } for pid=22586 comm="qemu-system-x86" path="/dev/dm-16" dev="devtmpfs" ino=25443 scontext=system_u:system_r:svirt_t:s0:c530,c727 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401720088.038:592): arch=c000003e syscall=17 success=no exit=-13 a0=6b a1=7f2dabb48000 a2=1000 a3=0 items=0 ppid=1 pid=22586 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c530,c727 key=(null) >type=AVC msg=audit(1401720088.038:593): avc: denied { read } for pid=22586 comm="qemu-system-x86" path="/dev/dm-16" dev="devtmpfs" ino=25443 scontext=system_u:system_r:svirt_t:s0:c530,c727 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401720088.038:593): arch=c000003e syscall=17 success=no exit=-13 a0=6b a1=7f2dabb440f0 a2=200 a3=0 items=0 ppid=1 pid=22586 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c530,c727 key=(null) >type=AVC msg=audit(1401720088.038:594): avc: denied { read } for pid=22586 comm="qemu-system-x86" path="/dev/dm-16" dev="devtmpfs" ino=25443 scontext=system_u:system_r:svirt_t:s0:c530,c727 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401720088.038:594): arch=c000003e syscall=17 success=no exit=-13 a0=6b a1=7f2dabb440f0 a2=400 a3=0 items=0 ppid=1 pid=22586 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c530,c727 key=(null) >type=AVC msg=audit(1401720088.038:595): avc: denied { read } for pid=22586 comm="qemu-system-x86" path="/dev/dm-16" dev="devtmpfs" ino=25443 scontext=system_u:system_r:svirt_t:s0:c530,c727 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401720088.038:595): arch=c000003e syscall=17 success=no exit=-13 a0=6b a1=7f2dabb440f0 a2=800 a3=0 items=0 ppid=1 pid=22586 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c530,c727 key=(null) >type=AVC msg=audit(1401720088.038:596): avc: denied { read } for pid=22586 comm="qemu-system-x86" path="/dev/dm-16" dev="devtmpfs" ino=25443 scontext=system_u:system_r:svirt_t:s0:c530,c727 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401720088.038:596): arch=c000003e syscall=17 success=no exit=-13 a0=6b a1=7f2dabb440f0 a2=1000 a3=0 items=0 ppid=1 pid=22586 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c530,c727 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1401720100.986:597): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1401720101.214:598): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="brewer-4" uuid=234cd4a6-3b1c-41f4-9220-1d3dfa3cb60e vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720101.224:599): pid=22744 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720101.226:600): pid=22744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720101.261:601): pid=22744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720101.269:602): pid=22746 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=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 terminal=? res=success' >type=USER_START msg=audit(1401720101.269:603): pid=22746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720101.310:604): pid=22746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720119.564:605): pid=22761 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720119.564:606): pid=22761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720119.599:607): pid=22761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1401720119.618:608): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="brewer-5" uuid=83d5c6db-0af9-4d1c-93d0-1dde75550a70 vm-ctx=system_u:system_r:svirt_t:s0:c824,c951 img-ctx=system_u:object_r:svirt_image_t:s0:c824,c951 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1401720119.618:609): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="brewer-5" uuid=83d5c6db-0af9-4d1c-93d0-1dde75550a70 vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1401720119.695:610): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1401720119.695:610): arch=c000003e syscall=16 success=yes exit=0 a0=1b a1=89a2 a2=7f719d850f70 a3=0 items=0 ppid=1 pid=22124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1401720119.705:611): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="brewer-5" uuid=83d5c6db-0af9-4d1c-93d0-1dde75550a70 net=00:1a:4a:3f:44:b8 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720119.793:612): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="brewer-5" uuid=83d5c6db-0af9-4d1c-93d0-1dde75550a70 net=00:1a:4a:3f:44:b8 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720119.821:613): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="brewer-5" uuid=83d5c6db-0af9-4d1c-93d0-1dde75550a70 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d5.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720119.821:614): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="brewer-5" uuid=83d5c6db-0af9-4d1c-93d0-1dde75550a70 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d5.scope/" class=path path="/rhev/data-center/mnt/192.168.2.1:_home_storage_iso/e453999e-ec9f-420b-941c-a9f9cc4432bb/images/11111111-1111-1111-1111-111111111111/CorePlus-current.iso" rdev=? acl=r exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720119.821:615): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="brewer-5" uuid=83d5c6db-0af9-4d1c-93d0-1dde75550a70 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d5.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720120.043:616): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="brewer-5" uuid=83d5c6db-0af9-4d1c-93d0-1dde75550a70 old-disk="?" new-disk="/rhev/data-center/mnt/192.168.2.1:_home_storage_iso/e453999e-ec9f-420b-941c-a9f9cc4432bb/images/11111111-1111-1111-1111-111111111111/CorePlus-current.iso" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720120.043:617): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="brewer-5" uuid=83d5c6db-0af9-4d1c-93d0-1dde75550a70 old-disk="?" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/649ec064-7818-458e-994f-52df39a066e8/b85f711d-830b-417e-9025-85b1904d4c96" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720120.043:618): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="brewer-5" uuid=83d5c6db-0af9-4d1c-93d0-1dde75550a70 old-net=? new-net=00:1a:4a:3f:44:b8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720120.043:619): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="brewer-5" uuid=83d5c6db-0af9-4d1c-93d0-1dde75550a70 old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720120.043:620): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="brewer-5" uuid=83d5c6db-0af9-4d1c-93d0-1dde75550a70 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1401720120.043:621): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="brewer-5" uuid=83d5c6db-0af9-4d1c-93d0-1dde75550a70 vm-pid=22875 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720120.109:622): pid=22881 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720120.109:623): pid=22881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720120.145:624): pid=22881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720206.897:625): pid=22956 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720206.897:626): pid=22956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720206.932:627): pid=22956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720206.940:628): pid=22958 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720206.940:629): pid=22958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720207.089:630): pid=22958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720207.098:631): pid=22970 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720207.098:632): pid=22970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720207.133:633): pid=22970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720217.002:634): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=snapshot vm="brewer-5" uuid=83d5c6db-0af9-4d1c-93d0-1dde75550a70 old-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/649ec064-7818-458e-994f-52df39a066e8/b85f711d-830b-417e-9025-85b1904d4c96" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/649ec064-7818-458e-994f-52df39a066e8/6af6013f-29f6-4b88-8db4-d662fdfd8bca" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720220.421:635): pid=22987 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720220.421:636): pid=22987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720220.576:637): pid=22987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720220.585:638): pid=22989 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720220.585:639): pid=22989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720220.732:640): pid=22989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720220.742:641): pid=23001 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720220.742:642): pid=23001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720220.851:643): pid=23001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401720230.004:644): pid=22116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=snapshot vm="brewer-5" uuid=83d5c6db-0af9-4d1c-93d0-1dde75550a70 old-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/649ec064-7818-458e-994f-52df39a066e8/6af6013f-29f6-4b88-8db4-d662fdfd8bca" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/649ec064-7818-458e-994f-52df39a066e8/77df4dd9-a079-4dd5-9d7a-623d2c4c1bc4" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1401720230.042:645): avc: denied { ioctl } for pid=22875 comm="qemu-system-x86" path="/dev/dm-17" dev="devtmpfs" ino=25448 scontext=system_u:system_r:svirt_t:s0:c824,c951 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401720230.042:645): arch=c000003e syscall=16 success=no exit=-13 a0=6b a1=1268 a2=7fff798dd8dc a3=0 items=0 ppid=1 pid=22875 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c824,c951 key=(null) >type=AVC msg=audit(1401720230.042:646): avc: denied { read } for pid=22875 comm="qemu-system-x86" path="/dev/dm-17" dev="devtmpfs" ino=25448 scontext=system_u:system_r:svirt_t:s0:c824,c951 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401720230.042:646): arch=c000003e syscall=17 success=no exit=-13 a0=6b a1=7fb6c581b200 a2=1000 a3=0 items=0 ppid=1 pid=22875 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c824,c951 key=(null) >type=AVC msg=audit(1401720230.042:647): avc: denied { read } for pid=22875 comm="qemu-system-x86" path="/dev/dm-17" dev="devtmpfs" ino=25448 scontext=system_u:system_r:svirt_t:s0:c824,c951 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401720230.042:647): arch=c000003e syscall=17 success=no exit=-13 a0=6b a1=7fb6c581b400 a2=1000 a3=0 items=0 ppid=1 pid=22875 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c824,c951 key=(null) >type=AVC msg=audit(1401720230.042:648): avc: denied { read } for pid=22875 comm="qemu-system-x86" path="/dev/dm-17" dev="devtmpfs" ino=25448 scontext=system_u:system_r:svirt_t:s0:c824,c951 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401720230.042:648): arch=c000003e syscall=17 success=no exit=-13 a0=6b a1=7fb6c581b800 a2=1000 a3=0 items=0 ppid=1 pid=22875 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c824,c951 key=(null) >type=AVC msg=audit(1401720230.042:649): avc: denied { read } for pid=22875 comm="qemu-system-x86" path="/dev/dm-17" dev="devtmpfs" ino=25448 scontext=system_u:system_r:svirt_t:s0:c824,c951 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401720230.042:649): arch=c000003e syscall=17 success=no exit=-13 a0=6b a1=7fb6c581c000 a2=1000 a3=0 items=0 ppid=1 pid=22875 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c824,c951 key=(null) >type=AVC msg=audit(1401720230.042:650): avc: denied { read } for pid=22875 comm="qemu-system-x86" path="/dev/dm-17" dev="devtmpfs" ino=25448 scontext=system_u:system_r:svirt_t:s0:c824,c951 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401720230.042:650): arch=c000003e syscall=17 success=no exit=-13 a0=6b a1=7fb6c58185d0 a2=200 a3=0 items=0 ppid=1 pid=22875 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c824,c951 key=(null) >type=AVC msg=audit(1401720230.042:651): avc: denied { read } for pid=22875 comm="qemu-system-x86" path="/dev/dm-17" dev="devtmpfs" ino=25448 scontext=system_u:system_r:svirt_t:s0:c824,c951 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401720230.042:651): arch=c000003e syscall=17 success=no exit=-13 a0=6b a1=7fb6c58185d0 a2=400 a3=0 items=0 ppid=1 pid=22875 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c824,c951 key=(null) >type=AVC msg=audit(1401720230.042:652): avc: denied { read } for pid=22875 comm="qemu-system-x86" path="/dev/dm-17" dev="devtmpfs" ino=25448 scontext=system_u:system_r:svirt_t:s0:c824,c951 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401720230.042:652): arch=c000003e syscall=17 success=no exit=-13 a0=6b a1=7fb6c58185d0 a2=800 a3=0 items=0 ppid=1 pid=22875 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c824,c951 key=(null) >type=AVC msg=audit(1401720230.042:653): avc: denied { read } for pid=22875 comm="qemu-system-x86" path="/dev/dm-17" dev="devtmpfs" ino=25448 scontext=system_u:system_r:svirt_t:s0:c824,c951 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401720230.042:653): arch=c000003e syscall=17 success=no exit=-13 a0=6b a1=7fb6c58185d0 a2=1000 a3=0 items=0 ppid=1 pid=22875 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c824,c951 key=(null) >type=USER_CMD msg=audit(1401720254.309:654): pid=23027 uid=1000 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke" cmd=766972736820626C6F636B636F6D6D69742038336435633664622D306166392D346431632D393364302D316464653735353530613730202F726865762F646174612D63656E7465722F6D6E742F626C6F636B53442F61323436333836622D663331642D343531642D623861362D3266346330646661323762342F696D616765732F36343965633036342D373831382D343538652D393934662D3532646633396130363665382F37376466346464392D613037392D346464352D396437612D363233643263346331626334202D2D62617365202F726865762F646174612D63656E7465722F6D6E742F626C6F636B53442F61323436333836622D663331642D343531642D623861362D3266346330646661323762342F696D616765732F36343965633036342D373831382D343538652D393934662D3532646633396130363665382F62383566373131642D383330622D343137652D393032352D383562313930346434633936202D2D746F70202F726865762F646174612D63656E7465722F6D6E742F626C6F636B53442F61323436333836622D663331642D343531642D623861362D3266346330646661323762342F696D616765732F36343965633036342D373831382D343538652D393934662D3532646633396130363665382F36616636303133662D323966362D346238382D386462342D643636326664666438626361 terminal=pts/0 res=success' >type=USER_START msg=audit(1401720254.310:655): pid=23027 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_STOP msg=audit(1401720258.067:656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="packagekit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720260.832:657): pid=23027 uid=0 auid=1000 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401720335.576:658): pid=23084 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720335.577:659): pid=23084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720335.623:660): pid=23084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720335.631:661): pid=23086 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720335.631:662): pid=23086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720335.762:663): pid=23086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720636.142:664): pid=23268 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720636.142:665): pid=23268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720636.187:666): pid=23268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720636.195:667): pid=23270 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720636.195:668): pid=23270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720636.230:669): pid=23270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401720901.702:670): pid=23434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401720901.703:671): pid=23434 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401720901.703:672): pid=23434 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=7 res=1 >type=USER_START msg=audit(1401720901.710:673): pid=23434 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401720901.710:674): pid=23434 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401720904.938:675): pid=23434 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401720904.939:676): pid=23434 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401720936.574:677): pid=23462 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720936.576:678): pid=23462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720936.625:679): pid=23462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401720936.634:680): pid=23464 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401720936.634:681): pid=23464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401720936.669:682): pid=23464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721237.123:683): pid=23651 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401721237.124:684): pid=23651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721237.169:685): pid=23651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721237.177:686): pid=23654 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401721237.178:687): pid=23654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721237.212:688): pid=23654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401721261.946:689): pid=23672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401721261.946:690): pid=23672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401721261.946:691): pid=23672 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=8 res=1 >type=USER_START msg=audit(1401721261.950:692): pid=23672 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401721261.951:693): pid=23672 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=AVC msg=audit(1401721262.091:694): avc: denied { read } for pid=23694 comm="logrotate" name="core" dev="dm-1" ino=266292 scontext=system_u:system_r:logrotate_t:s0-s0:c0.c1023 tcontext=system_u:object_r:virt_cache_t:s0 tclass=dir >type=SYSCALL msg=audit(1401721262.091:694): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=7fff2cd955c0 a2=90800 a3=0 items=0 ppid=23692 pid=23694 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="logrotate" exe="/usr/sbin/logrotate" subj=system_u:system_r:logrotate_t:s0-s0:c0.c1023 key=(null) >type=CRED_DISP msg=audit(1401721262.129:695): pid=23672 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401721262.130:696): pid=23672 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401721653.765:697): pid=1842 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=? terminal=ssh res=success' >type=CRED_DISP msg=audit(1401721653.766:698): pid=1842 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=? terminal=ssh res=success' >type=USER_END msg=audit(1401721653.769:699): pid=1842 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_LOGOUT msg=audit(1401721653.769:700): pid=1842 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1401721653.769:701): pid=1842 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=1842 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401721653.769:702): pid=1842 uid=0 auid=1000 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=1842 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401721653.778:703): pid=858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401721653.778:704): pid=858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401721653.780:705): pid=23923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting acct="alitke" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401721653.780:706): pid=23922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1401721653.781:707): pid=23923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="alitke" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1401721653.781:708): pid=23922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721653.788:709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721653.789:710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rngd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721653.789:711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="smartd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721653.789:712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="avahi-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721653.790:713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="chronyd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721653.790:714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="irqbalance" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721653.791:715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="mcelog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_STOP msg=audit(1401721653.791:716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721653.793:717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721653.793:718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721653.797:719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721653.797:720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-machined" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721653.798:721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="polkit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721653.798:722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@253:3" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721653.799:723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@253:4" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721653.799:724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@8:2" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721653.799:725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721653.802:726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721653.806:727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_STOP msg=audit(1401721653.849:728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=DAEMON_START msg=audit(1401721732.814:3216): auditd start, ver=2.3.6 format=raw kernel=3.14.4-200.fc20.x86_64 auid=4294967295 pid=627 subj=system_u:system_r:auditd_t:s0 res=success >type=SERVICE_START msg=audit(1401721732.831:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="smartd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721732.835:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721732.856:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="irqbalance" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721732.870:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721732.873:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ipmievd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1401721732.874:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rpcbind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721732.877:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="mcelog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721732.882:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="chronyd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1401721732.892:14): table=filter family=2 entries=4 >type=SYSCALL msg=audit(1401721732.892:14): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=23b1450 items=0 ppid=642 pid=677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null) >type=SERVICE_START msg=audit(1401721732.901:15): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iptables" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721732.955:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="avahi-daemon" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721732.957:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721733.065:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="wdmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721733.067:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sanlock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721733.109:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="tuned" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721733.365:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721733.373:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721733.376:23): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsid" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721733.535:24): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nfs-lock" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721733.697:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1401721733.889:26): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1401721733.889:26): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=41a396 a2=0 a3=0 items=0 ppid=1020 pid=1021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null) >type=SERVICE_START msg=audit(1401721734.523:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=NETFILTER_CFG msg=audit(1401721735.456:28): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1401721735.456:28): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1401721735.456:28): arch=c000003e syscall=56 success=yes exit=1071 a0=6c020011 a1=7f9b181a8e80 a2=4 a3=7f9b20b9f240 items=0 ppid=1 pid=989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=ANOM_PROMISCUOUS msg=audit(1401721737.057:29): dev=em1 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1401721737.057:29): arch=c000003e syscall=16 success=yes exit=0 a0=3 a1=89a2 a2=7fffc3d3dfd0 a3=ffffffffffffff0d items=0 ppid=1305 pid=1333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="brctl" exe="/usr/sbin/brctl" subj=system_u:system_r:brctl_t:s0 key=(null) >type=SERVICE_START msg=audit(1401721741.819:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721741.958:31): pid=1480 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D70326741687030 terminal=? res=success' >type=USER_START msg=audit(1401721741.959:32): pid=1480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721741.960:33): pid=1480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721741.986:34): pid=1499 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=USER_START msg=audit(1401721741.987:35): pid=1499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721741.994:36): pid=1499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721742.084:37): pid=1503 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401721742.085:38): pid=1503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721742.086:39): pid=1503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721742.092:40): pid=1505 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401721742.092:41): pid=1505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721743.102:42): pid=1505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721743.127:43): pid=1524 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401721743.127:44): pid=1524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721743.136:45): pid=1524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721743.150:46): pid=1526 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401721743.150:47): pid=1526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721743.156:48): pid=1526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721743.168:49): pid=1528 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401721743.168:50): pid=1528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721743.173:51): pid=1528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721743.186:52): pid=1530 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401721743.186:53): pid=1530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721743.191:54): pid=1530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721745.362:55): pid=1541 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D33203139322E3136382E322E313A2F686F6D652F73746F726167652F69736F202F726865762F646174612D63656E7465722F6D6E742F3139322E3136382E322E313A5F686F6D655F73746F726167655F69736F terminal=? res=success' >type=USER_START msg=audit(1401721745.362:56): pid=1541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721745.397:57): pid=1541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721745.529:58): pid=1553 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401721745.529:59): pid=1553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721745.593:60): pid=1553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721745.599:61): pid=1555 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401721745.599:62): pid=1555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721746.111:63): pid=1555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721746.118:64): pid=1563 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6E206E6F64652E73746172747570202D76206D616E75616C202D2D6F703D757064617465 terminal=? res=success' >type=USER_START msg=audit(1401721746.118:65): pid=1563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721746.119:66): pid=1563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721746.126:67): pid=1565 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401721746.126:68): pid=1565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721746.135:69): pid=1565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721746.162:70): pid=1570 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401721746.163:71): pid=1570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721746.195:72): pid=1570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721746.202:73): pid=1585 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401721746.202:74): pid=1585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721746.253:75): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@253:3" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721746.273:76): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@253:4" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721746.301:77): pid=1585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721746.310:78): pid=1625 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401721746.310:79): pid=1625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721746.354:80): pid=1625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721746.361:81): pid=1627 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401721746.361:82): pid=1627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721746.510:83): pid=1627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721746.523:84): pid=1638 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401721746.523:85): pid=1638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721746.568:86): pid=1638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721746.575:87): pid=1640 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401721746.575:88): pid=1640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721746.720:89): pid=1640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721746.727:90): pid=1650 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401721746.727:91): pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721746.871:92): pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721746.878:93): pid=1660 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C766368616E6765202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6175746F6261636B7570206E202D2D617661696C61626C6520792061323436333836622D663331642D343531642D623861362D3266346330646661323762342F696E626F782061323436333836622D663331642D343531642D623861362D3266346330646661323762342F6F7574626F782061323436333836622D663331642D343531642D623861362D3266346330646661323762342F6D6173746572 terminal=? res=success' >type=USER_START msg=audit(1401721746.878:94): pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721747.115:95): pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721747.124:96): pid=1686 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401721747.124:97): pid=1686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721747.169:98): pid=1686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721747.186:99): pid=1692 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401721747.186:100): pid=1692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721747.193:101): pid=1694 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035313633376431663234323365346263353962623663613637387C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401721747.193:102): pid=1694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721747.220:103): pid=1692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721747.232:104): pid=1697 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401721747.233:105): pid=1697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721747.239:106): pid=1694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401721747.247:107): pid=1699 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035313633376431663234323365346263353962623663613637387C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652065343533393939652D656339662D343230622D393431632D613966396363343433326262 terminal=? res=success' >type=USER_START msg=audit(1401721747.248:108): pid=1699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401721747.276:109): pid=1697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1401721747.284:110): avc: denied { read } for pid=1703 comm="sanlock" name="253:6" dev="sysfs" ino=24193 scontext=system_u:system_r:sanlock_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1401721747.284:110): arch=c000003e syscall=2 success=no exit=-13 a0=7f0767354870 a1=80000 a2=7f0767354884 a3=0 items=0 ppid=1 pid=1703 auid=4294967295 uid=179 gid=179 euid=179 suid=179 fsuid=179 egid=179 sgid=179 fsgid=179 tty=(none) ses=4294967295 comm="sanlock" exe="/usr/sbin/sanlock" subj=system_u:system_r:sanlock_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1401721747.295:111): pid=1699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721855.985:112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="iscsi" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1401721857.142:113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-activation-net" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721857.142:114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-activation-net" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721857.145:115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-journal-flush" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721857.145:116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-journal-flush" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721857.248:117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721857.329:118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="atd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721857.370:119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721857.425:120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721857.425:121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721857.425:122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-start" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721857.425:123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-start" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721857.436:124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit-wait" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721857.436:125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="plymouth-quit-wait" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721857.456:126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SYSTEM_BOOT msg=audit(1401721857.527:127): pid=1915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='init exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SYSTEM_RUNLEVEL msg=audit(1401721857.528:128): pid=1915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721857.548:129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721857.548:130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401721887.545:131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401721887.546:132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-readahead-done" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401722047.584:133): pid=2009 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401722047.585:134): pid=2009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401722047.636:135): pid=2009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401722047.645:136): pid=2011 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401722047.645:137): pid=2011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401722047.680:138): pid=2011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401722347.997:139): pid=2137 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401722347.998:140): pid=2137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401722348.040:141): pid=2137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401722348.048:142): pid=2139 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401722348.048:143): pid=2139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401722348.081:144): pid=2139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401722610.284:145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401722610.284:146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401722648.405:147): pid=2266 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401722648.405:148): pid=2266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401722648.450:149): pid=2266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401722648.458:150): pid=2268 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401722648.458:151): pid=2268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401722648.493:152): pid=2268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401722701.286:153): pid=2295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401722701.286:154): pid=2295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401722701.287:155): pid=2295 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=1 res=1 >type=USER_START msg=audit(1401722701.310:156): pid=2295 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401722701.310:157): pid=2295 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_ACCT msg=audit(1401722701.326:158): pid=2297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1401722701.327:159): pid=2297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=CRED_DISP msg=audit(1401722701.509:160): pid=2295 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401722701.510:161): pid=2295 uid=0 auid=0 ses=1 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=SERVICE_START msg=audit(1401722701.538:162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="user@0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401722948.806:163): pid=2406 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401722948.807:164): pid=2406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401722948.854:165): pid=2406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401722948.863:166): pid=2408 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401722948.863:167): pid=2408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401722948.897:168): pid=2408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401723185.487:169): pid=2509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=2509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401723185.487:170): pid=2509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=2509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401723185.496:171): pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2509 suid=74 rport=40535 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401723185.496:172): pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2509 suid=74 rport=40535 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401723185.665:173): pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=40535 acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401723185.665:174): pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-dss size=1024 fp=02:88:7d:f7:9f:c4:13:b7:4f:c4:b0:65:ba:87:47:42 rport=40535 acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_ACCT msg=audit(1401723185.717:175): pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401723185.718:176): pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2509 suid=74 rport=40535 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401723185.718:177): pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="alitke" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1401723185.719:178): pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=LOGIN msg=audit(1401723185.720:179): pid=2508 uid=0 old-auid=4294967295 new-auid=1000 old-ses=4294967295 new-ses=2 res=1 >type=USER_ROLE_CHANGE msg=audit(1401723185.932:180): pid=2508 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_ACCT msg=audit(1401723185.950:181): pid=2511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting acct="alitke" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1401723185.951:182): pid=2511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="alitke" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_START msg=audit(1401723185.969:183): pid=2508 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401723185.969:184): pid=2508 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2508 suid=0 rport=40535 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401723185.969:185): pid=2515 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=2515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401723185.969:186): pid=2515 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=2515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRED_ACQ msg=audit(1401723185.970:187): pid=2515 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="alitke" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1401723185.975:188): pid=2508 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=/dev/pts/0 res=success' >type=USER_START msg=audit(1401723185.976:189): pid=2508 uid=0 auid=1000 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1401723186.117:190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="user@1000" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1401723218.348:191): pid=2566 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="alitke" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_ACCT msg=audit(1401723218.350:192): pid=2566 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="alitke" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401723218.350:193): pid=2566 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd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terminal=pts/0 res=success' >type=USER_START msg=audit(1401723218.351:194): pid=2566 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_START msg=audit(1401723219.167:195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="polkit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401723219.208:196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="packagekit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401723219.215:197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="packagekit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723229.447:198): pid=2594 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F756D6F756E74202D66202D6C202F726865762F646174612D63656E7465722F6D6E742F3139322E3136382E322E313A5F686F6D655F73746F726167655F69736F terminal=? res=success' >type=USER_START msg=audit(1401723229.448:199): pid=2594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723229.698:200): pid=2594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723229.705:201): pid=2597 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401723229.705:202): pid=2597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723229.729:203): pid=2597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723229.735:204): pid=2600 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401723229.735:205): pid=2600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723229.817:206): pid=2600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723229.838:207): pid=2619 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D722031202D75 terminal=? res=success' >type=USER_START msg=audit(1401723229.838:208): pid=2619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401723229.860:209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@253:3" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723230.358:210): pid=2619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723230.365:211): pid=2637 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401723230.366:212): pid=2637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723230.367:213): pid=2637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723230.373:214): pid=2639 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401723230.373:215): pid=2639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723230.381:216): pid=2639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401723253.134:217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="packagekit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723254.022:218): pid=2566 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401723257.713:219): pid=2666 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=73657276696365206C696276697274642072657374617274 terminal=pts/0 res=success' >type=USER_START msg=audit(1401723257.714:220): pid=2666 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_STOP msg=audit(1401723257.782:221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401723257.793:222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401723257.794:223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401723258.054:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723258.055:225): pid=2666 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401723258.061:226): pid=2710 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=73657276696365207664736D642072657374617274 terminal=pts/0 res=success' >type=USER_START msg=audit(1401723258.061:227): pid=2710 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=NETFILTER_CFG msg=audit(1401723258.439:228): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1401723258.439:228): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1401723258.439:228): arch=c000003e syscall=56 success=yes exit=2785 a0=6c020011 a1=7fbe0c1aad40 a2=0 a3=7fbe14f53240 items=0 ppid=1 pid=2708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_STOP msg=audit(1401723267.817:229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1401723268.672:230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723268.673:231): pid=2710 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401723268.805:232): pid=2862 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D706E7264475144 terminal=? res=success' >type=USER_START msg=audit(1401723268.806:233): pid=2862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723268.807:234): pid=2862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723268.838:235): pid=2881 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=USER_START msg=audit(1401723268.838:236): pid=2881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723268.846:237): pid=2881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723268.874:238): pid=2885 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401723268.874:239): pid=2885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723268.876:240): pid=2885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723268.881:241): pid=2887 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401723268.882:242): pid=2887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723268.922:243): pid=2887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723268.935:244): pid=2903 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723268.936:245): pid=2903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723268.950:246): pid=2903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723268.976:247): pid=2907 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D65 terminal=? res=success' >type=USER_START msg=audit(1401723268.976:248): pid=2907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723268.985:249): pid=2907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723269.001:250): pid=2910 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C7673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C76675F6E616D652C617474722C73697A652C7365675F73746172745F70652C646576696365732C74616773 terminal=? res=success' >type=USER_START msg=audit(1401723269.001:251): pid=2910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723269.009:252): pid=2910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723269.019:253): pid=2912 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723269.020:254): pid=2912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723269.026:255): pid=2912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723275.804:256): pid=2925 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6D6F756E74202D74206E6673202D6F20736F66742C6E6F736861726563616368652C74696D656F3D3630302C72657472616E733D362C6E6673766572733D33203139322E3136382E322E313A2F686F6D652F73746F726167652F69736F202F726865762F646174612D63656E7465722F6D6E742F3139322E3136382E322E313A5F686F6D655F73746F726167655F69736F terminal=? res=success' >type=USER_START msg=audit(1401723275.804:257): pid=2925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723275.828:258): pid=2925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723275.937:259): pid=2932 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401723275.937:260): pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723275.940:261): pid=2932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723275.946:262): pid=2934 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401723275.946:263): pid=2934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723276.458:264): pid=2934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723276.465:265): pid=2945 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6E206E6F64652E73746172747570202D76206D616E75616C202D2D6F703D757064617465 terminal=? res=success' >type=USER_START msg=audit(1401723276.465:266): pid=2945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723276.467:267): pid=2945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723276.473:268): pid=2947 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723276.473:269): pid=2947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723276.484:270): pid=2947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723276.506:271): pid=2951 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401723276.507:272): pid=2951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723276.528:273): pid=2951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723276.534:274): pid=2963 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401723276.535:275): pid=2963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401723276.594:276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="lvm2-pvscan@253:3" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723276.615:277): pid=2963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723276.625:278): pid=2994 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723276.625:279): pid=2994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723276.668:280): pid=2994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723276.680:281): pid=2997 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723276.680:282): pid=2997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723276.723:283): pid=2997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723276.731:284): pid=2999 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723276.731:285): pid=2999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723276.775:286): pid=2999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723276.791:287): pid=3005 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401723276.792:288): pid=3005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723276.796:289): pid=3006 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035313633376431663234323365346263353962623663613637387C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401723276.796:290): pid=3006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723276.826:291): pid=3005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723276.837:292): pid=3010 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723276.837:293): pid=3010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723276.840:294): pid=3006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723276.848:295): pid=3012 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723276.848:296): pid=3012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723276.962:297): pid=3010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1401723276.972:298): avc: denied { read } for pid=3016 comm="sanlock" name="253:6" dev="sysfs" ino=24193 scontext=system_u:system_r:sanlock_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file >type=SYSCALL msg=audit(1401723276.972:298): arch=c000003e syscall=2 success=no exit=-13 a0=7f0767354870 a1=80000 a2=7f0767354884 a3=0 items=0 ppid=1 pid=3016 auid=4294967295 uid=179 gid=179 euid=179 suid=179 fsuid=179 egid=179 sgid=179 fsgid=179 tty=(none) ses=4294967295 comm="sanlock" exe="/usr/sbin/sanlock" subj=system_u:system_r:sanlock_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1401723277.019:299): pid=3012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723327.648:300): pid=3057 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723327.648:301): pid=3057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723327.683:302): pid=3057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723327.693:303): pid=3059 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723327.693:304): pid=3059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723327.726:305): pid=3059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723327.733:306): pid=3061 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723327.733:307): pid=3061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723327.874:308): pid=3061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723327.882:309): pid=3073 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C7673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C76675F6E616D652C617474722C73697A652C7365675F73746172745F70652C646576696365732C746167732061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401723327.882:310): pid=3073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723327.916:311): pid=3073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1401723327.934:312): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="brewer-1" uuid=0290df28-42de-435a-a478-51003116d5c4 vm-ctx=system_u:system_r:svirt_t:s0:c182,c957 img-ctx=system_u:object_r:svirt_image_t:s0:c182,c957 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1401723327.934:313): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="brewer-1" uuid=0290df28-42de-435a-a478-51003116d5c4 vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1401723328.030:314): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1401723328.030:314): arch=c000003e syscall=16 success=yes exit=0 a0=1b a1=89a2 a2=7fbe1de94f70 a3=0 items=0 ppid=1 pid=2691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1401723328.045:315): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="brewer-1" uuid=0290df28-42de-435a-a478-51003116d5c4 net=00:1a:4a:3f:44:b4 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723328.181:316): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="brewer-1" uuid=0290df28-42de-435a-a478-51003116d5c4 net=00:1a:4a:3f:44:b4 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401723328.224:317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-machined" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723328.229:318): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="brewer-1" uuid=0290df28-42de-435a-a478-51003116d5c4 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d1.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723328.229:319): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="brewer-1" uuid=0290df28-42de-435a-a478-51003116d5c4 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d1.scope/" class=path path="/rhev/data-center/mnt/192.168.2.1:_home_storage_iso/e453999e-ec9f-420b-941c-a9f9cc4432bb/images/11111111-1111-1111-1111-111111111111/CorePlus-current.iso" rdev=? acl=r exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723328.229:320): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="brewer-1" uuid=0290df28-42de-435a-a478-51003116d5c4 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d1.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723328.507:321): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="brewer-1" uuid=0290df28-42de-435a-a478-51003116d5c4 old-disk="?" new-disk="/rhev/data-center/mnt/192.168.2.1:_home_storage_iso/e453999e-ec9f-420b-941c-a9f9cc4432bb/images/11111111-1111-1111-1111-111111111111/CorePlus-current.iso" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723328.507:322): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="brewer-1" uuid=0290df28-42de-435a-a478-51003116d5c4 old-disk="?" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/30199634-b61b-4a5e-b581-5f95bb6415f8/5f77d73e-0f97-4ff5-bc10-5e6732c4b3d9" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723328.507:323): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="brewer-1" uuid=0290df28-42de-435a-a478-51003116d5c4 old-net=? new-net=00:1a:4a:3f:44:b4 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723328.507:324): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="brewer-1" uuid=0290df28-42de-435a-a478-51003116d5c4 old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723328.507:325): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="brewer-1" uuid=0290df28-42de-435a-a478-51003116d5c4 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1401723328.507:326): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="brewer-1" uuid=0290df28-42de-435a-a478-51003116d5c4 vm-pid=3189 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723328.571:327): pid=3196 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723328.572:328): pid=3196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723328.608:329): pid=3196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723394.657:330): pid=3298 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723394.658:331): pid=3298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723394.695:332): pid=3298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723394.703:333): pid=3300 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723394.703:334): pid=3300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723394.857:335): pid=3300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723394.866:336): pid=3312 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723394.866:337): pid=3312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723394.903:338): pid=3312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723404.004:339): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=snapshot vm="brewer-1" uuid=0290df28-42de-435a-a478-51003116d5c4 old-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/30199634-b61b-4a5e-b581-5f95bb6415f8/5f77d73e-0f97-4ff5-bc10-5e6732c4b3d9" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/30199634-b61b-4a5e-b581-5f95bb6415f8/5bdd7104-871e-450e-8be5-a4ab2f2e3a69" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1401723407.151:340): avc: denied { read } for pid=3189 comm="qemu-system-x86" path="/dev/dm-25" dev="devtmpfs" ino=53652 scontext=system_u:system_r:svirt_t:s0:c182,c957 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401723407.151:340): arch=c000003e syscall=209 success=no exit=-13 a0=7febcd0ad000 a1=1 a2=7febd016aa90 a3=20 items=0 ppid=1 pid=3189 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c182,c957 key=(null) >type=USER_CMD msg=audit(1401723407.694:341): pid=3330 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723407.695:342): pid=3330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723407.730:343): pid=3330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723407.738:344): pid=3332 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723407.738:345): pid=3332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723407.886:346): pid=3332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723407.895:347): pid=3344 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723407.895:348): pid=3344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723407.930:349): pid=3344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723417.003:350): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=snapshot vm="brewer-1" uuid=0290df28-42de-435a-a478-51003116d5c4 old-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/30199634-b61b-4a5e-b581-5f95bb6415f8/5bdd7104-871e-450e-8be5-a4ab2f2e3a69" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/30199634-b61b-4a5e-b581-5f95bb6415f8/261c6f78-1ecc-4d6f-9af9-d47e897a7e21" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1401723515.267:351): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1401723515.468:352): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="brewer-1" uuid=0290df28-42de-435a-a478-51003116d5c4 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723515.715:353): pid=3482 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723515.716:354): pid=3482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723515.752:355): pid=3482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723515.760:356): pid=3484 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=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 terminal=? res=success' >type=USER_START msg=audit(1401723515.761:357): pid=3484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723515.804:358): pid=3484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723525.372:359): pid=3496 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723525.372:360): pid=3496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723525.406:361): pid=3496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723525.414:362): pid=3498 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723525.414:363): pid=3498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723525.554:364): pid=3498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723525.562:365): pid=3510 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723525.563:366): pid=3510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723525.597:367): pid=3510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1401723525.614:368): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba vm-ctx=system_u:system_r:svirt_t:s0:c437,c593 img-ctx=system_u:object_r:svirt_image_t:s0:c437,c593 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1401723525.614:369): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1401723525.676:370): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1401723525.676:370): arch=c000003e syscall=16 success=yes exit=0 a0=1b a1=89a2 a2=7fbe1e695f70 a3=0 items=0 ppid=1 pid=2690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1401723525.686:371): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba net=00:1a:4a:3f:44:b5 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723525.777:372): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba net=00:1a:4a:3f:44:b5 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723525.806:373): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d2.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723525.806:374): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d2.scope/" class=path path="/rhev/data-center/mnt/192.168.2.1:_home_storage_iso/e453999e-ec9f-420b-941c-a9f9cc4432bb/images/11111111-1111-1111-1111-111111111111/CorePlus-current.iso" rdev=? acl=r exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723525.806:375): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d2.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723526.031:376): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba old-disk="?" new-disk="/rhev/data-center/mnt/192.168.2.1:_home_storage_iso/e453999e-ec9f-420b-941c-a9f9cc4432bb/images/11111111-1111-1111-1111-111111111111/CorePlus-current.iso" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723526.031:377): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba old-disk="?" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/63884033-1e69-4afc-a482-e7bba80d8d09/50c08836-20c2-4a30-a093-4f3918653782" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723526.031:378): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba old-net=? new-net=00:1a:4a:3f:44:b5 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723526.031:379): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723526.031:380): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1401723526.032:381): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba vm-pid=3622 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723526.166:382): pid=3628 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723526.167:383): pid=3628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723526.205:384): pid=3628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723535.783:385): pid=3653 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723535.783:386): pid=3653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723535.818:387): pid=3653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723535.826:388): pid=3655 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723535.826:389): pid=3655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723535.976:390): pid=3655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723535.985:391): pid=3667 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C7673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C76675F6E616D652C617474722C73697A652C7365675F73746172745F70652C646576696365732C746167732061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401723535.985:392): pid=3667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723536.022:393): pid=3667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723546.005:394): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=snapshot vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba old-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/63884033-1e69-4afc-a482-e7bba80d8d09/50c08836-20c2-4a30-a093-4f3918653782" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/63884033-1e69-4afc-a482-e7bba80d8d09/2d9bc699-9025-4170-b357-d7b89f07ff2e" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1401723546.640:395): avc: denied { read } for pid=3622 comm="qemu-system-x86" path="/dev/dm-25" dev="devtmpfs" ino=55936 scontext=system_u:system_r:svirt_t:s0:c437,c593 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401723546.640:395): arch=c000003e syscall=209 success=no exit=-13 a0=7f5e507f7000 a1=1 a2=7f5e5288c6a0 a3=20 items=0 ppid=1 pid=3622 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c437,c593 key=(null) >type=USER_CMD msg=audit(1401723549.661:396): pid=3684 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723549.661:397): pid=3684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723549.757:398): pid=3684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723549.765:399): pid=3686 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723549.766:400): pid=3686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723549.908:401): pid=3686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723549.916:402): pid=3698 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723549.916:403): pid=3698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723549.952:404): pid=3698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401723558.061:405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="packagekit" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723559.004:406): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=snapshot vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba old-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/63884033-1e69-4afc-a482-e7bba80d8d09/2d9bc699-9025-4170-b357-d7b89f07ff2e" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/63884033-1e69-4afc-a482-e7bba80d8d09/4040a416-601e-4288-a83b-e96a5b683f49" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1401723568.513:407): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1401723568.696:408): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723568.709:409): pid=3781 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723568.709:410): pid=3781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723568.746:411): pid=3781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723568.754:412): pid=3783 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=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 terminal=? res=success' >type=USER_START msg=audit(1401723568.754:413): pid=3783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723568.822:414): pid=3783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723577.371:415): pid=3793 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723577.372:416): pid=3793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723577.416:417): pid=3793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723577.425:418): pid=3795 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723577.425:419): pid=3795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723577.459:420): pid=3795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723577.538:421): pid=3801 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723577.538:422): pid=3801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723577.572:423): pid=3801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723577.582:424): pid=3803 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723577.583:425): pid=3803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723577.617:426): pid=3803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723577.624:427): pid=3805 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C766368616E6765202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6175746F6261636B7570206E202D2D617661696C61626C6520792061323436333836622D663331642D343531642D623861362D3266346330646661323762342F34303430613431362D363031652D343238382D613833622D6539366135623638336634392061323436333836622D663331642D343531642D623861362D3266346330646661323762342F35306330383833362D323063322D346133302D613039332D3466333931383635333738322061323436333836622D663331642D343531642D623861362D3266346330646661323762342F32643962633639392D393032352D343137302D623335372D643762383966303766663265 terminal=? res=success' >type=USER_START msg=audit(1401723577.625:428): pid=3805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723577.804:429): pid=3805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723577.813:430): pid=3835 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723577.813:431): pid=3835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723577.848:432): pid=3835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1401723577.865:433): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba vm-ctx=system_u:system_r:svirt_t:s0:c213,c615 img-ctx=system_u:object_r:svirt_image_t:s0:c213,c615 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1401723577.865:434): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1401723577.917:435): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1401723577.917:435): arch=c000003e syscall=16 success=yes exit=0 a0=1b a1=89a2 a2=7fbe1ee96f70 a3=0 items=0 ppid=1 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1401723577.927:436): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba net=00:1a:4a:3f:44:b5 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723578.015:437): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba net=00:1a:4a:3f:44:b5 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723578.023:438): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d2.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723578.023:439): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d2.scope/" class=path path="/rhev/data-center/mnt/192.168.2.1:_home_storage_iso/e453999e-ec9f-420b-941c-a9f9cc4432bb/images/11111111-1111-1111-1111-111111111111/CorePlus-current.iso" rdev=? acl=r exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723578.023:440): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d2.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723578.245:441): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba old-disk="?" new-disk="/rhev/data-center/mnt/192.168.2.1:_home_storage_iso/e453999e-ec9f-420b-941c-a9f9cc4432bb/images/11111111-1111-1111-1111-111111111111/CorePlus-current.iso" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723578.245:442): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba old-disk="?" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/63884033-1e69-4afc-a482-e7bba80d8d09/50c08836-20c2-4a30-a093-4f3918653782" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723578.245:443): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba old-net=? new-net=00:1a:4a:3f:44:b5 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723578.245:444): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723578.245:445): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1401723578.245:446): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba vm-pid=3947 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723578.308:447): pid=3953 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C7673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C76675F6E616D652C617474722C73697A652C7365675F73746172745F70652C646576696365732C746167732061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401723578.308:448): pid=3953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723578.345:449): pid=3953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_ACCT msg=audit(1401723601.521:450): pid=3981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401723601.521:451): pid=3981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401723601.521:452): pid=3981 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=3 res=1 >type=USER_START msg=audit(1401723601.528:453): pid=3981 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401723601.528:454): pid=3981 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401723601.591:455): pid=3981 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401723601.592:456): pid=3981 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401723620.131:457): pid=4006 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723620.132:458): pid=4006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723620.169:459): pid=4006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723620.178:460): pid=4008 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C766368616E6765202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6175746F6261636B7570206E202D2D617661696C61626C6520792061323436333836622D663331642D343531642D623861362D3266346330646661323762342F31313636303530332D366235642D343064372D623932372D333764613636613934393463 terminal=? res=success' >type=USER_START msg=audit(1401723620.178:461): pid=4008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723620.329:462): pid=4008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723620.338:463): pid=4020 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723620.339:464): pid=4020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723620.375:465): pid=4020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723630.003:466): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=snapshot vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba old-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/63884033-1e69-4afc-a482-e7bba80d8d09/50c08836-20c2-4a30-a093-4f3918653782" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/63884033-1e69-4afc-a482-e7bba80d8d09/11660503-6b5d-40d7-b927-37da66a9494c" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723633.878:467): pid=4038 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723633.878:468): pid=4038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723633.914:469): pid=4038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723633.922:470): pid=4040 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723633.922:471): pid=4040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723634.066:472): pid=4040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723634.076:473): pid=4052 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723634.076:474): pid=4052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723634.112:475): pid=4052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401723644.003:476): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=snapshot vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba old-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/63884033-1e69-4afc-a482-e7bba80d8d09/11660503-6b5d-40d7-b927-37da66a9494c" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/63884033-1e69-4afc-a482-e7bba80d8d09/0fedf7f3-df26-484c-8b8a-1ca21c78a2a7" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_AUTH msg=audit(1401723657.473:477): pid=4075 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="alitke" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=failed' >type=USER_AUTH msg=audit(1401723659.339:478): pid=4075 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="alitke" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_ACCT msg=audit(1401723659.341:479): pid=4075 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="alitke" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401723659.341:480): pid=4075 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=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 terminal=pts/0 res=success' >type=USER_START msg=audit(1401723659.342:481): pid=4075 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401723667.925:482): pid=4075 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401723685.053:483): pid=4171 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=7669202F7661722F6C6F672F61756469742F61756469742E6C6F67 terminal=pts/0 res=success' >type=USER_START msg=audit(1401723685.053:484): pid=4171 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401723694.569:485): pid=4171 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401723704.509:486): pid=4188 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=7669202F7661722F6C6F672F61756469742F61756469742E6C6F67 terminal=pts/0 res=success' >type=USER_START msg=audit(1401723704.509:487): pid=4188 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401723859.136:488): pid=4188 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401723866.355:489): pid=4304 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=7461696C202F7661722F6C6F672F6D65737361676573 terminal=pts/0 res=success' >type=USER_START msg=audit(1401723866.355:490): pid=4304 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401723866.356:491): pid=4304 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401723878.014:492): pid=4315 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723878.015:493): pid=4315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723878.064:494): pid=4315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401723878.073:495): pid=4317 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401723878.073:496): pid=4317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401723878.110:497): pid=4317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724012.340:498): pid=4404 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=736574656E666F7263652030 terminal=pts/0 res=success' >type=USER_START msg=audit(1401724012.340:499): pid=4404 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=MAC_STATUS msg=audit(1401724012.360:500): enforcing=0 old_enforcing=1 auid=1000 ses=2 >type=SYSCALL msg=audit(1401724012.360:500): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffcdbcc1d0 a2=1 a3=0 items=0 ppid=4404 pid=4405 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1401724012.360:501): pid=4404 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=ANOM_PROMISCUOUS msg=audit(1401724018.610:502): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=USER_AVC msg=audit(1401724018.649:503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received setenforce notice (enforcing=0) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=VIRT_CONTROL msg=audit(1401724018.837:504): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="brewer-2" uuid=f1cb8a36-18ae-49fd-aaaa-6b3726ebdaba vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724018.849:505): pid=4473 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C7673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C76675F6E616D652C617474722C73697A652C7365675F73746172745F70652C646576696365732C746167732061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401724018.849:506): pid=4473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724018.886:507): pid=4473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724018.896:508): pid=4475 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C766368616E6765202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6175746F6261636B7570206E202D2D617661696C61626C65206E2061323436333836622D663331642D343531642D623861362D3266346330646661323762342F34303430613431362D363031652D343238382D613833622D6539366135623638336634392061323436333836622D663331642D343531642D623861362D3266346330646661323762342F31313636303530332D366235642D343064372D623932372D3337646136366139343934632061323436333836622D663331642D343531642D623861362D3266346330646661323762342F30666564663766332D646632362D343834632D386238612D3163613231633738613261372061323436333836622D663331642D343531642D623861362D3266346330646661323762342F35306330383833362D323063322D346133302D613039332D3466333931383635333738322061323436333836622D663331642D343531642D623861362D3266346330646661323762342F32643962633639392D393032352D343137302D623335372D643762383966303766663265 terminal=? res=success' >type=USER_START msg=audit(1401724018.896:509): pid=4475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724018.941:510): pid=4475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724026.040:511): pid=4488 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724026.042:512): pid=4488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724026.078:513): pid=4488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724026.086:514): pid=4490 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724026.086:515): pid=4490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724026.311:516): pid=4490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724026.320:517): pid=4502 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724026.320:518): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724026.355:519): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1401724026.372:520): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="brewer-3" uuid=1b98e089-a16c-439e-aec6-d5352b73bec3 vm-ctx=system_u:system_r:svirt_t:s0:c825,c905 img-ctx=system_u:object_r:svirt_image_t:s0:c825,c905 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1401724026.372:521): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="brewer-3" uuid=1b98e089-a16c-439e-aec6-d5352b73bec3 vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1401724026.428:522): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1401724026.428:522): arch=c000003e syscall=16 success=yes exit=0 a0=1b a1=89a2 a2=7fbe1ee96f70 a3=11 items=0 ppid=1 pid=2689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1401724026.438:523): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="brewer-3" uuid=1b98e089-a16c-439e-aec6-d5352b73bec3 net=00:1a:4a:3f:44:b2 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724026.531:524): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="brewer-3" uuid=1b98e089-a16c-439e-aec6-d5352b73bec3 net=00:1a:4a:3f:44:b2 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724026.559:525): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="brewer-3" uuid=1b98e089-a16c-439e-aec6-d5352b73bec3 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d3.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724026.559:526): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="brewer-3" uuid=1b98e089-a16c-439e-aec6-d5352b73bec3 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d3.scope/" class=path path="/rhev/data-center/mnt/192.168.2.1:_home_storage_iso/e453999e-ec9f-420b-941c-a9f9cc4432bb/images/11111111-1111-1111-1111-111111111111/CorePlus-current.iso" rdev=? acl=r exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724026.559:527): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="brewer-3" uuid=1b98e089-a16c-439e-aec6-d5352b73bec3 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d3.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724026.787:528): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="brewer-3" uuid=1b98e089-a16c-439e-aec6-d5352b73bec3 old-disk="?" new-disk="/rhev/data-center/mnt/192.168.2.1:_home_storage_iso/e453999e-ec9f-420b-941c-a9f9cc4432bb/images/11111111-1111-1111-1111-111111111111/CorePlus-current.iso" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724026.787:529): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="brewer-3" uuid=1b98e089-a16c-439e-aec6-d5352b73bec3 old-disk="?" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/399a9f84-1d33-4edb-8556-0c1b9bfbb292/8905d0aa-b580-4a1d-8f57-544371bfbcdb" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724026.787:530): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="brewer-3" uuid=1b98e089-a16c-439e-aec6-d5352b73bec3 old-net=? new-net=00:1a:4a:3f:44:b2 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724026.787:531): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="brewer-3" uuid=1b98e089-a16c-439e-aec6-d5352b73bec3 old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724026.787:532): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="brewer-3" uuid=1b98e089-a16c-439e-aec6-d5352b73bec3 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1401724026.787:533): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="brewer-3" uuid=1b98e089-a16c-439e-aec6-d5352b73bec3 vm-pid=4614 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724026.860:534): pid=4620 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724026.861:535): pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724026.896:536): pid=4620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724084.480:537): pid=4676 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724084.480:538): pid=4676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724084.516:539): pid=4676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724084.525:540): pid=4678 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C766368616E6765202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6175746F6261636B7570206E202D2D617661696C61626C6520792061323436333836622D663331642D343531642D623861362D3266346330646661323762342F30666238353566322D643566652D346430312D386630322D643231343166343535343331 terminal=? res=success' >type=USER_START msg=audit(1401724084.525:541): pid=4678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724084.673:542): pid=4678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724084.682:543): pid=4690 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C7673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C76675F6E616D652C617474722C73697A652C7365675F73746172745F70652C646576696365732C746167732061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401724084.683:544): pid=4690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724084.718:545): pid=4690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724094.005:546): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=snapshot vm="brewer-3" uuid=1b98e089-a16c-439e-aec6-d5352b73bec3 old-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/399a9f84-1d33-4edb-8556-0c1b9bfbb292/8905d0aa-b580-4a1d-8f57-544371bfbcdb" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/399a9f84-1d33-4edb-8556-0c1b9bfbb292/0fb855f2-d5fe-4d01-8f02-d2141f455431" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724097.678:547): pid=4706 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724097.678:548): pid=4706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724097.714:549): pid=4706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724097.723:550): pid=4708 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C766368616E6765202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6175746F6261636B7570206E202D2D617661696C61626C6520792061323436333836622D663331642D343531642D623861362D3266346330646661323762342F32306232636666352D323764632D343665362D393938312D373237396165626164646561 terminal=? res=success' >type=USER_START msg=audit(1401724097.723:551): pid=4708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724097.867:552): pid=4708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724097.876:553): pid=4722 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C7673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C76675F6E616D652C617474722C73697A652C7365675F73746172745F70652C646576696365732C746167732061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401724097.877:554): pid=4722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724097.912:555): pid=4722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1401724101.545:556): avc: denied { read } for pid=4614 comm="qemu-system-x86" path="/dev/dm-25" dev="devtmpfs" ino=83983 scontext=system_u:system_r:svirt_t:s0:c825,c905 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401724101.545:556): arch=c000003e syscall=209 success=yes exit=1 a0=7fce464ce000 a1=1 a2=7fce4961d500 a3=0 items=0 ppid=1 pid=4614 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c825,c905 key=(null) >type=VIRT_RESOURCE msg=audit(1401724107.002:557): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=snapshot vm="brewer-3" uuid=1b98e089-a16c-439e-aec6-d5352b73bec3 old-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/399a9f84-1d33-4edb-8556-0c1b9bfbb292/0fb855f2-d5fe-4d01-8f02-d2141f455431" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/399a9f84-1d33-4edb-8556-0c1b9bfbb292/20b2cff5-27dc-46e6-9981-7279aebaddea" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724119.086:558): pid=4743 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=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 terminal=pts/0 res=success' >type=USER_START msg=audit(1401724119.087:559): pid=4743 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=AVC msg=audit(1401724124.793:560): avc: denied { read } for pid=4614 comm="qemu-system-x86" path="/dev/dm-26" dev="devtmpfs" ino=80202 scontext=system_u:system_r:svirt_t:s0:c825,c905 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401724124.793:560): arch=c000003e syscall=209 success=yes exit=1 a0=7fce464c3000 a1=1 a2=7fce4961d710 a3=0 items=0 ppid=1 pid=4614 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c825,c905 key=(null) >type=USER_END msg=audit(1401724124.795:561): pid=4743 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=ANOM_PROMISCUOUS msg=audit(1401724156.272:562): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1401724156.499:563): pid=2684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="brewer-3" uuid=1b98e089-a16c-439e-aec6-d5352b73bec3 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724156.510:564): pid=4832 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C7673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C76675F6E616D652C617474722C73697A652C7365675F73746172745F70652C646576696365732C746167732061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401724156.510:565): pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724156.549:566): pid=4832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724156.557:567): pid=4834 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=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 terminal=? res=success' >type=USER_START msg=audit(1401724156.557:568): pid=4834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724156.599:569): pid=4834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724164.731:570): pid=4844 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=73657276696365206C696276697274642072657374617274 terminal=pts/0 res=success' >type=USER_START msg=audit(1401724164.733:571): pid=4844 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=SERVICE_STOP msg=audit(1401724164.763:572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_STOP msg=audit(1401724164.773:573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401724164.773:574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="supervdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=SERVICE_START msg=audit(1401724165.052:575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="libvirtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724165.054:576): pid=4844 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401724165.060:577): pid=4889 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=73657276696365207664736D642072657374617274 terminal=pts/0 res=success' >type=USER_START msg=audit(1401724165.060:578): pid=4889 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=NETFILTER_CFG msg=audit(1401724165.456:579): table=filter family=2 entries=0 >type=NETFILTER_CFG msg=audit(1401724165.456:579): table=filter family=10 entries=0 >type=SYSCALL msg=audit(1401724165.456:579): arch=c000003e syscall=56 success=yes exit=4963 a0=6c020011 a1=7f8f281adf50 a2=0 a3=7f8f319d0240 items=0 ppid=1 pid=4886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=SERVICE_STOP msg=audit(1401724174.799:580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' >type=SERVICE_START msg=audit(1401724175.899:581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="vdsmd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724175.901:582): pid=4889 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401724176.033:583): pid=5046 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F63686F776E207664736D3A71656D75202F746D702F746D70743166314B5F terminal=? res=success' >type=USER_START msg=audit(1401724176.035:584): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724176.036:585): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724176.066:586): pid=5065 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D2064756D70636F6E66696720676C6F62616C2F6C6F636B696E675F74797065 terminal=? res=success' >type=USER_START msg=audit(1401724176.066:587): pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724176.074:588): pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724176.102:589): pid=5069 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401724176.102:590): pid=5069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724176.126:591): pid=5069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724176.147:592): pid=5073 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401724176.147:593): pid=5073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724176.223:594): pid=5073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724176.253:595): pid=5104 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724176.253:596): pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724176.315:597): pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724176.322:598): pid=5108 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035313633376431663234323365346263353962623663613637387C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D65 terminal=? res=success' >type=USER_START msg=audit(1401724176.323:599): pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724176.377:600): pid=5108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724176.384:601): pid=5110 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724176.384:602): pid=5110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724176.440:603): pid=5110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724176.447:604): pid=5112 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C766368616E6765202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6175746F6261636B7570206E202D2D617661696C61626C65206E2061323436333836622D663331642D343531642D623861362D3266346330646661323762342F63613533306536642D643233312D343165622D386534392D6632373536326435666164382061323436333836622D663331642D343531642D623861362D3266346330646661323762342F39663538356539352D383462622D343737622D616638612D6236643732363633356635362061323436333836622D663331642D343531642D623861362D3266346330646661323762342F35366634643735362D346163332D343437372D623738362D643733306165643965353931 terminal=? res=success' >type=USER_START msg=audit(1401724176.448:605): pid=5112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724176.490:606): pid=5112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724176.497:607): pid=5118 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=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 terminal=? res=success' >type=USER_START msg=audit(1401724176.498:608): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724176.785:609): pid=5118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724179.373:610): pid=5154 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D2D6F703D6E6577 terminal=? res=success' >type=USER_START msg=audit(1401724179.373:611): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724179.375:612): pid=5154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724179.382:613): pid=5156 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6C terminal=? res=success' >type=USER_START msg=audit(1401724179.382:614): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724179.384:615): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724179.390:616): pid=5158 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D206E6F6465202D542069716E2E323030332D30312E6F72672E6C696E75782D69736373692E6272657765722E78383636343A736E2E396238333639613335303261202D492064656661756C74202D70203139322E3136382E322E313A333236302C31202D6E206E6F64652E73746172747570202D76206D616E75616C202D2D6F703D757064617465 terminal=? res=success' >type=USER_START msg=audit(1401724179.390:617): pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724179.392:618): pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724179.410:619): pid=5160 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F697363736961646D202D6D2073657373696F6E202D52 terminal=? res=success' >type=USER_START msg=audit(1401724179.410:620): pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724179.432:621): pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724179.438:622): pid=5163 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6D756C746970617468202D72 terminal=? res=success' >type=USER_START msg=audit(1401724179.439:623): pid=5163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724179.486:624): pid=5163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724179.497:625): pid=5180 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724179.497:626): pid=5180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724179.611:627): pid=5180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724179.624:628): pid=5183 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724179.624:629): pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724179.670:630): pid=5183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724179.679:631): pid=5185 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724179.679:632): pid=5185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724179.724:633): pid=5185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724179.740:634): pid=5191 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401724179.740:635): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724179.747:636): pid=5193 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724179.748:637): pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724179.776:638): pid=5191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724179.789:639): pid=5196 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035313633376431663234323365346263353962623663613637387C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401724179.790:640): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724179.798:641): pid=5193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724179.808:642): pid=5198 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724179.808:643): pid=5198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724179.835:644): pid=5196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1401724179.845:645): avc: denied { read } for pid=5203 comm="sanlock" name="253:6" dev="sysfs" ino=24193 scontext=system_u:system_r:sanlock_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file >type=AVC msg=audit(1401724179.845:645): avc: denied { read } for pid=5203 comm="sanlock" name="dm-6" dev="sysfs" ino=24190 scontext=system_u:system_r:sanlock_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir >type=SYSCALL msg=audit(1401724179.845:645): arch=c000003e syscall=2 success=yes exit=11 a0=7f0767354870 a1=80000 a2=7f0767354884 a3=0 items=0 ppid=1 pid=5203 auid=4294967295 uid=179 gid=179 euid=179 suid=179 fsuid=179 egid=179 sgid=179 fsgid=179 tty=(none) ses=4294967295 comm="sanlock" exe="/usr/sbin/sanlock" subj=system_u:system_r:sanlock_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1401724179.846:646): avc: denied { read } for pid=5203 comm="sanlock" name="uuid" dev="sysfs" ino=24251 scontext=system_u:system_r:sanlock_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysfs_t:s0 tclass=file >type=AVC msg=audit(1401724179.846:646): avc: denied { open } for pid=5203 comm="sanlock" path="/sys/devices/virtual/block/dm-6/dm/uuid" dev="sysfs" ino=24251 scontext=system_u:system_r:sanlock_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysfs_t:s0 tclass=file >type=SYSCALL msg=audit(1401724179.846:646): arch=c000003e syscall=257 success=yes exit=12 a0=b a1=7f0769f70080 a2=80000 a3=0 items=0 ppid=1 pid=5203 auid=4294967295 uid=179 gid=179 euid=179 suid=179 fsuid=179 egid=179 sgid=179 fsgid=179 tty=(none) ses=4294967295 comm="sanlock" exe="/usr/sbin/sanlock" subj=system_u:system_r:sanlock_t:s0-s0:c0.c1023 key=(null) >type=AVC msg=audit(1401724179.846:647): avc: denied { getattr } for pid=5203 comm="sanlock" path="/sys/devices/virtual/block/dm-6/dm/uuid" dev="sysfs" ino=24251 scontext=system_u:system_r:sanlock_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysfs_t:s0 tclass=file >type=SYSCALL msg=audit(1401724179.846:647): arch=c000003e syscall=5 success=yes exit=0 a0=c a1=7f07673551a0 a2=7f07673551a0 a3=7f0767355160 items=0 ppid=1 pid=5203 auid=4294967295 uid=179 gid=179 euid=179 suid=179 fsuid=179 egid=179 sgid=179 fsgid=179 tty=(none) ses=4294967295 comm="sanlock" exe="/usr/sbin/sanlock" subj=system_u:system_r:sanlock_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1401724179.896:648): pid=5198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724194.335:649): pid=5226 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C7673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C76675F6E616D652C617474722C73697A652C7365675F73746172745F70652C646576696365732C746167732061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401724194.335:650): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724194.371:651): pid=5226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724194.380:652): pid=5228 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724194.381:653): pid=5228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724194.480:654): pid=5228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724194.488:655): pid=5230 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C766368616E6765202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6175746F6261636B7570206E202D2D617661696C61626C6520792061323436333836622D663331642D343531642D623861362D3266346330646661323762342F66366662613730372D633032382D346239382D623036352D6634373033646361313063642061323436333836622D663331642D343531642D623861362D3266346330646661323762342F35366634643735362D346163332D343437372D623738362D643733306165643965353931 terminal=? res=success' >type=USER_START msg=audit(1401724194.488:656): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724194.646:657): pid=5230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724194.654:658): pid=5252 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C7673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C76675F6E616D652C617474722C73697A652C7365675F73746172745F70652C646576696365732C746167732061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401724194.654:659): pid=5252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724194.691:660): pid=5252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1401724194.709:661): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="brewer-4" uuid=4366c3e1-1f68-4341-8cb8-5133e3e96796 vm-ctx=system_u:system_r:svirt_t:s0:c166,c273 img-ctx=system_u:object_r:svirt_image_t:s0:c166,c273 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1401724194.709:662): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="brewer-4" uuid=4366c3e1-1f68-4341-8cb8-5133e3e96796 vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1401724194.764:663): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1401724194.764:663): arch=c000003e syscall=16 success=yes exit=0 a0=1b a1=89a2 a2=7f8f3b112f70 a3=11 items=0 ppid=1 pid=4868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1401724194.774:664): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="brewer-4" uuid=4366c3e1-1f68-4341-8cb8-5133e3e96796 net=00:1a:4a:3f:44:b3 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724194.862:665): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="brewer-4" uuid=4366c3e1-1f68-4341-8cb8-5133e3e96796 net=00:1a:4a:3f:44:b3 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724194.882:666): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="brewer-4" uuid=4366c3e1-1f68-4341-8cb8-5133e3e96796 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d4.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724194.882:667): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="brewer-4" uuid=4366c3e1-1f68-4341-8cb8-5133e3e96796 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d4.scope/" class=path path="/rhev/data-center/mnt/192.168.2.1:_home_storage_iso/e453999e-ec9f-420b-941c-a9f9cc4432bb/images/11111111-1111-1111-1111-111111111111/CorePlus-current.iso" rdev=? acl=r exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724194.883:668): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="brewer-4" uuid=4366c3e1-1f68-4341-8cb8-5133e3e96796 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d4.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724195.104:669): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="brewer-4" uuid=4366c3e1-1f68-4341-8cb8-5133e3e96796 old-disk="?" new-disk="/rhev/data-center/mnt/192.168.2.1:_home_storage_iso/e453999e-ec9f-420b-941c-a9f9cc4432bb/images/11111111-1111-1111-1111-111111111111/CorePlus-current.iso" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724195.104:670): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="brewer-4" uuid=4366c3e1-1f68-4341-8cb8-5133e3e96796 old-disk="?" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/f6e16fd9-d6ab-4c27-b1af-145dfbaf6a28/f6fba707-c028-4b98-b065-f4703dca10cd" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724195.104:671): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="brewer-4" uuid=4366c3e1-1f68-4341-8cb8-5133e3e96796 old-net=? new-net=00:1a:4a:3f:44:b3 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724195.104:672): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="brewer-4" uuid=4366c3e1-1f68-4341-8cb8-5133e3e96796 old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724195.104:673): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="brewer-4" uuid=4366c3e1-1f68-4341-8cb8-5133e3e96796 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1401724195.104:674): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="brewer-4" uuid=4366c3e1-1f68-4341-8cb8-5133e3e96796 vm-pid=5364 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724195.166:675): pid=5370 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724195.166:676): pid=5370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724195.203:677): pid=5370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724203.264:678): pid=5395 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C7673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C76675F6E616D652C617474722C73697A652C7365675F73746172745F70652C646576696365732C746167732061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401724203.265:679): pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724203.299:680): pid=5395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724203.307:681): pid=5397 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C766368616E6765202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6175746F6261636B7570206E202D2D617661696C61626C6520792061323436333836622D663331642D343531642D623861362D3266346330646661323762342F65346561353162652D306231662D343636612D386531362D623739636630333031353830 terminal=? res=success' >type=USER_START msg=audit(1401724203.308:682): pid=5397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724203.457:683): pid=5397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724203.466:684): pid=5409 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724203.466:685): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724203.502:686): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724213.005:687): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=snapshot vm="brewer-4" uuid=4366c3e1-1f68-4341-8cb8-5133e3e96796 old-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/f6e16fd9-d6ab-4c27-b1af-145dfbaf6a28/f6fba707-c028-4b98-b065-f4703dca10cd" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/f6e16fd9-d6ab-4c27-b1af-145dfbaf6a28/e4ea51be-0b1f-466a-8e16-b79cf0301580" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=AVC msg=audit(1401724213.736:688): avc: denied { read } for pid=5364 comm="qemu-system-x86" path="/dev/dm-12" dev="devtmpfs" ino=91464 scontext=system_u:system_r:svirt_t:s0:c166,c273 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401724213.736:688): arch=c000003e syscall=209 success=yes exit=1 a0=7fe5cb834000 a1=1 a2=7fe5ce4d6060 a3=20 items=0 ppid=1 pid=5364 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c166,c273 key=(null) >type=USER_CMD msg=audit(1401724216.590:689): pid=5426 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724216.591:690): pid=5426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724216.626:691): pid=5426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724216.634:692): pid=5428 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724216.635:693): pid=5428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724216.776:694): pid=5428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724216.785:695): pid=5440 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724216.785:696): pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724216.820:697): pid=5440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724226.002:698): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=snapshot vm="brewer-4" uuid=4366c3e1-1f68-4341-8cb8-5133e3e96796 old-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/f6e16fd9-d6ab-4c27-b1af-145dfbaf6a28/e4ea51be-0b1f-466a-8e16-b79cf0301580" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/f6e16fd9-d6ab-4c27-b1af-145dfbaf6a28/aab0b94f-b569-4f76-b91b-65dd46add6a5" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724237.342:699): pid=5460 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=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 terminal=pts/0 res=success' >type=USER_START msg=audit(1401724237.343:700): pid=5460 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=AVC msg=audit(1401724243.864:701): avc: denied { read } for pid=5364 comm="qemu-system-x86" path="/dev/dm-18" dev="devtmpfs" ino=91807 scontext=system_u:system_r:svirt_t:s0:c166,c273 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file >type=SYSCALL msg=audit(1401724243.864:701): arch=c000003e syscall=209 success=yes exit=1 a0=7fe5cb829000 a1=1 a2=7fe5ce4d6270 a3=20 items=0 ppid=1 pid=5364 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c166,c273 key=(null) >type=USER_END msg=audit(1401724243.865:702): pid=5460 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=ANOM_PROMISCUOUS msg=audit(1401724251.090:703): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1401724251.282:704): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="brewer-4" uuid=4366c3e1-1f68-4341-8cb8-5133e3e96796 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724251.293:705): pid=5533 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724251.293:706): pid=5533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724251.331:707): pid=5533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724251.340:708): pid=5535 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=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 terminal=? res=success' >type=USER_START msg=audit(1401724251.340:709): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724251.382:710): pid=5535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724307.013:711): pid=5565 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=736574656E666F7263652031 terminal=pts/0 res=success' >type=USER_START msg=audit(1401724307.014:712): pid=5565 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=MAC_STATUS msg=audit(1401724307.015:713): enforcing=1 old_enforcing=0 auid=1000 ses=2 >type=SYSCALL msg=audit(1401724307.015:713): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff6ce34f40 a2=1 a3=0 items=0 ppid=5565 pid=5566 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="setenforce" exe="/usr/sbin/setenforce" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null) >type=USER_END msg=audit(1401724307.037:714): pid=5565 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401724327.708:715): pid=5577 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C7673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C76675F6E616D652C617474722C73697A652C7365675F73746172745F70652C646576696365732C746167732061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401724327.710:716): pid=5577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724327.749:717): pid=5577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724327.757:718): pid=5579 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724327.757:719): pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724327.905:720): pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724327.913:721): pid=5591 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724327.913:722): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724327.949:723): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1401724327.967:724): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="brewer-5" uuid=ec0c3850-1297-472f-870e-05c58a969c35 vm-ctx=system_u:system_r:svirt_t:s0:c40,c173 img-ctx=system_u:object_r:svirt_image_t:s0:c40,c173 model=selinux exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_MACHINE_ID msg=audit(1401724327.967:725): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm vm="brewer-5" uuid=ec0c3850-1297-472f-870e-05c58a969c35 vm-ctx=107:107 img-ctx=107:107 model=dac exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=ANOM_PROMISCUOUS msg=audit(1401724328.025:726): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 >type=SYSCALL msg=audit(1401724328.025:726): arch=c000003e syscall=16 success=yes exit=0 a0=1b a1=89a2 a2=7f8f3c114f70 a3=0 items=0 ppid=1 pid=4866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) >type=VIRT_RESOURCE msg=audit(1401724328.035:727): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="brewer-5" uuid=ec0c3850-1297-472f-870e-05c58a969c35 net=00:1a:4a:3f:44:b8 path="/dev/net/tun" rdev=0A:C8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724328.124:728): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=open vm="brewer-5" uuid=ec0c3850-1297-472f-870e-05c58a969c35 net=00:1a:4a:3f:44:b8 path="/dev/vhost-net" rdev=0A:EE exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_AVC msg=audit(1401724328.130:729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: received setenforce notice (enforcing=1) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' >type=VIRT_RESOURCE msg=audit(1401724328.135:730): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=deny vm="brewer-5" uuid=ec0c3850-1297-472f-870e-05c58a969c35 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d5.scope/" class=all exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724328.135:731): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="brewer-5" uuid=ec0c3850-1297-472f-870e-05c58a969c35 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d5.scope/" class=path path="/rhev/data-center/mnt/192.168.2.1:_home_storage_iso/e453999e-ec9f-420b-941c-a9f9cc4432bb/images/11111111-1111-1111-1111-111111111111/CorePlus-current.iso" rdev=? acl=r exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724328.136:732): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=cgroup reason=allow vm="brewer-5" uuid=ec0c3850-1297-472f-870e-05c58a969c35 cgroup="/sys/fs/cgroup/devices/machine.slice/machine-qemu\x2dbrewer\x2d5.scope/" class=major category=pty maj=88 acl=rw exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724328.364:733): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="brewer-5" uuid=ec0c3850-1297-472f-870e-05c58a969c35 old-disk="?" new-disk="/rhev/data-center/mnt/192.168.2.1:_home_storage_iso/e453999e-ec9f-420b-941c-a9f9cc4432bb/images/11111111-1111-1111-1111-111111111111/CorePlus-current.iso" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724328.364:734): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=start vm="brewer-5" uuid=ec0c3850-1297-472f-870e-05c58a969c35 old-disk="?" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/fadce9f0-3e25-44fc-adeb-4ba843ff2f7a/af6c4257-30af-49e3-908b-c188d2c42ec2" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724328.364:735): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=net reason=start vm="brewer-5" uuid=ec0c3850-1297-472f-870e-05c58a969c35 old-net=? new-net=00:1a:4a:3f:44:b8 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724328.364:736): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=mem reason=start vm="brewer-5" uuid=ec0c3850-1297-472f-870e-05c58a969c35 old-mem=0 new-mem=262144 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724328.364:737): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=vcpu reason=start vm="brewer-5" uuid=ec0c3850-1297-472f-870e-05c58a969c35 old-vcpu=0 new-vcpu=1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=VIRT_CONTROL msg=audit(1401724328.364:738): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=start reason=booted vm="brewer-5" uuid=ec0c3850-1297-472f-870e-05c58a969c35 vm-pid=5703 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724328.426:739): pid=5709 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724328.426:740): pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724328.464:741): pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724421.090:742): pid=5788 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724421.091:743): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724421.130:744): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724421.138:745): pid=5790 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724421.138:746): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724421.292:747): pid=5790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724421.302:748): pid=5802 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724421.302:749): pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724421.339:750): pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724431.005:751): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=snapshot vm="brewer-5" uuid=ec0c3850-1297-472f-870e-05c58a969c35 old-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/fadce9f0-3e25-44fc-adeb-4ba843ff2f7a/af6c4257-30af-49e3-908b-c188d2c42ec2" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/fadce9f0-3e25-44fc-adeb-4ba843ff2f7a/69ee0775-72f7-4613-b2b8-cd3896506910" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724434.656:752): pid=5820 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724434.656:753): pid=5820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724434.693:754): pid=5820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724434.702:755): pid=5822 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C766368616E6765202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6175746F6261636B7570206E202D2D617661696C61626C6520792061323436333836622D663331642D343531642D623861362D3266346330646661323762342F34633832303031652D646232332D343130322D623662322D356637343666303732373736 terminal=? res=success' >type=USER_START msg=audit(1401724434.702:756): pid=5822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724434.849:757): pid=5822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724434.858:758): pid=5834 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724434.858:759): pid=5834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724434.895:760): pid=5834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=VIRT_RESOURCE msg=audit(1401724444.003:761): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm resrc=disk reason=snapshot vm="brewer-5" uuid=ec0c3850-1297-472f-870e-05c58a969c35 old-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/fadce9f0-3e25-44fc-adeb-4ba843ff2f7a/69ee0775-72f7-4613-b2b8-cd3896506910" new-disk="/rhev/data-center/mnt/blockSD/a246386b-f31d-451d-b8a6-2f4c0dfa27b4/images/fadce9f0-3e25-44fc-adeb-4ba843ff2f7a/4c82001e-db23-4102-b6b2-5f746f072776" exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724452.901:762): pid=5855 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=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 terminal=pts/0 res=success' >type=USER_START msg=audit(1401724452.902:763): pid=5855 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401724458.674:764): pid=5855 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=ANOM_PROMISCUOUS msg=audit(1401724466.165:765): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 >type=VIRT_CONTROL msg=audit(1401724466.387:766): pid=4862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 msg='virt=kvm op=stop reason=destroyed vm="brewer-5" uuid=ec0c3850-1297-472f-870e-05c58a969c35 vm-pid=-1 exe="/usr/sbin/libvirtd" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724466.397:767): pid=5923 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D206C7673202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C76675F6E616D652C617474722C73697A652C7365675F73746172745F70652C646576696365732C746167732061323436333836622D663331642D343531642D623861362D326634633064666132376234 terminal=? res=success' >type=USER_START msg=audit(1401724466.398:768): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724466.436:769): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724466.445:770): pid=5925 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=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 terminal=? res=success' >type=USER_START msg=audit(1401724466.445:771): pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724466.488:772): pid=5925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724480.389:773): pid=5938 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724480.389:774): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724480.434:775): pid=5938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724480.442:776): pid=5942 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd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terminal=? res=success' >type=USER_START msg=audit(1401724480.442:777): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_END msg=audit(1401724480.477:778): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' >type=USER_CMD msg=audit(1401724491.147:779): pid=5960 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=677265702035373033202F7661722F6C6F672F61756469742F61756469742E6C6F67 terminal=pts/0 res=success' >type=USER_START msg=audit(1401724491.148:780): pid=5960 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401724491.151:781): pid=5960 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_ACCT msg=audit(1401724501.604:782): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_ACQ msg=audit(1401724501.604:783): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=LOGIN msg=audit(1401724501.605:784): pid=5966 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=4 res=1 >type=USER_START msg=audit(1401724501.612:785): pid=5966 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_REFR msg=audit(1401724501.613:786): pid=5966 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=CRED_DISP msg=audit(1401724501.647:787): pid=5966 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_END msg=audit(1401724501.647:788): pid=5966 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' >type=USER_CMD msg=audit(1401724511.217:789): pid=5975 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=677265702034383632202F7661722F6C6F672F61756469742F61756469742E6C6F67 terminal=pts/0 res=success' >type=USER_START msg=audit(1401724511.218:790): pid=5975 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401724511.221:791): pid=5975 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401724513.224:792): pid=5978 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=677265702034383632202F7661722F6C6F672F61756469742F61756469742E6C6F67 terminal=pts/0 res=success' >type=USER_START msg=audit(1401724513.224:793): pid=5978 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401724513.228:794): pid=5978 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401724518.639:795): pid=5982 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=677265702034383632202F7661722F6C6F672F61756469742F61756469742E6C6F67 terminal=pts/0 res=success' >type=USER_START msg=audit(1401724518.639:796): pid=5982 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401724518.643:797): pid=5982 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_CMD msg=audit(1401724566.609:798): pid=6004 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke/rpmbuild/RPMS/x86_64" cmd=677265702034383632202F7661722F6C6F672F61756469742F61756469742E6C6F67 terminal=pts/0 res=success' >type=USER_START msg=audit(1401724566.609:799): pid=6004 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=USER_END msg=audit(1401724566.613:800): pid=6004 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' >type=CRYPTO_KEY_USER msg=audit(1401724587.973:801): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=6019 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401724587.973:802): pid=6019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=6019 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401724587.974:803): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6019 suid=74 rport=40790 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_SESSION msg=audit(1401724587.974:804): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=6019 suid=74 rport=40790 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401724588.062:805): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1401724588.063:806): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1401724588.064:807): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=ssh res=failed' >type=USER_AUTH msg=audit(1401724590.378:808): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_ACCT msg=audit(1401724590.380:809): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401724590.381:810): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6019 suid=74 rport=40790 laddr=192.168.2.101 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=USER_AUTH msg=audit(1401724590.382:811): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=ssh res=success' >type=CRED_ACQ msg=audit(1401724590.383:812): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=LOGIN msg=audit(1401724590.383:813): pid=6018 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=5 res=1 >type=USER_ROLE_CHANGE msg=audit(1401724590.423:814): pid=6018 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_START msg=audit(1401724590.461:815): pid=6018 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_LOGIN msg=audit(1401724590.464:816): pid=6018 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=USER_START msg=audit(1401724590.465:817): pid=6018 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success' >type=CRYPTO_KEY_USER msg=audit(1401724590.466:818): pid=6022 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=7a:d0:93:d6:01:fa:65:73:c8:98:cf:d8:d8:79:25:46 direction=? spid=6022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRYPTO_KEY_USER msg=audit(1401724590.466:819): pid=6022 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=44:50:81:6b:df:d7:2f:59:1d:85:af:b7:cc:ec:85:88 direction=? spid=6022 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.2.1 terminal=? res=success' >type=CRED_REFR msg=audit(1401724590.468:820): pid=6022 uid=0 auid=0 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=brewer addr=192.168.2.1 terminal=ssh res=success'
<b>You cannot view the attachment while viewing its details because your browser does not support IFRAMEs. <a href="attachment.cgi?id=901490">View the attachment on a separate page</a>.</b>
View Attachment As Raw
Actions:
View
Attachments on
bug 1102881
:
900481
|
900482
|
900483
|
900484
|
900523
|
901471
|
901490
|
922603
|
922604
|
922606
|
922607
|
923330