Attachment 923035 Details for Bug 1125442 – audit.log

audit.log

audit-sshkeygen.log (text/x-log), 93.18 KB, created by Richard Su on 2014-07-31 21:32:03 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Richard Su

Created: 2014-07-31 21:32:03 UTC

Size: 93.18 KB

patch

obsolete

>type=DAEMON_START msg=audit(1400542512.759:5260): auditd start, ver=2.3.6 format=raw kernel=3.14.4-200.fc20.i686+PAE auid=4294967295 pid=258 subj=system_u:system_r:kernel_t:s0 res=success
>type=MAC_STATUS msg=audit(1400542512.793:6): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295
>type=FS_RELABEL msg=audit(1400542554.781:7): pid=734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=mass relabel exe="/usr/sbin/setfiles" hostname=? addr=? terminal=console res=success'
>type=USER_AVC msg=audit(1400542554.796:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc:  received setenforce notice (enforcing=0)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>type=DAEMON_END msg=audit(1400542554.815:5261): auditd normal halt, sending auid=0 pid=1 subj=system_u:system_r:init_t:s0 res=success
>type=DAEMON_START msg=audit(1400542562.659:3295): auditd start, ver=2.3.6 format=raw kernel=3.14.4-200.fc20.i686+PAE auid=4294967295 pid=250 subj=system_u:system_r:auditd_t:s0 res=success
>type=SERVICE_START msg=audit(1400542562.762:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542562.971:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542562.994:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="ipmievd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
>type=SERVICE_START msg=audit(1400542563.018:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542563.044:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542563.053:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542563.109:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542563.478:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openvswitch-nonetwork" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542564.057:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-hostnamed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=ADD_GROUP msg=audit(1400542564.134:15): pid=495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding group acct="fedora" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=ADD_USER msg=audit(1400542564.145:16): pid=495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user id=1001 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=ADD_USER msg=audit(1400542564.145:17): pid=495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user to group acct="fedora" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=ADD_USER msg=audit(1400542564.146:18): pid=495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user to group acct="fedora" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=ADD_USER msg=audit(1400542564.146:19): pid=495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user to group acct="fedora" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=ADD_USER msg=audit(1400542564.147:20): pid=495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user to shadow group acct="fedora" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=ADD_USER msg=audit(1400542564.148:21): pid=495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user to shadow group acct="fedora" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=ADD_USER msg=audit(1400542564.148:22): pid=495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding user to shadow group acct="fedora" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=ADD_USER msg=audit(1400542564.157:23): pid=495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cloud_init_t:s0 msg='op=adding home directory id=1001 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'
>type=USER_CHAUTHTOK msg=audit(1400542564.201:24): pid=500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:passwd_t:s0 msg='op=lock password id=1001 exe="/usr/bin/passwd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542564.268:25): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-init-local" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542568.551:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542568.575:27): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openvswitch" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542568.598:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="xinetd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542568.999:29): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-init" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542569.096:30): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542569.340:31): pid=631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=75:17:1d:23:4b:37:67:38:bc:55:46:57:f9:73:70:2a direction=? spid=631 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542569.341:32): pid=631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=3a:89:ff:17:54:9e:6f:c5:27:bd:6d:aa:f9:2c:8c:a3 direction=? spid=631 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542569.343:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542569.358:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542569.423:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-config" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542569.722:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="cloud-final" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542569.722:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="os-collect-config" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542569.723:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SYSTEM_BOOT msg=audit(1400542569.732:39): pid=670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='init exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
>type=SYSTEM_RUNLEVEL msg=audit(1400542569.734:40): pid=670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='old-level=N new-level=3 exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542569.735:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542569.736:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=MAC_POLICY_LOAD msg=audit(1400542571.571:43): policy loaded auid=4294967295 ses=4294967295
>type=SYSCALL msg=audit(1400542571.571:43): arch=40000003 syscall=4 success=yes exit=3564122 a0=4 a1=b7128000 a2=36625a a3=4 items=0 ppid=937 pid=938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=MAC_POLICY_LOAD msg=audit(1400542572.587:44): policy loaded auid=4294967295 ses=4294967295
>type=SYSCALL msg=audit(1400542572.587:44): arch=40000003 syscall=4 success=yes exit=3564122 a0=4 a1=b7174000 a2=36625a a3=4 items=0 ppid=944 pid=945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=MAC_POLICY_LOAD msg=audit(1400542573.638:45): policy loaded auid=4294967295 ses=4294967295
>type=SYSCALL msg=audit(1400542573.638:45): arch=40000003 syscall=4 success=yes exit=3564122 a0=4 a1=b7168000 a2=36625a a3=4 items=0 ppid=952 pid=953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1400542574.287:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=2)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>type=USER_AVC msg=audit(1400542574.287:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=3)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>type=USER_AVC msg=audit(1400542574.287:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=4)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>type=MAC_POLICY_LOAD msg=audit(1400542574.940:49): policy loaded auid=4294967295 ses=4294967295
>type=SYSCALL msg=audit(1400542574.940:49): arch=40000003 syscall=4 success=yes exit=3564122 a0=4 a1=b70f8000 a2=36625a a3=4 items=0 ppid=1130 pid=1131 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=MAC_POLICY_LOAD msg=audit(1400542575.944:50): policy loaded auid=4294967295 ses=4294967295
>type=SYSCALL msg=audit(1400542575.944:50): arch=40000003 syscall=4 success=yes exit=3564122 a0=4 a1=b714b000 a2=36625a a3=4 items=0 ppid=1137 pid=1138 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=MAC_POLICY_LOAD msg=audit(1400542576.979:51): policy loaded auid=4294967295 ses=4294967295
>type=SYSCALL msg=audit(1400542576.979:51): arch=40000003 syscall=4 success=yes exit=3564122 a0=4 a1=b70d8000 a2=36625a a3=4 items=0 ppid=1149 pid=1150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=CRYPTO_KEY_USER msg=audit(1400542578.427:52): pid=1165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=75:17:1d:23:4b:37:67:38:bc:55:46:57:f9:73:70:2a direction=? spid=1165 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542578.431:53): pid=1165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=3a:89:ff:17:54:9e:6f:c5:27:bd:6d:aa:f9:2c:8c:a3 direction=? spid=1165 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1400542578.432:54): pid=1164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1165 suid=74 rport=40078 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1400542578.432:55): pid=1164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1165 suid=74 rport=40078 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542578.443:56): pid=1166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=75:17:1d:23:4b:37:67:38:bc:55:46:57:f9:73:70:2a direction=? spid=1166 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542578.443:57): pid=1166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=3a:89:ff:17:54:9e:6f:c5:27:bd:6d:aa:f9:2c:8c:a3 direction=? spid=1166 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1400542578.444:58): pid=1163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1166 suid=74 rport=40077 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1400542578.444:59): pid=1163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=1166 suid=74 rport=40077 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542578.449:60): pid=1164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1165 suid=74 rport=40078 laddr=192.168.122.58 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542578.449:61): pid=1164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=75:17:1d:23:4b:37:67:38:bc:55:46:57:f9:73:70:2a direction=? spid=1164 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542578.449:62): pid=1164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=3a:89:ff:17:54:9e:6f:c5:27:bd:6d:aa:f9:2c:8c:a3 direction=? spid=1164 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=USER_LOGIN msg=audit(1400542578.449:63): pid=1164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=ssh res=failed'
>type=MAC_POLICY_LOAD msg=audit(1400542578.017:64): policy loaded auid=4294967295 ses=4294967295
>type=SYSCALL msg=audit(1400542578.017:64): arch=40000003 syscall=4 success=yes exit=3564122 a0=4 a1=b709c000 a2=36625a a3=4 items=0 ppid=1161 pid=1162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=CRYPTO_KEY_USER msg=audit(1400542578.467:65): pid=1163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1166 suid=74 rport=40077 laddr=192.168.122.58 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542578.467:66): pid=1163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=75:17:1d:23:4b:37:67:38:bc:55:46:57:f9:73:70:2a direction=? spid=1163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542578.467:67): pid=1163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=3a:89:ff:17:54:9e:6f:c5:27:bd:6d:aa:f9:2c:8c:a3 direction=? spid=1163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=USER_LOGIN msg=audit(1400542578.467:68): pid=1163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=ssh res=failed'
>type=MAC_POLICY_LOAD msg=audit(1400542579.090:69): policy loaded auid=4294967295 ses=4294967295
>type=SYSCALL msg=audit(1400542579.090:69): arch=40000003 syscall=4 success=yes exit=3564122 a0=4 a1=b70f6000 a2=36625a a3=4 items=0 ppid=1172 pid=1173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=MAC_POLICY_LOAD msg=audit(1400542580.113:70): policy loaded auid=4294967295 ses=4294967295
>type=SYSCALL msg=audit(1400542580.113:70): arch=40000003 syscall=4 success=yes exit=3564122 a0=4 a1=b7142000 a2=36625a a3=4 items=0 ppid=1179 pid=1180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=MAC_POLICY_LOAD msg=audit(1400542581.076:71): policy loaded auid=4294967295 ses=4294967295
>type=SYSCALL msg=audit(1400542581.076:71): arch=40000003 syscall=4 success=yes exit=3564122 a0=4 a1=b70b2000 a2=36625a a3=4 items=0 ppid=1191 pid=1192 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=MAC_POLICY_LOAD msg=audit(1400542582.111:72): policy loaded auid=4294967295 ses=4294967295
>type=SYSCALL msg=audit(1400542582.111:72): arch=40000003 syscall=4 success=yes exit=3564122 a0=4 a1=b70be000 a2=36625a a3=4 items=0 ppid=1198 pid=1199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=MAC_POLICY_LOAD msg=audit(1400542583.165:73): policy loaded auid=4294967295 ses=4294967295
>type=SYSCALL msg=audit(1400542583.165:73): arch=40000003 syscall=4 success=yes exit=3564122 a0=4 a1=b70de000 a2=36625a a3=4 items=0 ppid=1210 pid=1211 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=MAC_POLICY_LOAD msg=audit(1400542584.170:74): policy loaded auid=4294967295 ses=4294967295
>type=SYSCALL msg=audit(1400542584.170:74): arch=40000003 syscall=4 success=yes exit=3564122 a0=4 a1=b7144000 a2=36625a a3=4 items=0 ppid=1217 pid=1218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0 key=(null)
>type=USER_AVC msg=audit(1400542599.509:75): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=5)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>type=USER_AVC msg=audit(1400542599.509:76): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=6)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>type=USER_AVC msg=audit(1400542599.509:77): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=7)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>type=USER_AVC msg=audit(1400542599.510:78): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=8)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>type=USER_AVC msg=audit(1400542599.510:79): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=9)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>type=USER_AVC msg=audit(1400542599.510:80): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=10)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>type=USER_AVC msg=audit(1400542599.510:81): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=11)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>type=USER_AVC msg=audit(1400542599.510:82): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=12)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>type=USER_AVC msg=audit(1400542599.510:83): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=13)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>type=USER_AVC msg=audit(1400542599.510:84): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=14)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>type=SERVICE_START msg=audit(1400542599.538:85): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="mysql" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542602.021:86): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openvswitch" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542602.036:87): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openvswitch-nonetwork" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542602.071:88): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openvswitch-nonetwork" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542602.073:89): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="openvswitch" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=ANOM_PROMISCUOUS msg=audit(1400542602.076:90): dev=ovs-system prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=SYSCALL msg=audit(1400542602.076:90): arch=40000003 syscall=102 success=yes exit=48 a0=10 a1=bfed1ab0 a2=b77b9b5c a3=0 items=0 ppid=2135 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1400542602.106:91): dev=br-int prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=SYSCALL msg=audit(1400542602.106:91): arch=40000003 syscall=102 success=yes exit=52 a0=10 a1=bfed1a40 a2=b77b9b5c a3=0 items=0 ppid=2135 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1400542602.209:92): dev=br-ctlplane prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=SYSCALL msg=audit(1400542602.209:92): arch=40000003 syscall=102 success=yes exit=56 a0=10 a1=bfed1a40 a2=b77b9b5c a3=0 items=0 ppid=2135 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)
>type=ANOM_PROMISCUOUS msg=audit(1400542604.390:93): dev=eth1 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=SYSCALL msg=audit(1400542604.390:93): arch=40000003 syscall=102 success=yes exit=52 a0=10 a1=bfed1a40 a2=b77b9b5c a3=0 items=0 ppid=2135 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)
>type=NETFILTER_CFG msg=audit(1400542604.493:94): table=nat family=2 entries=0
>type=SYSCALL msg=audit(1400542604.493:94): arch=40000003 syscall=350 success=yes exit=0 a0=0 a1=80646a8 a2=0 a3=8059497 items=0 ppid=2350 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=NETFILTER_CFG msg=audit(1400542604.496:95): table=nat family=2 entries=5
>type=SYSCALL msg=audit(1400542604.496:95): arch=40000003 syscall=102 success=yes exit=0 a0=e a1=bffbd060 a2=b77ab000 a3=3d0 items=0 ppid=2347 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=SERVICE_START msg=audit(1400542607.445:96): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="rabbitmq-server" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542609.499:97): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="keystone" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542609.525:98): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="keystone-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542609.532:99): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="keystone-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542612.710:100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glance-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542612.738:101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glance-api-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542612.745:102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glance-api-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542612.764:103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glance-reg" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542612.770:104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glance-reg-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542612.771:105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="glance-reg-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542613.384:106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="heat-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542613.448:107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="heat-api-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542613.456:108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="heat-api-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542613.496:109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="heat-api-cfn" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542613.501:110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="heat-api-cfn-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542613.503:111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="heat-api-cfn-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542613.572:112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="heat-api-cloudwatch" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542613.574:113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="heat-api-cloudwatch-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542613.576:114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="heat-api-cloudwatch-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542618.830:115): pid=2876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=75:17:1d:23:4b:37:67:38:bc:55:46:57:f9:73:70:2a direction=? spid=2876 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542618.832:116): pid=2876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=3a:89:ff:17:54:9e:6f:c5:27:bd:6d:aa:f9:2c:8c:a3 direction=? spid=2876 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1400542618.834:117): pid=2875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2876 suid=74 rport=46199 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1400542618.834:118): pid=2875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2876 suid=74 rport=46199 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542618.876:119): pid=2875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2876 suid=74 rport=46199 laddr=192.0.2.1 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542618.876:120): pid=2875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=75:17:1d:23:4b:37:67:38:bc:55:46:57:f9:73:70:2a direction=? spid=2875 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542618.876:121): pid=2875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=3a:89:ff:17:54:9e:6f:c5:27:bd:6d:aa:f9:2c:8c:a3 direction=? spid=2875 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=USER_LOGIN msg=audit(1400542618.876:122): pid=2875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct=28756E6B6E6F776E207573657229 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=ssh res=failed'
>type=CRYPTO_KEY_USER msg=audit(1400542618.971:123): pid=2878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=75:17:1d:23:4b:37:67:38:bc:55:46:57:f9:73:70:2a direction=? spid=2878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542618.971:124): pid=2878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=3a:89:ff:17:54:9e:6f:c5:27:bd:6d:aa:f9:2c:8c:a3 direction=? spid=2878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1400542618.972:125): pid=2877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2878 suid=74 rport=46200 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1400542618.974:126): pid=2877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2878 suid=74 rport=46200 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=USER_AUTH msg=audit(1400542619.067:127): pid=2877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46200 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=USER_AUTH msg=audit(1400542619.067:128): pid=2877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=17:85:6f:9b:87:ed:0e:e2:fc:c5:5e:bd:a4:30:bb:54 rport=46200 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=USER_ACCT msg=audit(1400542619.074:129): pid=2877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542619.076:130): pid=2877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2878 suid=74 rport=46200 laddr=192.0.2.1 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=USER_AUTH msg=audit(1400542619.078:131): pid=2877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1400542619.078:132): pid=2877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=LOGIN msg=audit(1400542619.079:133): pid=2877 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=1 res=1
>type=USER_ROLE_CHANGE msg=audit(1400542619.212:134): pid=2877 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=USER_START msg=audit(1400542619.249:135): pid=2877 uid=0 auid=0 ses=1 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1400542619.255:136): pid=2877 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=USER_START msg=audit(1400542619.255:137): pid=2877 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=USER_START msg=audit(1400542619.256:138): pid=2882 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=/dev/pts/0 res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542619.256:139): pid=2882 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=75:17:1d:23:4b:37:67:38:bc:55:46:57:f9:73:70:2a direction=? spid=2882 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=pts/0 res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542619.256:140): pid=2882 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=3a:89:ff:17:54:9e:6f:c5:27:bd:6d:aa:f9:2c:8c:a3 direction=? spid=2882 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=pts/0 res=success'
>type=CRED_REFR msg=audit(1400542619.256:141): pid=2882 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=USER_ACCT msg=audit(1400542619.268:142): pid=2880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_START msg=audit(1400542619.272:143): pid=2880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542619.294:144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="user@0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542619.301:145): pid=2877 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=USER_END msg=audit(1400542619.308:146): pid=2877 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1400542619.310:147): pid=2877 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=USER_END msg=audit(1400542619.310:148): pid=2877 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1400542619.310:149): pid=2877 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542619.310:150): pid=2877 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=75:17:1d:23:4b:37:67:38:bc:55:46:57:f9:73:70:2a direction=? spid=2877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542619.310:151): pid=2877 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=3a:89:ff:17:54:9e:6f:c5:27:bd:6d:aa:f9:2c:8c:a3 direction=? spid=2877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542619.310:152): pid=2877 uid=0 auid=0 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2877 suid=0 rport=46200 laddr=192.0.2.1 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542619.323:153): pid=2890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=75:17:1d:23:4b:37:67:38:bc:55:46:57:f9:73:70:2a direction=? spid=2890 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542619.325:154): pid=2890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=3a:89:ff:17:54:9e:6f:c5:27:bd:6d:aa:f9:2c:8c:a3 direction=? spid=2890 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1400542619.325:155): pid=2888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2890 suid=74 rport=46201 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1400542619.325:156): pid=2888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=2890 suid=74 rport=46201 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=USER_AUTH msg=audit(1400542619.386:157): pid=2888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46201 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=USER_AUTH msg=audit(1400542619.386:158): pid=2888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=17:85:6f:9b:87:ed:0e:e2:fc:c5:5e:bd:a4:30:bb:54 rport=46201 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=USER_ACCT msg=audit(1400542619.390:159): pid=2888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542619.391:160): pid=2888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2890 suid=74 rport=46201 laddr=192.0.2.1 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=USER_AUTH msg=audit(1400542619.391:161): pid=2888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1400542619.392:162): pid=2888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=LOGIN msg=audit(1400542619.392:163): pid=2888 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=2 res=1
>type=USER_ROLE_CHANGE msg=audit(1400542619.468:164): pid=2888 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=USER_START msg=audit(1400542619.482:165): pid=2888 uid=0 auid=0 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1400542619.487:166): pid=2888 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=USER_START msg=audit(1400542619.487:167): pid=2888 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=USER_START msg=audit(1400542619.489:168): pid=2892 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=/dev/pts/0 res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542619.489:169): pid=2892 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=75:17:1d:23:4b:37:67:38:bc:55:46:57:f9:73:70:2a direction=? spid=2892 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=pts/0 res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542619.489:170): pid=2892 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=3a:89:ff:17:54:9e:6f:c5:27:bd:6d:aa:f9:2c:8c:a3 direction=? spid=2892 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=pts/0 res=success'
>type=CRED_REFR msg=audit(1400542619.490:171): pid=2892 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=USER_CMD msg=audit(1400542619.507:172): pid=2892 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=6B657973746F6E652D6D616E61676520706B695F7365747570202D2D6B657973746F6E652D75736572206B657973746F6E65202D2D6B657973746F6E652D67726F7570206B657973746F6E65 terminal=pts/0 res=success'
>type=USER_START msg=audit(1400542619.509:173): pid=2892 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=SERVICE_START msg=audit(1400542620.160:174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="heat-engine" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542620.219:175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="heat-engine-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542620.226:176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="heat-engine-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542620.514:177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-dhcp-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542620.594:178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-dhcp-agent-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542620.599:179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-dhcp-agent-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542620.984:180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-openvswitch-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542621.083:181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-openvswitch-agent-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542621.086:182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-openvswitch-agent-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542621.553:183): pid=2892 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=USER_END msg=audit(1400542621.557:184): pid=2888 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=USER_END msg=audit(1400542621.561:185): pid=2888 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=CRED_DISP msg=audit(1400542621.561:186): pid=2888 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=USER_END msg=audit(1400542621.562:187): pid=2888 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=USER_LOGOUT msg=audit(1400542621.562:188): pid=2888 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542621.562:189): pid=2888 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=75:17:1d:23:4b:37:67:38:bc:55:46:57:f9:73:70:2a direction=? spid=2888 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542621.562:190): pid=2888 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=3a:89:ff:17:54:9e:6f:c5:27:bd:6d:aa:f9:2c:8c:a3 direction=? spid=2888 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542621.562:191): pid=2888 uid=0 auid=0 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2888 suid=0 rport=46201 laddr=192.0.2.1 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=SERVICE_START msg=audit(1400542621.584:192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-server" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542621.688:193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-server-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542621.699:194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="neutron-server-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542622.366:195): pid=3073 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D202D2D69662D6578697374732064656C2D706F72742062722D696E742070617463682D74756E terminal=? res=success'
>type=USER_START msg=audit(1400542622.367:196): pid=3073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542622.552:197): pid=3073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542622.578:198): pid=3080 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064656C2D666C6F77732062722D696E74 terminal=? res=success'
>type=USER_START msg=audit(1400542622.579:199): pid=3080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542622.753:200): pid=3080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542622.778:201): pid=3086 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F772062722D696E7420686172645F74696D656F75743D302C69646C655F74696D656F75743D302C7072696F726974793D312C616374696F6E733D6E6F726D616C terminal=? res=success'
>type=USER_START msg=audit(1400542622.778:202): pid=3086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542622.905:203): pid=3086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542622.947:204): pid=3090 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064656C2D666C6F77732062722D63746C706C616E65 terminal=? res=success'
>type=USER_START msg=audit(1400542622.947:205): pid=3090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542623.074:206): pid=3090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542623.099:207): pid=3093 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F772062722D63746C706C616E6520686172645F74696D656F75743D302C69646C655F74696D656F75743D302C7072696F726974793D312C616374696F6E733D6E6F726D616C terminal=? res=success'
>type=USER_START msg=audit(1400542623.100:208): pid=3093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542623.238:209): pid=3093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542623.257:210): pid=3096 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D202D2D69662D6578697374732064656C2D706F72742062722D696E7420696E742D62722D63746C706C616E65 terminal=? res=success'
>type=USER_START msg=audit(1400542623.257:211): pid=3096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542623.384:212): pid=3096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542623.405:213): pid=3101 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D202D2D69662D6578697374732064656C2D706F72742062722D63746C706C616E65207068792D62722D63746C706C616E65 terminal=? res=success'
>type=USER_START msg=audit(1400542623.406:214): pid=3101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542623.530:215): pid=3101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542623.561:216): pid=3108 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206C696E6B2061646420696E742D62722D63746C706C616E65207479706520766574682070656572206E616D65207068792D62722D63746C706C616E65 terminal=? res=success'
>type=USER_START msg=audit(1400542623.562:217): pid=3108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542623.720:218): pid=3108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542623.749:219): pid=3117 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D202D2D6D61792D6578697374206164642D706F72742062722D696E7420696E742D62722D63746C706C616E65 terminal=? res=success'
>type=USER_START msg=audit(1400542623.750:220): pid=3117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=ANOM_PROMISCUOUS msg=audit(1400542623.876:221): dev=int-br-ctlplane prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=SYSCALL msg=audit(1400542623.876:221): arch=40000003 syscall=102 success=yes exit=60 a0=10 a1=bfed1a40 a2=b77b9b5c a3=0 items=0 ppid=2135 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)
>type=USER_END msg=audit(1400542623.891:222): pid=3117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542623.916:223): pid=3124 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420496E7465726661636520696E742D62722D63746C706C616E65206F66706F7274 terminal=? res=success'
>type=USER_START msg=audit(1400542623.916:224): pid=3124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542624.062:225): pid=3124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542624.086:226): pid=3127 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D202D2D6D61792D6578697374206164642D706F72742062722D63746C706C616E65207068792D62722D63746C706C616E65 terminal=? res=success'
>type=USER_START msg=audit(1400542624.087:227): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=ANOM_PROMISCUOUS msg=audit(1400542624.221:228): dev=phy-br-ctlplane prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295
>type=SYSCALL msg=audit(1400542624.221:228): arch=40000003 syscall=102 success=yes exit=60 a0=10 a1=bfed1a40 a2=b77b9b5c a3=0 items=0 ppid=2135 pid=2136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:openvswitch_t:s0 key=(null)
>type=USER_END msg=audit(1400542624.238:229): pid=3127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542624.264:230): pid=3132 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420496E74657266616365207068792D62722D63746C706C616E65206F66706F7274 terminal=? res=success'
>type=USER_START msg=audit(1400542624.264:231): pid=3132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542624.402:232): pid=3132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542624.424:233): pid=3135 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F772062722D696E7420686172645F74696D656F75743D302C69646C655F74696D656F75743D302C7072696F726974793D322C696E5F706F72743D312C616374696F6E733D64726F70 terminal=? res=success'
>type=USER_START msg=audit(1400542624.425:234): pid=3135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542624.564:235): pid=3135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542624.587:236): pid=3138 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F772062722D63746C706C616E6520686172645F74696D656F75743D302C69646C655F74696D656F75743D302C7072696F726974793D322C696E5F706F72743D322C616374696F6E733D64726F70 terminal=? res=success'
>type=USER_START msg=audit(1400542624.587:237): pid=3138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542624.709:238): pid=3138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542624.732:239): pid=3143 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206C696E6B2073657420696E742D62722D63746C706C616E65207570 terminal=? res=success'
>type=USER_START msg=audit(1400542624.732:240): pid=3143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542624.854:241): pid=3143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542624.879:242): pid=3146 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206C696E6B20736574207068792D62722D63746C706C616E65207570 terminal=? res=success'
>type=USER_START msg=audit(1400542624.880:243): pid=3146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542625.001:244): pid=3146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542625.022:245): pid=3149 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D6272 terminal=? res=success'
>type=USER_START msg=audit(1400542625.022:246): pid=3149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542625.150:247): pid=3149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542625.287:248): pid=3153 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F767364622D636C69656E74206D6F6E69746F7220496E74657266616365206E616D652C6F66706F7274202D2D666F726D61743D6A736F6E terminal=? res=success'
>type=USER_START msg=audit(1400542625.287:249): pid=3153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542625.298:250): pid=3154 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success'
>type=USER_START msg=audit(1400542625.299:251): pid=3154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542625.480:252): pid=3154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542625.494:253): pid=3160 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C65787465726E616C5F6964732C6F66706F7274206C69737420496E74657266616365 terminal=? res=success'
>type=USER_START msg=audit(1400542625.494:254): pid=3160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542625.595:255): pid=3160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542625.618:256): pid=3163 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success'
>type=USER_START msg=audit(1400542625.618:257): pid=3163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542625.755:258): pid=3163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542625.772:259): pid=3166 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C746167206C69737420506F7274 terminal=? res=success'
>type=USER_START msg=audit(1400542625.773:260): pid=3166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542625.865:261): pid=3166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542627.287:262): pid=3171 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success'
>type=USER_START msg=audit(1400542627.288:263): pid=3171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542627.405:264): pid=3171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542627.418:265): pid=3174 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C65787465726E616C5F6964732C6F66706F7274206C69737420496E74657266616365 terminal=? res=success'
>type=USER_START msg=audit(1400542627.418:266): pid=3174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542627.498:267): pid=3174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542627.513:268): pid=3177 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success'
>type=USER_START msg=audit(1400542627.513:269): pid=3177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542627.600:270): pid=3177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542627.613:271): pid=3181 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C746167206C69737420506F7274 terminal=? res=success'
>type=USER_START msg=audit(1400542627.613:272): pid=3181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542627.719:273): pid=3181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542629.605:274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-conductor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542629.671:275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-conductor-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542629.677:276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-conductor-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542629.713:277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542629.720:278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-api-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542629.721:279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-api-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542629.777:280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-cert" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542629.783:281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-cert-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542629.785:282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-cert-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542629.862:283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-scheduler" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542629.868:284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-scheduler-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542629.871:285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-scheduler-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542629.967:286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-consoleauth" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542629.973:287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-consoleauth-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542629.975:288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-consoleauth-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542635.541:289): pid=3421 uid=994 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E662069707461626C65732D73617665202D63 terminal=? res=success'
>type=USER_START msg=audit(1400542635.542:290): pid=3421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1400542635.741:291): pid=3421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1400542635.779:292): pid=3428 uid=994 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E662069707461626C65732D726573746F7265202D63 terminal=? res=success'
>type=USER_START msg=audit(1400542635.779:293): pid=3428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542635.787:294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-baremetal-deploy-helper" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542635.966:295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-baremetal-deploy-helper-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542635.975:296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-baremetal-deploy-helper-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1400542635.996:297): table=mangle family=2 entries=0
>type=SYSCALL msg=audit(1400542635.996:297): arch=40000003 syscall=350 success=yes exit=0 a0=0 a1=80646a8 a2=0 a3=8059497 items=0 ppid=3441 pid=3444 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:insmod_t:s0 key=(null)
>type=NETFILTER_CFG msg=audit(1400542635.998:298): table=mangle family=2 entries=6
>type=SYSCALL msg=audit(1400542635.998:298): arch=40000003 syscall=102 success=yes exit=0 a0=e a1=bfd70d80 a2=b7755000 a3=56c items=0 ppid=3429 pid=3433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=NETFILTER_CFG msg=audit(1400542635.999:299): table=nat family=2 entries=6
>type=SYSCALL msg=audit(1400542635.999:299): arch=40000003 syscall=102 success=yes exit=0 a0=e a1=bfd70d80 a2=b7755000 a3=ee0 items=0 ppid=3429 pid=3433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=NETFILTER_CFG msg=audit(1400542635.999:300): table=filter family=2 entries=4
>type=SYSCALL msg=audit(1400542635.999:300): arch=40000003 syscall=102 success=yes exit=0 a0=e a1=bfd70d80 a2=b7755000 a3=cf8 items=0 ppid=3429 pid=3433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=USER_END msg=audit(1400542636.003:301): pid=3428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542636.504:302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-compute" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_START msg=audit(1400542636.633:303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-compute-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542636.643:304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="nova-compute-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=NETFILTER_CFG msg=audit(1400542636.663:305): table=nat family=2 entries=24
>type=SYSCALL msg=audit(1400542636.663:305): arch=40000003 syscall=102 success=yes exit=0 a0=e a1=bf8e3f90 a2=b76ff000 a3=1024 items=0 ppid=3495 pid=3500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=NETFILTER_CFG msg=audit(1400542636.665:306): table=nat family=2 entries=26
>type=SYSCALL msg=audit(1400542636.665:306): arch=40000003 syscall=102 success=yes exit=0 a0=e a1=bf8dcf90 a2=b7784000 a3=10b8 items=0 ppid=3495 pid=3501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=NETFILTER_CFG msg=audit(1400542636.670:307): table=nat family=2 entries=27
>type=SYSCALL msg=audit(1400542636.670:307): arch=40000003 syscall=102 success=yes exit=0 a0=e a1=bfaf31b0 a2=b7734000 a3=115c items=0 ppid=3495 pid=3502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=NETFILTER_CFG msg=audit(1400542636.692:308): table=nat family=2 entries=28
>type=SYSCALL msg=audit(1400542636.692:308): arch=40000003 syscall=102 success=yes exit=0 a0=e a1=bff9a170 a2=b7702000 a3=11f0 items=0 ppid=3495 pid=3505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=NETFILTER_CFG msg=audit(1400542636.696:309): table=nat family=2 entries=29
>type=SYSCALL msg=audit(1400542636.696:309): arch=40000003 syscall=102 success=yes exit=0 a0=e a1=bfe44b90 a2=b770b000 a3=11f0 items=0 ppid=3495 pid=3509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:iptables_t:s0 key=(null)
>type=AVC msg=audit(1400542657.161:310): avc:  denied  { open } for  pid=3671 comm="ssh-keygen" path="/tmp/tmp0J4F1e/temp.pub" dev="sda1" ino=1843164 scontext=system_u:system_r:ssh_keygen_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1400542657.161:310): arch=40000003 syscall=5 success=no exit=-13 a0=b77a7760 a1=8000 a2=0 a3=b77a7760 items=0 ppid=3420 pid=3671 auid=4294967295 uid=994 gid=993 euid=994 suid=994 fsuid=994 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="ssh-keygen" exe="/usr/bin/ssh-keygen" subj=system_u:system_r:ssh_keygen_t:s0 key=(null)
>type=AVC msg=audit(1400542657.161:311): avc:  denied  { open } for  pid=3671 comm="ssh-keygen" path="/tmp/tmp0J4F1e/temp.pub" dev="sda1" ino=1843164 scontext=system_u:system_r:ssh_keygen_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1400542657.161:311): arch=40000003 syscall=5 success=no exit=-13 a0=b77a7760 a1=8000 a2=1b6 a3=b78b30c0 items=0 ppid=3420 pid=3671 auid=4294967295 uid=994 gid=993 euid=994 suid=994 fsuid=994 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="ssh-keygen" exe="/usr/bin/ssh-keygen" subj=system_u:system_r:ssh_keygen_t:s0 key=(null)
>type=AVC msg=audit(1400542657.161:312): avc:  denied  { open } for  pid=3671 comm="ssh-keygen" path="/tmp/tmp0J4F1e/temp.pub" dev="sda1" ino=1843164 scontext=system_u:system_r:ssh_keygen_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1400542657.161:312): arch=40000003 syscall=5 success=no exit=-13 a0=b77a7760 a1=8000 a2=1b6 a3=b78b30c0 items=0 ppid=3420 pid=3671 auid=4294967295 uid=994 gid=993 euid=994 suid=994 fsuid=994 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="ssh-keygen" exe="/usr/bin/ssh-keygen" subj=system_u:system_r:ssh_keygen_t:s0 key=(null)
>type=AVC msg=audit(1400542657.162:313): avc:  denied  { open } for  pid=3671 comm="ssh-keygen" path="/tmp/tmp0J4F1e/temp.pub" dev="sda1" ino=1843164 scontext=system_u:system_r:ssh_keygen_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1400542657.162:313): arch=40000003 syscall=5 success=no exit=-13 a0=b77a7760 a1=8000 a2=1b6 a3=b78b3090 items=0 ppid=3420 pid=3671 auid=4294967295 uid=994 gid=993 euid=994 suid=994 fsuid=994 egid=993 sgid=993 fsgid=993 tty=(none) ses=4294967295 comm="ssh-keygen" exe="/usr/bin/ssh-keygen" subj=system_u:system_r:ssh_keygen_t:s0 key=(null)
>type=SERVICE_START msg=audit(1400542864.175:314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-hostnamed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400542864.175:315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-hostnamed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542967.129:316): pid=3737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=75:17:1d:23:4b:37:67:38:bc:55:46:57:f9:73:70:2a direction=? spid=3737 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542967.129:317): pid=3737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=3a:89:ff:17:54:9e:6f:c5:27:bd:6d:aa:f9:2c:8c:a3 direction=? spid=3737 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1400542967.130:318): pid=3736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3737 suid=74 rport=46349 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=CRYPTO_SESSION msg=audit(1400542967.130:319): pid=3736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=3737 suid=74 rport=46349 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=USER_AUTH msg=audit(1400542967.232:320): pid=3736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth rport=46349 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=USER_AUTH msg=audit(1400542967.232:321): pid=3736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=key algo=ssh-rsa size=2048 fp=17:85:6f:9b:87:ed:0e:e2:fc:c5:5e:bd:a4:30:bb:54 rport=46349 acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=USER_ACCT msg=audit(1400542967.237:322): pid=3736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542967.240:323): pid=3736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3737 suid=74 rport=46349 laddr=192.0.2.1 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=? res=success'
>type=USER_AUTH msg=audit(1400542967.242:324): pid=3736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=success acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=ssh res=success'
>type=CRED_ACQ msg=audit(1400542967.243:325): pid=3736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=LOGIN msg=audit(1400542967.243:326): pid=3736 uid=0 old-auid=4294967295 new-auid=0 old-ses=4294967295 new-ses=3 res=1
>type=USER_ROLE_CHANGE msg=audit(1400542967.320:327): pid=3736 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=USER_START msg=audit(1400542967.358:328): pid=3736 uid=0 auid=0 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=USER_LOGIN msg=audit(1400542967.367:329): pid=3739 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=/dev/pts/0 res=success'
>type=USER_START msg=audit(1400542967.367:330): pid=3739 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=/dev/pts/0 res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542967.368:331): pid=3739 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=75:17:1d:23:4b:37:67:38:bc:55:46:57:f9:73:70:2a direction=? spid=3739 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=pts/0 res=success'
>type=CRYPTO_KEY_USER msg=audit(1400542967.368:332): pid=3739 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=3a:89:ff:17:54:9e:6f:c5:27:bd:6d:aa:f9:2c:8c:a3 direction=? spid=3739 suid=0  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.1 terminal=pts/0 res=success'
>type=CRED_REFR msg=audit(1400542967.368:333): pid=3739 uid=0 auid=0 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.1 addr=192.168.122.1 terminal=ssh res=success'
>type=SERVICE_START msg=audit(1400543461.189:334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>type=SERVICE_STOP msg=audit(1400543461.190:335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'

Actions: View

Attachments on bug 1125442: 923035