type=DAEMON_START msg=audit(1396577169.390:5751): auditd start, ver=2.3.5 format=raw kernel=3.13.8-200.fc20.x86_64 auid=4294967295 pid=252 subj=system_u:system_r:kernel_t:s0 res=success type=SYSTEM_BOOT msg=audit(1396577169.412:5): pid=265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='init exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577169.413:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577169.552:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="dbus" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577169.583:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="rsyslog" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577169.592:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="ipmievd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' type=SERVICE_START msg=audit(1396577169.598:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="sysstat" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577169.602:11): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-user-sessions" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577169.613:12): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="getty@tty1" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577169.654:13): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-logind" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577169.845:14): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openvswitch-nonetwork" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577170.218:15): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="network" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' type=SERVICE_START msg=audit(1396577170.238:16): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="qpidd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577170.246:17): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="memcached" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577170.296:18): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openvswitch" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577170.515:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="httpd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577170.541:20): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577170.659:21): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="mariadb" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' type=SERVICE_START msg=audit(1396577170.876:22): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="cloud-init-local" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=ADD_GROUP msg=audit(1396577173.665:23): pid=772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=adding group acct="heat-admin" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' type=ADD_USER msg=audit(1396577173.713:24): pid=772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=adding user id=1001 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' type=ADD_USER msg=audit(1396577173.716:25): pid=772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=adding home directory id=1001 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577174.291:26): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-hostnamed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=USER_CHAUTHTOK msg=audit(1396577174.373:27): pid=834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=lock password id=1001 exe="/usr/bin/passwd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577174.423:28): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="cloud-init" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1396577174.727:29): pid=625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=e6:bf:b9:e7:42:87:7b:da:56:79:dc:1c:d6:89:cf:08 direction=? spid=625 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1396577174.727:30): pid=625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=7d:a8:50:0e:18:d4:a2:64:dc:08:9c:57:96:3f:1f:b3 direction=? spid=625 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=SERVICE_STOP msg=audit(1396577174.729:31): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577174.736:32): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="sshd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577174.794:33): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="cloud-config" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577175.253:34): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="cloud-final" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577175.255:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="os-collect-config" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577175.258:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="crond" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SYSTEM_BOOT msg=audit(1396577175.268:37): pid=881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='init exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' type=SYSTEM_RUNLEVEL msg=audit(1396577175.274:38): pid=881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='old-level=N new-level=3 exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577175.276:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_STOP msg=audit(1396577175.276:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp-runlevel" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=USER_AVC msg=audit(1396577176.060:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: denied { status } for auid=-1 uid=0 gid=0 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=service exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=MAC_POLICY_LOAD msg=audit(1396577176.987:42): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577176.987:42): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7f0c1fa70010 a2=357dd4 a3=7fffae637b50 items=0 ppid=1167 pid=1168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=MAC_POLICY_LOAD msg=audit(1396577177.704:43): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577177.704:43): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7f163a51b010 a2=357dd4 a3=7fff748df3d0 items=0 ppid=1174 pid=1175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=MAC_POLICY_LOAD msg=audit(1396577178.444:44): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577178.444:44): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7f88d1529010 a2=357dd4 a3=7fff8a4a7220 items=0 ppid=1182 pid=1183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_AVC msg=audit(1396577178.754:45): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=2) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577178.754:46): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=3) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577178.754:47): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=4) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577178.755:48): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: denied { status } for auid=-1 uid=0 gid=0 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=service exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=MAC_POLICY_LOAD msg=audit(1396577179.421:49): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577179.421:49): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7fcbcfa9f010 a2=357dd4 a3=7fff9a2b12f0 items=0 ppid=1297 pid=1298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=MAC_POLICY_LOAD msg=audit(1396577180.062:50): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577180.062:50): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7f7832249010 a2=357dd4 a3=7fff3f542d80 items=0 ppid=1304 pid=1305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=MAC_POLICY_LOAD msg=audit(1396577180.705:51): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577180.705:51): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7f182d7a3010 a2=357dd4 a3=7fffc6507c20 items=0 ppid=1316 pid=1317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=MAC_POLICY_LOAD msg=audit(1396577181.354:52): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577181.354:52): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7f96be304010 a2=357dd4 a3=7fff2dbb7260 items=0 ppid=1328 pid=1329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=MAC_POLICY_LOAD msg=audit(1396577182.001:53): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577182.001:53): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7fa852fe7010 a2=357dd4 a3=7fffd63d6870 items=0 ppid=1335 pid=1336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=MAC_POLICY_LOAD msg=audit(1396577182.655:54): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577182.655:54): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7f2bf11dc010 a2=357dd4 a3=7fffab320c30 items=0 ppid=1342 pid=1343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=MAC_POLICY_LOAD msg=audit(1396577183.377:55): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577183.377:55): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7ffa6fb28010 a2=357dd4 a3=7fffb7d353b0 items=0 ppid=1354 pid=1355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=MAC_POLICY_LOAD msg=audit(1396577184.105:56): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577184.105:56): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7ff21342c010 a2=357dd4 a3=7ffff52d3370 items=0 ppid=1361 pid=1362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_AVC msg=audit(1396577185.832:57): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=5) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577185.832:58): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=6) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577185.832:59): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=7) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577185.832:60): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=8) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577185.832:61): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=9) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577185.832:62): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=10) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577185.832:63): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=11) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577185.832:64): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=12) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577185.833:65): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: denied { status } for auid=-1 uid=0 gid=0 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=service exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=MAC_POLICY_LOAD msg=audit(1396577186.929:66): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577186.929:66): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7fd097e73010 a2=357dd4 a3=7fff43b9b950 items=0 ppid=1671 pid=1672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=MAC_POLICY_LOAD msg=audit(1396577187.974:67): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577187.974:67): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7f6fd36b1010 a2=357dd4 a3=7fff48c85ff0 items=0 ppid=1678 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=MAC_POLICY_LOAD msg=audit(1396577188.922:68): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577188.922:68): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7f05a4f16010 a2=357dd4 a3=7fff72f2b060 items=0 ppid=1685 pid=1686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_AVC msg=audit(1396577189.288:69): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=13) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577189.288:70): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=14) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577189.288:71): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=15) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577189.289:72): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: denied { status } for auid=-1 uid=0 gid=0 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=service exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=MAC_POLICY_LOAD msg=audit(1396577190.055:73): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577190.055:73): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7f2e92279010 a2=357dd4 a3=7fff74a75c70 items=0 ppid=1790 pid=1791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=MAC_POLICY_LOAD msg=audit(1396577190.922:74): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577190.922:74): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7fc06da2c010 a2=357dd4 a3=7fff34bad8e0 items=0 ppid=1797 pid=1798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=MAC_POLICY_LOAD msg=audit(1396577191.775:75): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577191.775:75): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7f002b0dc010 a2=357dd4 a3=7fffc7003f50 items=0 ppid=1809 pid=1810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=MAC_POLICY_LOAD msg=audit(1396577192.729:76): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577192.729:76): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7fc27781d010 a2=357dd4 a3=7fff13134d70 items=0 ppid=1821 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=MAC_POLICY_LOAD msg=audit(1396577193.588:77): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577193.588:77): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7f47ebb67010 a2=357dd4 a3=7fff3eb95240 items=0 ppid=1828 pid=1829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=MAC_POLICY_LOAD msg=audit(1396577194.303:78): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577194.303:78): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7f8a92861010 a2=357dd4 a3=7fff5c1cf220 items=0 ppid=1835 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=MAC_POLICY_LOAD msg=audit(1396577194.999:79): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577194.999:79): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7fcbfbf08010 a2=357dd4 a3=7fff42d6b870 items=0 ppid=1847 pid=1848 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=MAC_POLICY_LOAD msg=audit(1396577195.680:80): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1396577195.680:80): arch=c000003e syscall=1 success=yes exit=3505620 a0=4 a1=7f1677e4e010 a2=357dd4 a3=7fff78eff670 items=0 ppid=1854 pid=1855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="load_policy" exe="/usr/sbin/load_policy" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_AVC msg=audit(1396577196.070:81): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=16) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577196.070:82): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=17) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577196.070:83): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=18) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577196.070:84): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=19) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577196.070:85): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=20) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577196.070:86): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=21) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577196.070:87): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=22) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577196.070:88): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: received policyload notice (seqno=23) exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=SERVICE_START msg=audit(1396577200.483:89): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="mariadb" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=USER_AVC msg=audit(1396577201.531:90): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: denied { start } for auid=-1 uid=0 gid=0 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=service exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=SERVICE_STOP msg=audit(1396577201.544:91): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openvswitch" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_STOP msg=audit(1396577201.560:92): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openvswitch-nonetwork" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577201.600:93): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openvswitch-nonetwork" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577201.605:94): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openvswitch" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=ANOM_PROMISCUOUS msg=audit(1396577201.606:95): dev=ovs-system prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1396577201.606:95): arch=c000003e syscall=46 success=yes exit=48 a0=10 a1=7fff571d23a0 a2=0 a3=0 items=0 ppid=2737 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:kernel_t:s0 key=(null) type=ANOM_PROMISCUOUS msg=audit(1396577201.638:96): dev=br-int prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1396577201.638:96): arch=c000003e syscall=46 success=yes exit=52 a0=10 a1=7fff571d2290 a2=0 a3=0 items=0 ppid=2737 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:kernel_t:s0 key=(null) type=ANOM_PROMISCUOUS msg=audit(1396577201.651:97): dev=br-ex prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1396577201.651:97): arch=c000003e syscall=46 success=yes exit=52 a0=10 a1=7fff571d2290 a2=0 a3=0 items=0 ppid=2737 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:kernel_t:s0 key=(null) type=ANOM_PROMISCUOUS msg=audit(1396577201.666:98): dev=eth0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1396577201.666:98): arch=c000003e syscall=46 success=yes exit=52 a0=10 a1=7fff571d2290 a2=0 a3=2 items=0 ppid=2737 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:kernel_t:s0 key=(null) type=SERVICE_STOP msg=audit(1396577202.869:99): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="mariadb" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577204.942:100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="mariadb" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577214.360:101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-keystone" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577214.425:102): pid=3630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=6C6F7365747570202D66202D2D73686F77202F6D6E742F73746174652F7661722F6C69622F63696E6465722F63696E6465722D766F6C756D65732D6261636B696E672D66696C65 terminal=? res=success' type=USER_START msg=audit(1396577214.427:103): pid=3630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577214.433:104): pid=3630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577221.549:105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-cinder-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577221.646:106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-cinder-scheduler" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577221.997:107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="qpidd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_STOP msg=audit(1396577221.997:108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="qpidd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577221.997:109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="qpidd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577227.410:110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="tgtd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577227.425:111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-cinder-volume" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577227.591:112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-swift-proxy" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577228.830:113): pid=3934 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D6F206E616D652063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396577228.830:114): pid=3934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577228.931:115): pid=3934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577228.947:116): pid=3953 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320707673202D2D6E6F68656164696E6773202D2D756E69743D67202D6F2076675F6E616D652C6E616D652C73697A652C66726565202D2D736570617261746F72203A202D2D6E6F737566666978 terminal=? res=success' type=USER_START msg=audit(1396577228.947:117): pid=3953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577229.008:118): pid=3953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577229.023:119): pid=3966 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396577229.023:120): pid=3966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577229.105:121): pid=3966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577229.106:122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-swift-account" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577229.165:123): pid=3975 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396577229.166:124): pid=3975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577229.199:125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-swift-account-auditor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577229.281:126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-swift-account-reaper" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577229.333:127): pid=3975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577229.366:128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-swift-account-replicator" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577229.479:129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-swift-container" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577229.593:130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-swift-container-auditor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577229.727:131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-swift-container-replicator" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577229.884:132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-swift-container-updater" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577230.032:133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-swift-object" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577230.157:134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-swift-object-auditor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577230.308:135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-swift-object-replicator" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577230.457:136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-swift-object-updater" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577230.610:137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="rsyncd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577238.359:138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-glance-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577238.449:139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-glance-registry" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577239.070:140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-heat-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577239.229:141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-heat-api-cfn" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577239.329:142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-heat-api-cloudwatch" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577247.175:143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-heat-engine" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577247.504:144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="neutron-dhcp-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577247.593:145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="neutron-dhcp-agent-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_STOP msg=audit(1396577247.600:146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="neutron-dhcp-agent-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577248.005:147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="neutron-metadata-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577248.185:148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="neutron-l3-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577248.901:149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="neutron-openvswitch-agent" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577249.074:150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="neutron-openvswitch-agent-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_STOP msg=audit(1396577249.075:151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="neutron-openvswitch-agent-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577250.136:152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="neutron-server" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577250.393:153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="neutron-server-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_STOP msg=audit(1396577250.405:154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="neutron-server-create-dir" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577250.702:155): pid=4431 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D202D2D69662D6578697374732064656C2D706F72742062722D696E742070617463682D74756E terminal=? res=success' type=USER_START msg=audit(1396577250.702:156): pid=4431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577250.825:157): pid=4431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577250.847:158): pid=4438 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064656C2D666C6F77732062722D696E74 terminal=? res=success' type=USER_START msg=audit(1396577250.848:159): pid=4438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577250.955:160): pid=4438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577250.976:161): pid=4441 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F772062722D696E7420686172645F74696D656F75743D302C69646C655F74696D656F75743D302C7072696F726974793D312C616374696F6E733D6E6F726D616C terminal=? res=success' type=USER_START msg=audit(1396577250.976:162): pid=4441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577251.093:163): pid=4441 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577251.114:164): pid=4444 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D202D2D69662D6578697374732064656C2D62722062722D74756E terminal=? res=success' type=USER_START msg=audit(1396577251.114:165): pid=4444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577251.225:166): pid=4444 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577251.245:167): pid=4447 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D202D2D6D61792D6578697374206164642D62722062722D74756E terminal=? res=success' type=USER_START msg=audit(1396577251.246:168): pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=ANOM_PROMISCUOUS msg=audit(1396577251.369:169): dev=br-tun prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1396577251.369:169): arch=c000003e syscall=46 success=yes exit=52 a0=10 a1=7fff571d2290 a2=0 a3=0 items=0 ppid=2737 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_END msg=audit(1396577251.384:170): pid=4447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577251.414:171): pid=4462 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206164642D706F72742062722D696E742070617463682D74756E202D2D2073657420496E746572666163652070617463682D74756E20747970653D7061746368206F7074696F6E733A706565723D70617463682D696E74 terminal=? res=success' type=USER_START msg=audit(1396577251.415:172): pid=4462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577251.565:173): pid=4462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577251.588:174): pid=4478 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420496E746572666163652070617463682D74756E206F66706F7274 terminal=? res=success' type=USER_START msg=audit(1396577251.588:175): pid=4478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577251.670:176): pid=4478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577251.678:177): pid=4482 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206164642D706F72742062722D74756E2070617463682D696E74202D2D2073657420496E746572666163652070617463682D696E7420747970653D7061746368206F7074696F6E733A706565723D70617463682D74756E terminal=? res=success' type=USER_START msg=audit(1396577251.679:178): pid=4482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577251.727:179): pid=4482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577251.743:180): pid=4485 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420496E746572666163652070617463682D696E74206F66706F7274 terminal=? res=success' type=USER_START msg=audit(1396577251.743:181): pid=4485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577251.823:182): pid=4485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577251.830:183): pid=4488 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064656C2D666C6F77732062722D74756E terminal=? res=success' type=USER_START msg=audit(1396577251.830:184): pid=4488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577251.889:185): pid=4488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577251.906:186): pid=4491 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F772062722D74756E20686172645F74696D656F75743D302C69646C655F74696D656F75743D302C7072696F726974793D312C696E5F706F72743D312C616374696F6E733D72657375626D6974282C3129 terminal=? res=success' type=USER_START msg=audit(1396577251.906:187): pid=4491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577251.984:188): pid=4491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577251.991:189): pid=4494 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F772062722D74756E20686172645F74696D656F75743D302C69646C655F74696D656F75743D302C7072696F726974793D302C616374696F6E733D64726F70 terminal=? res=success' type=USER_START msg=audit(1396577251.991:190): pid=4494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577252.045:191): pid=4494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577252.060:192): pid=4499 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F772062722D74756E20686172645F74696D656F75743D302C69646C655F74696D656F75743D302C7072696F726974793D302C7461626C653D312C646C5F6473743D30303A30303A30303A30303A30303A30302F30313A30303A30303A30303A30303A30302C616374696F6E733D72657375626D6974282C323029 terminal=? res=success' type=USER_START msg=audit(1396577252.060:193): pid=4499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577252.092:194): pid=4499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577252.100:195): pid=4502 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F772062722D74756E20686172645F74696D656F75743D302C69646C655F74696D656F75743D302C7072696F726974793D302C7461626C653D312C646C5F6473743D30313A30303A30303A30303A30303A30302F30313A30303A30303A30303A30303A30302C616374696F6E733D72657375626D6974282C323129 terminal=? res=success' type=USER_START msg=audit(1396577252.100:196): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577252.138:197): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577252.146:198): pid=4505 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F772062722D74756E20686172645F74696D656F75743D302C69646C655F74696D656F75743D302C7072696F726974793D302C7461626C653D322C616374696F6E733D64726F70 terminal=? res=success' type=USER_START msg=audit(1396577252.146:199): pid=4505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577252.190:200): pid=4505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577252.197:201): pid=4508 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F772062722D74756E20686172645F74696D656F75743D302C69646C655F74696D656F75743D302C7072696F726974793D302C7461626C653D332C616374696F6E733D64726F70 terminal=? res=success' type=USER_START msg=audit(1396577252.198:202): pid=4508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577252.260:203): pid=4508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577252.272:204): pid=4511 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd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terminal=? res=success' type=USER_START msg=audit(1396577252.272:205): pid=4511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577252.305:206): pid=4511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577252.311:207): pid=4514 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F772062722D74756E20686172645F74696D656F75743D302C69646C655F74696D656F75743D302C7072696F726974793D302C7461626C653D32302C616374696F6E733D72657375626D6974282C323129 terminal=? res=success' type=USER_START msg=audit(1396577252.312:208): pid=4514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577252.343:209): pid=4514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577252.351:210): pid=4517 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F772062722D74756E20686172645F74696D656F75743D302C69646C655F74696D656F75743D302C7072696F726974793D302C7461626C653D32312C616374696F6E733D64726F70 terminal=? res=success' type=USER_START msg=audit(1396577252.352:211): pid=4517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577252.384:212): pid=4517 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577252.391:213): pid=4520 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D6272 terminal=? res=success' type=USER_START msg=audit(1396577252.391:214): pid=4520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577252.422:215): pid=4520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577252.430:216): pid=4523 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D322062722D6765742D65787465726E616C2D69642062722D6578206272696467652D6964 terminal=? res=success' type=USER_START msg=audit(1396577252.430:217): pid=4523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577252.463:218): pid=4523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577252.517:219): pid=4526 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F767364622D636C69656E74206D6F6E69746F7220496E74657266616365206E616D652C6F66706F7274202D2D666F726D61743D6A736F6E terminal=? res=success' type=USER_START msg=audit(1396577252.517:220): pid=4526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577275.737:221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-nova-conductor" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577275.825:222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-nova-api" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577275.881:223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-nova-cert" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577275.961:224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-nova-scheduler" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577276.053:225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="openstack-nova-consoleauth" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577279.266:226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="httpd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_STOP msg=audit(1396577279.266:227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="httpd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577279.472:228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="httpd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577281.764:229): pid=4790 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E662069707461626C65732D73617665202D63 terminal=? res=success' type=USER_START msg=audit(1396577281.764:230): pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577281.884:231): pid=4790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577281.909:232): pid=4793 uid=162 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=6E6F76612D726F6F7477726170202F6574632F6E6F76612F726F6F74777261702E636F6E662069707461626C65732D726573746F7265202D63 terminal=? res=success' type=USER_START msg=audit(1396577281.909:233): pid=4793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=NETFILTER_CFG msg=audit(1396577282.022:234): table=nat family=2 entries=0 type=SYSCALL msg=audit(1396577282.022:234): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=41a396 a2=0 a3=0 items=0 ppid=4796 pid=4797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kernel_t:s0 key=(null) type=NETFILTER_CFG msg=audit(1396577282.023:235): table=nat family=2 entries=5 type=SYSCALL msg=audit(1396577282.023:235): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=aaa830 items=0 ppid=4794 pid=4795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null) type=NETFILTER_CFG msg=audit(1396577282.065:236): table=mangle family=2 entries=0 type=SYSCALL msg=audit(1396577282.065:236): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=41a396 a2=0 a3=0 items=0 ppid=4803 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kernel_t:s0 key=(null) type=NETFILTER_CFG msg=audit(1396577282.067:237): table=mangle family=2 entries=6 type=SYSCALL msg=audit(1396577282.067:237): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=aaa260 items=0 ppid=4794 pid=4795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null) type=NETFILTER_CFG msg=audit(1396577282.068:238): table=filter family=2 entries=4 type=SYSCALL msg=audit(1396577282.068:238): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=aac820 items=0 ppid=4794 pid=4795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_END msg=audit(1396577282.073:239): pid=4793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577284.419:240): pid=4811 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396577284.419:241): pid=4811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577284.461:242): pid=4811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577285.270:243): pid=4815 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd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terminal=? res=success' type=USER_START msg=audit(1396577285.272:244): pid=4815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577285.357:245): pid=4815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577285.371:246): pid=4819 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420496E74657266616365206772652D3139322E302E322E35206F66706F7274 terminal=? res=success' type=USER_START msg=audit(1396577285.371:247): pid=4819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577285.433:248): pid=4819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577285.445:249): pid=4822 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F772062722D74756E20686172645F74696D656F75743D302C69646C655F74696D656F75743D302C7072696F726974793D312C696E5F706F72743D322C616374696F6E733D72657375626D6974282C3229 terminal=? res=success' type=USER_START msg=audit(1396577285.445:250): pid=4822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577285.499:251): pid=4822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1396577285.647:252): pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=e6:bf:b9:e7:42:87:7b:da:56:79:dc:1c:d6:89:cf:08 direction=? spid=4826 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1396577285.647:253): pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=7d:a8:50:0e:18:d4:a2:64:dc:08:9c:57:96:3f:1f:b3 direction=? spid=4826 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=AVC msg=audit(1396577285.647:254): avc: denied { dyntransition } for pid=4826 comm="sshd" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:sshd_net_t:s0 tclass=process type=SYSCALL msg=audit(1396577285.647:254): arch=c000003e syscall=1 success=yes exit=32 a0=6 a1=7f470b027c20 a2=20 a3=7fffd9116f50 items=0 ppid=4825 pid=4826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_net_t:s0 key=(null) type=AVC msg=audit(1396577285.648:255): avc: denied { search } for pid=4826 comm="sshd" name="var" dev="vda1" ino=96673 scontext=system_u:system_r:sshd_net_t:s0 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=dir type=SYSCALL msg=audit(1396577285.648:255): arch=c000003e syscall=161 success=yes exit=0 a0=7f4709a424a8 a1=1 a2=7f4706f0f770 a3=7fffd9116f50 items=0 ppid=4825 pid=4826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_net_t:s0 key=(null) type=CRYPTO_SESSION msg=audit(1396577285.649:256): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4826 suid=74 rport=35098 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=CRYPTO_SESSION msg=audit(1396577285.649:257): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4826 suid=74 rport=35098 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=USER_AUTH msg=audit(1396577285.758:258): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=pubkey_auth rport=35098 acct="heat-admin" exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=USER_AUTH msg=audit(1396577285.759:259): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=key algo=ssh-rsa size=2048 fp=d0:f4:fd:54:97:fd:9a:5e:b5:c1:41:79:28:ad:52:32 rport=35098 acct="heat-admin" exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=USER_ACCT msg=audit(1396577285.780:260): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="heat-admin" exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=CRYPTO_KEY_USER msg=audit(1396577285.781:261): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=session fp=? direction=both spid=4826 suid=74 rport=35098 laddr=192.0.2.8 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=AVC msg=audit(1396577285.782:262): avc: denied { sigchld } for pid=4825 comm="sshd" scontext=system_u:system_r:sshd_net_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process type=SYSCALL msg=audit(1396577285.782:262): arch=c000003e syscall=61 success=yes exit=4826 a0=12da a1=7fffd91172a0 a2=0 a3=0 items=0 ppid=856 pid=4825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_AUTH msg=audit(1396577285.783:263): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=success acct="heat-admin" exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=ssh res=success' type=CRED_ACQ msg=audit(1396577285.797:264): pid=4825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="heat-admin" exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=LOGIN msg=audit(1396577285.797:265): pid=4825 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=1 res=1 type=USER_ROLE_CHANGE msg=audit(1396577285.909:266): pid=4825 uid=0 auid=1001 ses=1 subj=system_u:system_r:kernel_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0 selected-context=unconfined_u:unconfined_r:unconfined_t:s0 exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=USER_START msg=audit(1396577285.950:267): pid=4825 uid=0 auid=1001 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="heat-admin" exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=CRYPTO_KEY_USER msg=audit(1396577285.951:268): pid=4825 uid=0 auid=1001 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=session fp=? direction=both spid=4825 suid=0 rport=35098 laddr=192.0.2.8 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1396577285.952:269): pid=4830 uid=0 auid=1001 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=e6:bf:b9:e7:42:87:7b:da:56:79:dc:1c:d6:89:cf:08 direction=? spid=4830 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1396577285.952:270): pid=4830 uid=0 auid=1001 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=7d:a8:50:0e:18:d4:a2:64:dc:08:9c:57:96:3f:1f:b3 direction=? spid=4830 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=CRED_ACQ msg=audit(1396577285.953:271): pid=4830 uid=0 auid=1001 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="heat-admin" exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=AVC msg=audit(1396577285.953:272): avc: denied { dyntransition } for pid=4830 comm="sshd" scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=process type=SYSCALL msg=audit(1396577285.953:272): arch=c000003e syscall=1 success=yes exit=42 a0=7 a1=7f470b0255d0 a2=2a a3=666e6f636e753a72 items=0 ppid=4825 pid=4830 auid=1001 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=1 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=unconfined_u:unconfined_r:unconfined_t:s0 key=(null) type=USER_LOGIN msg=audit(1396577285.963:273): pid=4825 uid=0 auid=1001 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1396577285.963:274): pid=4825 uid=0 auid=1001 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1396577285.963:275): pid=4825 uid=0 auid=1001 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=USER_ACCT msg=audit(1396577285.974:276): pid=4828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="heat-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1396577285.976:277): pid=4828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="heat-admin" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577286.014:278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="user@1001" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577286.018:279): pid=4825 uid=0 auid=1001 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRYPTO_KEY_USER msg=audit(1396577286.022:280): pid=4825 uid=0 auid=1001 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=session fp=? direction=both spid=4830 suid=1001 rport=35098 laddr=192.0.2.8 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=USER_END msg=audit(1396577286.023:281): pid=4825 uid=0 auid=1001 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="heat-admin" exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=CRED_DISP msg=audit(1396577286.024:282): pid=4825 uid=0 auid=1001 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="heat-admin" exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=USER_END msg=audit(1396577286.024:283): pid=4825 uid=0 auid=1001 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=USER_LOGOUT msg=audit(1396577286.025:284): pid=4825 uid=0 auid=1001 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=CRYPTO_KEY_USER msg=audit(1396577286.025:285): pid=4825 uid=0 auid=1001 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=e6:bf:b9:e7:42:87:7b:da:56:79:dc:1c:d6:89:cf:08 direction=? spid=4825 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1396577286.025:286): pid=4825 uid=0 auid=1001 ses=1 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=7d:a8:50:0e:18:d4:a2:64:dc:08:9c:57:96:3f:1f:b3 direction=? spid=4825 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=USER_AVC msg=audit(1396577286.028:287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: denied { status } for auid=-1 uid=-1 gid=-1 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=service exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=USER_AVC msg=audit(1396577286.029:288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='avc: denied { stop } for auid=-1 uid=-1 gid=-1 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=service exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' type=CRYPTO_KEY_USER msg=audit(1396577286.041:289): pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=e6:bf:b9:e7:42:87:7b:da:56:79:dc:1c:d6:89:cf:08 direction=? spid=4840 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1396577286.042:290): pid=4840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=7d:a8:50:0e:18:d4:a2:64:dc:08:9c:57:96:3f:1f:b3 direction=? spid=4840 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=AVC msg=audit(1396577286.042:291): avc: denied { dyntransition } for pid=4840 comm="sshd" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:sshd_net_t:s0 tclass=process type=SYSCALL msg=audit(1396577286.042:291): arch=c000003e syscall=1 success=yes exit=32 a0=6 a1=7fb16e5997f0 a2=20 a3=7fffad9b9890 items=0 ppid=4839 pid=4840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_net_t:s0 key=(null) type=AVC msg=audit(1396577286.042:292): avc: denied { search } for pid=4840 comm="sshd" name="var" dev="vda1" ino=96673 scontext=system_u:system_r:sshd_net_t:s0 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=dir type=SYSCALL msg=audit(1396577286.042:292): arch=c000003e syscall=161 success=yes exit=0 a0=7fb16d0664a8 a1=1 a2=7fb16a533770 a3=7fffad9b9890 items=0 ppid=4839 pid=4840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_net_t:s0 key=(null) type=CRYPTO_SESSION msg=audit(1396577286.043:293): pid=4839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4840 suid=74 rport=35105 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=CRYPTO_SESSION msg=audit(1396577286.043:294): pid=4839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=4840 suid=74 rport=35105 laddr=192 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=USER_AUTH msg=audit(1396577286.098:295): pid=4839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=pubkey_auth rport=35105 acct="heat-admin" exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=USER_AUTH msg=audit(1396577286.098:296): pid=4839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=key algo=ssh-rsa size=2048 fp=d0:f4:fd:54:97:fd:9a:5e:b5:c1:41:79:28:ad:52:32 rport=35105 acct="heat-admin" exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=USER_ACCT msg=audit(1396577286.100:297): pid=4839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="heat-admin" exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=CRYPTO_KEY_USER msg=audit(1396577286.101:298): pid=4839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=session fp=? direction=both spid=4840 suid=74 rport=35105 laddr=192.0.2.8 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=AVC msg=audit(1396577286.103:299): avc: denied { sigchld } for pid=4839 comm="sshd" scontext=system_u:system_r:sshd_net_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process type=SYSCALL msg=audit(1396577286.103:299): arch=c000003e syscall=61 success=yes exit=4840 a0=12e8 a1=7fffad9b9be0 a2=0 a3=0 items=0 ppid=856 pid=4839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_AUTH msg=audit(1396577286.103:300): pid=4839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=success acct="heat-admin" exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=ssh res=success' type=CRED_ACQ msg=audit(1396577286.103:301): pid=4839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="heat-admin" exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=LOGIN msg=audit(1396577286.103:302): pid=4839 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=2 res=1 type=USER_ROLE_CHANGE msg=audit(1396577286.203:303): pid=4839 uid=0 auid=1001 ses=2 subj=system_u:system_r:kernel_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0 selected-context=unconfined_u:unconfined_r:unconfined_t:s0 exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=USER_START msg=audit(1396577286.218:304): pid=4839 uid=0 auid=1001 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="heat-admin" exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=CRYPTO_KEY_USER msg=audit(1396577286.218:305): pid=4839 uid=0 auid=1001 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=session fp=? direction=both spid=4839 suid=0 rport=35105 laddr=192.0.2.8 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1396577286.219:306): pid=4842 uid=0 auid=1001 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=e6:bf:b9:e7:42:87:7b:da:56:79:dc:1c:d6:89:cf:08 direction=? spid=4842 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1396577286.219:307): pid=4842 uid=0 auid=1001 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=7d:a8:50:0e:18:d4:a2:64:dc:08:9c:57:96:3f:1f:b3 direction=? spid=4842 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=CRED_ACQ msg=audit(1396577286.220:308): pid=4842 uid=0 auid=1001 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="heat-admin" exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=AVC msg=audit(1396577286.220:309): avc: denied { dyntransition } for pid=4842 comm="sshd" scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=process type=SYSCALL msg=audit(1396577286.220:309): arch=c000003e syscall=1 success=yes exit=42 a0=7 a1=7fb16e5974c0 a2=2a a3=666e6f636e753a72 items=0 ppid=4839 pid=4842 auid=1001 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=2 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=unconfined_u:unconfined_r:unconfined_t:s0 key=(null) type=USER_LOGIN msg=audit(1396577286.226:310): pid=4839 uid=0 auid=1001 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1396577286.226:311): pid=4839 uid=0 auid=1001 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1396577286.227:312): pid=4839 uid=0 auid=1001 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=USER_CMD msg=audit(1396577286.257:313): pid=4843 uid=1001 auid=1001 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='cwd="/home/heat-admin" cmd=6B657973746F6E652D6D616E61676520706B695F7365747570202D2D6B657973746F6E652D75736572206B657973746F6E65202D2D6B657973746F6E652D67726F7570206B657973746F6E65 terminal=pts/0 res=success' type=USER_START msg=audit(1396577286.259:314): pid=4843 uid=0 auid=1001 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1396577287.179:315): pid=4843 uid=0 auid=1001 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1396577287.180:316): pid=4839 uid=0 auid=1001 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRYPTO_KEY_USER msg=audit(1396577287.180:317): pid=4839 uid=0 auid=1001 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=session fp=? direction=both spid=4842 suid=1001 rport=35105 laddr=192.0.2.8 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=USER_END msg=audit(1396577287.183:318): pid=4839 uid=0 auid=1001 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="heat-admin" exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=CRED_DISP msg=audit(1396577287.184:319): pid=4839 uid=0 auid=1001 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="heat-admin" exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=USER_END msg=audit(1396577287.184:320): pid=4839 uid=0 auid=1001 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=USER_LOGOUT msg=audit(1396577287.184:321): pid=4839 uid=0 auid=1001 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=CRYPTO_KEY_USER msg=audit(1396577287.184:322): pid=4839 uid=0 auid=1001 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=e6:bf:b9:e7:42:87:7b:da:56:79:dc:1c:d6:89:cf:08 direction=? spid=4839 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1396577287.185:323): pid=4839 uid=0 auid=1001 ses=2 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=7d:a8:50:0e:18:d4:a2:64:dc:08:9c:57:96:3f:1f:b3 direction=? spid=4839 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=USER_CMD msg=audit(1396577299.147:324): pid=4886 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd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terminal=? res=success' type=USER_START msg=audit(1396577299.148:325): pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577299.235:326): pid=4886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577299.248:327): pid=4890 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420496E74657266616365206772652D3139322E302E322E37206F66706F7274 terminal=? res=success' type=USER_START msg=audit(1396577299.249:328): pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577299.311:329): pid=4890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577299.325:330): pid=4893 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F772062722D74756E20686172645F74696D656F75743D302C69646C655F74696D656F75743D302C7072696F726974793D312C696E5F706F72743D332C616374696F6E733D72657375626D6974282C3229 terminal=? res=success' type=USER_START msg=audit(1396577299.325:331): pid=4893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577299.387:332): pid=4893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577312.555:333): pid=4940 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success' type=USER_START msg=audit(1396577312.555:334): pid=4940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577312.603:335): pid=4940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577312.613:336): pid=4943 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C65787465726E616C5F6964732C6F66706F7274206C69737420496E74657266616365 terminal=? res=success' type=USER_START msg=audit(1396577312.614:337): pid=4943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577312.659:338): pid=4943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577312.667:339): pid=4946 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D6578 terminal=? res=success' type=USER_START msg=audit(1396577312.667:340): pid=4946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577312.704:341): pid=4946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577312.712:342): pid=4949 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C65787465726E616C5F6964732C6F66706F7274206C69737420496E74657266616365 terminal=? res=success' type=USER_START msg=audit(1396577312.713:343): pid=4949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577312.751:344): pid=4949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577312.824:345): pid=4952 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd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terminal=? res=success' type=USER_START msg=audit(1396577312.824:346): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577312.942:347): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577312.958:348): pid=4955 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420496E74657266616365206772652D3139322E302E322E35206F66706F7274 terminal=? res=success' type=USER_START msg=audit(1396577312.959:349): pid=4955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577313.013:350): pid=4955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577313.022:351): pid=4958 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F772062722D74756E20686172645F74696D656F75743D302C69646C655F74696D656F75743D302C7072696F726974793D312C696E5F706F72743D322C616374696F6E733D72657375626D6974282C3229 terminal=? res=success' type=USER_START msg=audit(1396577313.022:352): pid=4958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577313.072:353): pid=4958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577313.085:354): pid=4961 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd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terminal=? res=success' type=USER_START msg=audit(1396577313.086:355): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577313.134:356): pid=4961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577313.143:357): pid=4964 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420496E74657266616365206772652D3139322E302E322E37206F66706F7274 terminal=? res=success' type=USER_START msg=audit(1396577313.143:358): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577313.181:359): pid=4964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577313.190:360): pid=4967 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F772062722D74756E20686172645F74696D656F75743D302C69646C655F74696D656F75743D302C7072696F726974793D312C696E5F706F72743D332C616374696F6E733D72657375626D6974282C3229 terminal=? res=success' type=USER_START msg=audit(1396577313.190:361): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577313.234:362): pid=4967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577313.665:363): pid=4975 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970202D6F206E65746E73206C697374 terminal=? res=success' type=USER_START msg=audit(1396577313.666:364): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577313.701:365): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577313.709:366): pid=4978 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E73206164642071726F757465722D61316233346638322D323238352D343564382D386234612D653665623962643534356535 terminal=? res=success' type=USER_START msg=audit(1396577313.709:367): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=NETFILTER_CFG msg=audit(1396577313.740:368): table=filter family=2 entries=0 type=NETFILTER_CFG msg=audit(1396577313.740:368): table=nat family=2 entries=0 type=NETFILTER_CFG msg=audit(1396577313.740:368): table=mangle family=2 entries=0 type=SYSCALL msg=audit(1396577313.740:368): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fff54cdc7f0 items=0 ppid=4979 pid=4980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_END msg=audit(1396577313.748:369): pid=4978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577313.755:370): pid=4982 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D653665623962643534356535206970206C696E6B20736574206C6F207570 terminal=? res=success' type=USER_START msg=audit(1396577313.756:371): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577313.790:372): pid=4982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577313.798:373): pid=4985 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D6536656239626435343565352073797363746C202D77206E65742E697076342E69705F666F72776172643D31 terminal=? res=success' type=USER_START msg=audit(1396577313.799:374): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577313.832:375): pid=4985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577313.842:376): pid=4988 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D6536656239626435343565352069707461626C65732D73617665202D63 terminal=? res=success' type=USER_START msg=audit(1396577313.842:377): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577313.876:378): pid=4988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577313.894:379): pid=4991 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D6536656239626435343565352069707461626C65732D726573746F7265202D63 terminal=? res=success' type=USER_START msg=audit(1396577313.894:380): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=NETFILTER_CFG msg=audit(1396577313.936:381): table=mangle family=2 entries=6 type=SYSCALL msg=audit(1396577313.936:381): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=ca5850 items=0 ppid=4992 pid=4993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null) type=NETFILTER_CFG msg=audit(1396577313.936:382): table=nat family=2 entries=5 type=SYSCALL msg=audit(1396577313.936:382): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=ca8d80 items=0 ppid=4992 pid=4993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null) type=NETFILTER_CFG msg=audit(1396577313.939:383): table=filter family=2 entries=4 type=SYSCALL msg=audit(1396577313.939:383): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=ca8e90 items=0 ppid=4992 pid=4993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_END msg=audit(1396577313.946:384): pid=4991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577313.965:385): pid=4996 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D653665623962643534356535206E657574726F6E2D6E732D6D657461646174612D70726F7879202D2D7069645F66696C653D2F7661722F72756E2F6E657574726F6E2F65787465726E616C2F706964732F61316233346638322D323238352D343564382D386234612D6536656239626435343565352E706964202D2D6D657461646174615F70726F78795F736F636B65743D2F7661722F72756E2F6E657574726F6E2F6D657461646174615F70726F7879202D2D726F757465725F69643D61316233346638322D323238352D343564382D386234612D653665623962643534356535202D2D73746174655F706174683D2F7661722F72756E2F6E657574726F6E202D2D6D657461646174615F706F72743D39363937202D2D766572626F7365202D2D6C6F672D66696C653D6E657574726F6E2D6E732D6D657461646174612D70726F78792D61316233346638322D323238352D343564382D386234612D6536656239626435343565352E6C6F67202D2D6C6F672D6469723D2F7661722F6C6F672F6E657574726F6E terminal=? res=success' type=USER_START msg=audit(1396577313.965:386): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577314.856:387): pid=4996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577315.715:388): pid=5013 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D653665623962643534356535206970202D6F206C696E6B2073686F772071722D31386435616263302D3166 terminal=? res=success' type=USER_START msg=audit(1396577315.715:389): pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577315.785:390): pid=5013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577315.812:391): pid=5021 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D653665623962643534356535206970202D6F206C696E6B2073686F772071722D31386435616263302D3166 terminal=? res=success' type=USER_START msg=audit(1396577315.813:392): pid=5021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577315.870:393): pid=5021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577315.904:394): pid=5032 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd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terminal=? res=success' type=USER_START msg=audit(1396577315.905:395): pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=ANOM_PROMISCUOUS msg=audit(1396577315.985:396): dev=qr-18d5abc0-1f prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1396577315.985:396): arch=c000003e syscall=46 success=yes exit=60 a0=10 a1=7fff571d2290 a2=0 a3=0 items=0 ppid=2737 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_END msg=audit(1396577315.999:397): pid=5032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577316.027:398): pid=5046 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206C696E6B207365742071722D31386435616263302D316620616464726573732066613A31363A33653A32633A31613A3365 terminal=? res=success' type=USER_START msg=audit(1396577316.027:399): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577316.073:400): pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577316.082:401): pid=5062 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970202D6F206E65746E73206C697374 terminal=? res=success' type=USER_START msg=audit(1396577316.082:402): pid=5062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577316.118:403): pid=5062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577316.126:404): pid=5065 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206C696E6B207365742071722D31386435616263302D3166206E65746E732071726F757465722D61316233346638322D323238352D343564382D386234612D653665623962643534356535 terminal=? res=success' type=USER_START msg=audit(1396577316.126:405): pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577316.164:406): pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577316.173:407): pid=5071 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D653665623962643534356535206970206C696E6B207365742071722D31386435616263302D3166207570 terminal=? res=success' type=USER_START msg=audit(1396577316.174:408): pid=5071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577316.209:409): pid=5071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577316.217:410): pid=5079 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D65366562396264353435653520697020616464722073686F772071722D31386435616263302D3166207065726D616E656E742073636F706520676C6F62616C terminal=? res=success' type=USER_START msg=audit(1396577316.218:411): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577316.260:412): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577316.276:413): pid=5082 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D653665623962643534356535206970202D342061646472206164642031302E302E302E312F38206272642031302E3235352E3235352E3235352073636F706520676C6F62616C206465762071722D31386435616263302D3166 terminal=? res=success' type=USER_START msg=audit(1396577316.276:414): pid=5082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577316.339:415): pid=5082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577316.760:416): pid=5091 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success' type=USER_START msg=audit(1396577316.761:417): pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577316.799:418): pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577316.807:419): pid=5094 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C65787465726E616C5F6964732C6F66706F7274206C69737420496E74657266616365 terminal=? res=success' type=USER_START msg=audit(1396577316.808:420): pid=5094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577316.851:421): pid=5094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577316.917:422): pid=5097 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E662069707461626C65732D73617665202D63 terminal=? res=success' type=USER_START msg=audit(1396577316.917:423): pid=5097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577316.993:424): pid=5097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577317.011:425): pid=5100 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E662069707461626C65732D726573746F7265202D63 terminal=? res=success' type=USER_START msg=audit(1396577317.011:426): pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=NETFILTER_CFG msg=audit(1396577317.075:427): table=mangle family=2 entries=9 type=SYSCALL msg=audit(1396577317.075:427): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1ad1370 items=0 ppid=5101 pid=5102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null) type=NETFILTER_CFG msg=audit(1396577317.075:428): table=nat family=2 entries=23 type=SYSCALL msg=audit(1396577317.075:428): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1ad2c50 items=0 ppid=5101 pid=5102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null) type=NETFILTER_CFG msg=audit(1396577317.076:429): table=filter family=2 entries=21 type=SYSCALL msg=audit(1396577317.076:429): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=1ad4bd0 items=0 ppid=5101 pid=5102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_END msg=audit(1396577317.086:430): pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577317.102:431): pid=5103 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970367461626C65732D73617665202D63 terminal=? res=success' type=USER_START msg=audit(1396577317.102:432): pid=5103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577317.161:433): pid=5103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577317.191:434): pid=5107 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970367461626C65732D726573746F7265202D63 terminal=? res=success' type=USER_START msg=audit(1396577317.191:435): pid=5107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=NETFILTER_CFG msg=audit(1396577317.330:436): table=filter family=10 entries=0 type=NETFILTER_CFG msg=audit(1396577317.330:436): table=filter family=10 entries=0 type=SYSCALL msg=audit(1396577317.330:436): arch=c000003e syscall=313 success=yes exit=0 a0=0 a1=41a396 a2=0 a3=0 items=0 ppid=5111 pid=5112 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="modprobe" exe="/usr/bin/kmod" subj=system_u:system_r:kernel_t:s0 key=(null) type=NETFILTER_CFG msg=audit(1396577317.333:437): table=filter family=10 entries=4 type=SYSCALL msg=audit(1396577317.333:437): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=29 a2=40 a3=1c23ba0 items=0 ppid=5108 pid=5109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_END msg=audit(1396577317.345:438): pid=5107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577317.368:439): pid=5113 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D65787465726E616C5F6964732C6E616D652C6F66706F72742066696E6420496E746572666163652065787465726E616C5F6964733A69666163652D69643D2231386435616263302D316632642D343464382D396162652D65326338303137336465303422 terminal=? res=success' type=USER_START msg=audit(1396577317.369:440): pid=5113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577317.452:441): pid=5113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577317.463:442): pid=5117 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302069666163652D746F2D62722071722D31386435616263302D3166 terminal=? res=success' type=USER_START msg=audit(1396577317.464:443): pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577317.563:444): pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577317.817:445): pid=5125 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206D6F642D666C6F77732062722D74756E20686172645F74696D656F75743D302C69646C655F74696D656F75743D302C7072696F726974793D312C7461626C653D32312C646C5F766C616E3D312C616374696F6E733D73747269705F766C616E2C7365745F74756E6E656C3A312C6F75747075743A322C33 terminal=? res=success' type=USER_START msg=audit(1396577317.817:446): pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577317.866:447): pid=5128 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D653665623962643534356535206970202D6F206C696E6B2073686F772071672D61326164393432392D3632 terminal=? res=success' type=USER_START msg=audit(1396577317.866:448): pid=5128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577317.945:449): pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577317.969:450): pid=5131 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C206164642D666C6F772062722D74756E20686172645F74696D656F75743D302C69646C655F74696D656F75743D302C7072696F726974793D312C7461626C653D322C74756E5F69643D312C616374696F6E733D6D6F645F766C616E5F7669643A312C72657375626D6974282C313029 terminal=? res=success' type=USER_START msg=audit(1396577317.969:451): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577317.998:452): pid=5128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577318.039:453): pid=5139 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd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terminal=? res=success' type=USER_START msg=audit(1396577318.039:454): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577318.072:455): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577318.095:456): pid=5142 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420506F72742071722D31386435616263302D316620746167 terminal=? res=success' type=USER_START msg=audit(1396577318.096:457): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=ANOM_PROMISCUOUS msg=audit(1396577318.146:458): dev=qg-a2ad9429-62 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1396577318.146:458): arch=c000003e syscall=46 success=yes exit=60 a0=10 a1=7fff571d2290 a2=0 a3=0 items=0 ppid=2737 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_END msg=audit(1396577318.162:459): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577318.193:460): pid=5156 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206C696E6B207365742071672D61326164393432392D363220616464726573732066613A31363A33653A33373A31623A3239 terminal=? res=success' type=USER_START msg=audit(1396577318.193:461): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577318.227:462): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577318.249:463): pid=5171 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302073657420506F72742071722D31386435616263302D3166207461673D31 terminal=? res=success' type=USER_START msg=audit(1396577318.249:464): pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577318.305:465): pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577318.329:466): pid=5174 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970202D6F206E65746E73206C697374 terminal=? res=success' type=USER_START msg=audit(1396577318.329:467): pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577318.358:468): pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577318.379:469): pid=5177 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064656C2D666C6F77732062722D696E7420696E5F706F72743D32 terminal=? res=success' type=USER_START msg=audit(1396577318.379:470): pid=5177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577318.434:471): pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577318.456:472): pid=5180 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206C696E6B207365742071672D61326164393432392D3632206E65746E732071726F757465722D61316233346638322D323238352D343564382D386234612D653665623962643534356535 terminal=? res=success' type=USER_START msg=audit(1396577318.456:473): pid=5180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577318.483:474): pid=5177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577318.593:475): pid=5180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577318.624:476): pid=5190 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D6578 terminal=? res=success' type=USER_START msg=audit(1396577318.624:477): pid=5190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577318.627:478): pid=5188 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D653665623962643534356535206970206C696E6B207365742071672D61326164393432392D3632207570 terminal=? res=success' type=USER_START msg=audit(1396577318.627:479): pid=5188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577318.741:480): pid=5188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577318.761:481): pid=5190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577318.766:482): pid=5198 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D65366562396264353435653520697020616464722073686F772071672D61326164393432392D3632207065726D616E656E742073636F706520676C6F62616C terminal=? res=success' type=USER_START msg=audit(1396577318.766:483): pid=5198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577318.785:484): pid=5199 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C65787465726E616C5F6964732C6F66706F7274206C69737420496E74657266616365 terminal=? res=success' type=USER_START msg=audit(1396577318.785:485): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577318.868:486): pid=5198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577318.890:487): pid=5199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577318.892:488): pid=5204 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D653665623962643534356535206970202D34206164647220616464203139322E302E322E34352F323420627264203139322E302E322E3235352073636F706520676C6F62616C206465762071672D61326164393432392D3632 terminal=? res=success' type=USER_START msg=audit(1396577318.892:489): pid=5204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577319.016:490): pid=5204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577319.041:491): pid=5207 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D65366562396264353435653520726F757465206164642064656661756C74206777203139322E302E322E31 terminal=? res=success' type=USER_START msg=audit(1396577319.041:492): pid=5207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577319.106:493): pid=5209 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success' type=USER_START msg=audit(1396577319.107:494): pid=5209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577319.161:495): pid=5207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577319.187:496): pid=5212 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D6536656239626435343565352069707461626C65732D73617665202D63 terminal=? res=success' type=USER_START msg=audit(1396577319.188:497): pid=5212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577319.230:498): pid=5209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577319.263:499): pid=5215 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C65787465726E616C5F6964732C6F66706F7274206C69737420496E74657266616365 terminal=? res=success' type=USER_START msg=audit(1396577319.264:500): pid=5215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577319.349:501): pid=5212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577319.374:502): pid=5218 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D6536656239626435343565352069707461626C65732D726573746F7265202D63 terminal=? res=success' type=USER_START msg=audit(1396577319.374:503): pid=5218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577319.421:504): pid=5215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577319.445:505): pid=5221 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D6578 terminal=? res=success' type=USER_START msg=audit(1396577319.447:506): pid=5221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=NETFILTER_CFG msg=audit(1396577319.477:507): table=mangle family=2 entries=6 type=SYSCALL msg=audit(1396577319.477:507): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=24f9850 items=0 ppid=5219 pid=5223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null) type=NETFILTER_CFG msg=audit(1396577319.495:508): table=nat family=2 entries=24 type=SYSCALL msg=audit(1396577319.495:508): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=24fe6e0 items=0 ppid=5219 pid=5223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null) type=NETFILTER_CFG msg=audit(1396577319.510:509): table=filter family=2 entries=21 type=SYSCALL msg=audit(1396577319.510:509): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=24fe250 items=0 ppid=5219 pid=5223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_END msg=audit(1396577319.522:510): pid=5218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577319.556:511): pid=5228 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D65366562396264353435653520697020616464722073686F772071672D61326164393432392D3632 terminal=? res=success' type=USER_START msg=audit(1396577319.557:512): pid=5228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577319.574:513): pid=5221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577319.599:514): pid=5231 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C65787465726E616C5F6964732C6F66706F7274206C69737420496E74657266616365 terminal=? res=success' type=USER_START msg=audit(1396577319.601:515): pid=5231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577319.683:516): pid=5228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577319.729:517): pid=5231 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577338.836:518): pid=5334 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071646863702D62626137623163332D353464322D346135642D613261632D393334396361633632306461206970202D6F206C696E6B2073686F772074617063353833316230362D6162 terminal=? res=success' type=USER_START msg=audit(1396577338.837:519): pid=5334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577338.963:520): pid=5334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577339.012:521): pid=5340 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071646863702D62626137623163332D353464322D346135642D613261632D393334396361633632306461206970202D6F206C696E6B2073686F772074617063353833316230362D6162 terminal=? res=success' type=USER_START msg=audit(1396577339.013:522): pid=5340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577339.123:523): pid=5342 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success' type=USER_START msg=audit(1396577339.127:524): pid=5342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577339.292:525): pid=5340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577339.398:526): pid=5346 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=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 terminal=? res=success' type=USER_START msg=audit(1396577339.400:527): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577339.445:528): pid=5342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577339.495:529): pid=5349 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C65787465726E616C5F6964732C6F66706F7274206C69737420496E74657266616365 terminal=? res=success' type=USER_START msg=audit(1396577339.497:530): pid=5349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=ANOM_PROMISCUOUS msg=audit(1396577339.671:531): dev=tapc5831b06-ab prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1396577339.671:531): arch=c000003e syscall=46 success=yes exit=60 a0=10 a1=7fff571d2290 a2=0 a3=0 items=0 ppid=2737 pid=2738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ovs-vswitchd" exe="/usr/sbin/ovs-vswitchd" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_END msg=audit(1396577339.693:532): pid=5346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577339.761:533): pid=5364 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206C696E6B207365742074617063353833316230362D616220616464726573732066613A31363A33653A34663A66343A3161 terminal=? res=success' type=USER_START msg=audit(1396577339.762:534): pid=5364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577339.792:535): pid=5349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577339.862:536): pid=5376 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D6578 terminal=? res=success' type=USER_START msg=audit(1396577339.865:537): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577340.040:538): pid=5364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577340.095:539): pid=5387 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970202D6F206E65746E73206C697374 terminal=? res=success' type=USER_START msg=audit(1396577340.099:540): pid=5387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577340.141:541): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577340.192:542): pid=5390 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C65787465726E616C5F6964732C6F66706F7274206C69737420496E74657266616365 terminal=? res=success' type=USER_START msg=audit(1396577340.192:543): pid=5390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577340.353:544): pid=5387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577340.406:545): pid=5393 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E73206164642071646863702D62626137623163332D353464322D346135642D613261632D393334396361633632306461 terminal=? res=success' type=USER_START msg=audit(1396577340.408:546): pid=5393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577340.466:547): pid=5390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=NETFILTER_CFG msg=audit(1396577340.700:548): table=filter family=2 entries=0 type=NETFILTER_CFG msg=audit(1396577340.700:548): table=nat family=2 entries=0 type=NETFILTER_CFG msg=audit(1396577340.700:548): table=mangle family=2 entries=0 type=NETFILTER_CFG msg=audit(1396577340.700:548): table=filter family=10 entries=0 type=SYSCALL msg=audit(1396577340.700:548): arch=c000003e syscall=272 success=yes exit=0 a0=40000000 a1=c0 a2=0 a3=7fffce254bb0 items=0 ppid=5395 pid=5396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip" exe="/usr/sbin/ip" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_END msg=audit(1396577340.751:549): pid=5393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577340.820:550): pid=5397 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071646863702D62626137623163332D353464322D346135642D613261632D393334396361633632306461206970206C696E6B20736574206C6F207570 terminal=? res=success' type=USER_START msg=audit(1396577340.821:551): pid=5397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577341.012:552): pid=5397 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577341.054:553): pid=5400 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206C696E6B207365742074617063353833316230362D6162206E65746E732071646863702D62626137623163332D353464322D346135642D613261632D393334396361633632306461 terminal=? res=success' type=USER_START msg=audit(1396577341.054:554): pid=5400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577341.131:555): pid=5402 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D696E74 terminal=? res=success' type=USER_START msg=audit(1396577341.134:556): pid=5402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577341.320:557): pid=5400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577341.379:558): pid=5412 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071646863702D62626137623163332D353464322D346135642D613261632D393334396361633632306461206970206C696E6B207365742074617063353833316230362D6162207570 terminal=? res=success' type=USER_START msg=audit(1396577341.386:559): pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577341.427:560): pid=5402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577341.477:561): pid=5417 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C65787465726E616C5F6964732C6F66706F7274206C69737420496E74657266616365 terminal=? res=success' type=USER_START msg=audit(1396577341.479:562): pid=5417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577341.674:563): pid=5412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577341.731:564): pid=5424 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071646863702D62626137623163332D353464322D346135642D613261632D39333439636163363230646120697020616464722073686F772074617063353833316230362D6162207065726D616E656E742073636F706520676C6F62616C terminal=? res=success' type=USER_START msg=audit(1396577341.732:565): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577341.787:566): pid=5417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577342.034:567): pid=5424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577342.100:568): pid=5431 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071646863702D62626137623163332D353464322D346135642D613261632D393334396361633632306461206970202D342061646472206164642031302E302E302E332F38206272642031302E3235352E3235352E3235352073636F706520676C6F62616C206465762074617063353833316230362D6162 terminal=? res=success' type=USER_START msg=audit(1396577342.103:569): pid=5431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577342.110:570): pid=5433 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E662069707461626C65732D73617665202D63 terminal=? res=success' type=USER_START msg=audit(1396577342.110:571): pid=5433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577342.382:572): pid=5433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577342.384:573): pid=5431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577342.449:574): pid=5438 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E662069707461626C65732D726573746F7265202D63 terminal=? res=success' type=USER_START msg=audit(1396577342.450:575): pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=NETFILTER_CFG msg=audit(1396577342.701:576): table=mangle family=2 entries=9 type=SYSCALL msg=audit(1396577342.701:576): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=13f3370 items=0 ppid=5439 pid=5441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null) type=NETFILTER_CFG msg=audit(1396577342.702:577): table=nat family=2 entries=41 type=SYSCALL msg=audit(1396577342.702:577): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=13f5770 items=0 ppid=5439 pid=5441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null) type=NETFILTER_CFG msg=audit(1396577342.703:578): table=filter family=2 entries=42 type=SYSCALL msg=audit(1396577342.703:578): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=13f78f0 items=0 ppid=5439 pid=5441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_END msg=audit(1396577342.739:579): pid=5438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577342.801:580): pid=5442 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970367461626C65732D73617665202D63 terminal=? res=success' type=USER_START msg=audit(1396577342.802:581): pid=5442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577343.048:582): pid=5442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577343.097:583): pid=5447 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970367461626C65732D726573746F7265202D63 terminal=? res=success' type=USER_START msg=audit(1396577343.097:584): pid=5447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577343.249:585): pid=5449 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071646863702D62626137623163332D353464322D346135642D613261632D39333439636163363230646120697020726F757465206C697374206465762074617063353833316230362D6162 terminal=? res=success' type=USER_START msg=audit(1396577343.249:586): pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=NETFILTER_CFG msg=audit(1396577343.347:587): table=filter family=10 entries=25 type=SYSCALL msg=audit(1396577343.347:587): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=29 a2=40 a3=d94c90 items=0 ppid=5448 pid=5451 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ip6tables-resto" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_END msg=audit(1396577343.380:588): pid=5447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577343.442:589): pid=5452 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D65787465726E616C5F6964732C6E616D652C6F66706F72742066696E6420496E746572666163652065787465726E616C5F6964733A69666163652D69643D2263353833316230362D616265342D346166642D386465612D39323330393165383762326522 terminal=? res=success' type=USER_START msg=audit(1396577343.444:590): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577343.528:591): pid=5449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577343.613:592): pid=5455 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071646863702D62626137623163332D353464322D346135642D613261632D39333439636163363230646120697020726F757465207265706C6163652064656661756C74207669612031302E302E302E31206465762074617063353833316230362D6162 terminal=? res=success' type=USER_START msg=audit(1396577343.614:593): pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577343.773:594): pid=5452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577343.844:595): pid=5458 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302069666163652D746F2D62722074617063353833316230362D6162 terminal=? res=success' type=USER_START msg=audit(1396577343.846:596): pid=5458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577343.923:597): pid=5455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577344.032:598): pid=5461 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd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terminal=? res=success' type=USER_START msg=audit(1396577344.032:599): pid=5461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577344.227:600): pid=5458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577344.442:601): pid=5461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577344.534:602): pid=5468 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396577344.534:603): pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577344.538:604): pid=5469 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206B696C6C202D4855502035343637 terminal=? res=success' type=USER_START msg=audit(1396577344.543:605): pid=5469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577344.595:606): pid=5470 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302067657420506F72742074617063353833316230362D616220746167 terminal=? res=success' type=USER_START msg=audit(1396577344.600:607): pid=5470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577344.863:608): pid=5469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577344.927:609): pid=5470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577344.930:610): pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577344.995:611): pid=5481 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D31302073657420506F72742074617063353833316230362D6162207461673D31 terminal=? res=success' type=USER_START msg=audit(1396577344.997:612): pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577345.286:613): pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577345.344:614): pid=5485 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D6F6663746C2064656C2D666C6F77732062722D696E7420696E5F706F72743D33 terminal=? res=success' type=USER_START msg=audit(1396577345.344:615): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577345.507:616): pid=5487 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071646863702D62626137623163332D353464322D346135642D613261632D39333439636163363230646120697020726F757465206C697374206465762074617063353833316230362D6162 terminal=? res=success' type=USER_START msg=audit(1396577345.507:617): pid=5487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577345.718:618): pid=5485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577345.871:619): pid=5487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577346.189:620): pid=5492 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130206C6973742D706F7274732062722D6578 terminal=? res=success' type=USER_START msg=audit(1396577346.192:621): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577346.443:622): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577346.506:623): pid=5497 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206F76732D767363746C202D2D74696D656F75743D3130202D2D666F726D61743D6A736F6E202D2D202D2D636F6C756D6E733D6E616D652C65787465726E616C5F6964732C6F66706F7274206C69737420496E74657266616365 terminal=? res=success' type=USER_START msg=audit(1396577346.507:624): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577346.865:625): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577350.219:626): pid=5507 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D6536656239626435343565352069707461626C65732D73617665202D63 terminal=? res=success' type=USER_START msg=audit(1396577350.220:627): pid=5507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577350.441:628): pid=5507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577350.490:629): pid=5513 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D6536656239626435343565352069707461626C65732D726573746F7265202D63 terminal=? res=success' type=USER_START msg=audit(1396577350.491:630): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=NETFILTER_CFG msg=audit(1396577350.758:631): table=mangle family=2 entries=6 type=SYSCALL msg=audit(1396577350.758:631): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=f62850 items=0 ppid=5514 pid=5515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null) type=NETFILTER_CFG msg=audit(1396577350.764:632): table=nat family=2 entries=26 type=SYSCALL msg=audit(1396577350.764:632): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=f68450 items=0 ppid=5514 pid=5515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null) type=NETFILTER_CFG msg=audit(1396577350.765:633): table=filter family=2 entries=21 type=SYSCALL msg=audit(1396577350.765:633): arch=c000003e syscall=54 success=yes exit=0 a0=3 a1=0 a2=40 a3=f67d80 items=0 ppid=5514 pid=5515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="iptables-restor" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_END msg=audit(1396577350.795:634): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577350.844:635): pid=5516 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D65366562396264353435653520697020616464722073686F772071672D61326164393432392D3632 terminal=? res=success' type=USER_START msg=audit(1396577350.846:636): pid=5516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577351.103:637): pid=5516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577351.152:638): pid=5541 uid=995 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=2F7573722F62696E2F6E657574726F6E2D726F6F7477726170202F6574632F6E657574726F6E2F726F6F74777261702E636F6E66206970206E65746E7320657865632071726F757465722D61316233346638322D323238352D343564382D386234612D653665623962643534356535206970202D34206164647220616464203139322E302E322E34362F333220627264203139322E302E322E34362073636F706520676C6F62616C206465762071672D61326164393432392D3632 terminal=? res=success' type=USER_START msg=audit(1396577351.154:639): pid=5541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577351.387:640): pid=5541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396577401.854:641): pid=5554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396577401.855:642): pid=5554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396577401.855:643): pid=5554 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 res=1 type=USER_START msg=audit(1396577401.869:644): pid=5554 uid=0 auid=0 ses=3 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396577401.869:645): pid=5554 uid=0 auid=0 ses=3 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1396577401.870:646): avc: denied { transition } for pid=5558 comm="crond" path="/usr/bin/bash" dev="vda1" ino=7492 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:unconfined_r:unconfined_t:s0 tclass=process type=SYSCALL msg=audit(1396577401.870:646): arch=c000003e syscall=59 success=yes exit=0 a0=7f690c2e66a6 a1=7fff011a17b0 a2=7f690c2e5e50 a3=8 items=0 ppid=5554 pid=5558 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=3 tty=(none) comm="sh" exe="/usr/bin/bash" subj=system_u:unconfined_r:unconfined_t:s0 key=(null) type=USER_ACCT msg=audit(1396577401.882:647): pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=CRED_DISP msg=audit(1396577401.885:648): pid=5554 uid=0 auid=0 ses=3 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396577401.886:649): pid=5554 uid=0 auid=0 ses=3 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_START msg=audit(1396577401.886:650): pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577401.910:651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="user@0" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577404.422:652): pid=5561 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396577404.422:653): pid=5561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577404.461:654): pid=5561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577464.421:655): pid=5566 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396577464.422:656): pid=5566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577464.459:657): pid=5566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396577474.407:658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-hostnamed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_STOP msg=audit(1396577474.407:659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-hostnamed" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577524.421:660): pid=5571 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396577524.422:661): pid=5571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577524.458:662): pid=5571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577584.422:663): pid=5575 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396577584.423:664): pid=5575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577584.459:665): pid=5575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577644.422:666): pid=5579 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396577644.422:667): pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577644.459:668): pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577704.423:669): pid=5587 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396577704.424:670): pid=5587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577704.459:671): pid=5587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577764.425:672): pid=5592 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396577764.425:673): pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577764.460:674): pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577824.425:675): pid=5596 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396577824.426:676): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577824.461:677): pid=5596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577884.427:678): pid=5600 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396577884.427:679): pid=5600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577884.464:680): pid=5600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396577944.427:681): pid=5604 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396577944.427:682): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396577944.464:683): pid=5604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396578001.893:684): pid=5612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396578001.893:685): pid=5612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396578001.893:686): pid=5612 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 res=1 type=USER_START msg=audit(1396578001.898:687): pid=5612 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396578001.899:688): pid=5612 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396578001.903:689): pid=5612 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396578001.904:690): pid=5612 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396578004.429:691): pid=5616 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396578004.429:692): pid=5616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396578004.466:693): pid=5616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396578064.429:694): pid=5621 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396578064.429:695): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396578064.464:696): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396578068.038:697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_STOP msg=audit(1396578068.038:698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-tmpfiles-clean" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396578124.430:699): pid=5627 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396578124.431:700): pid=5627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396578124.466:701): pid=5627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396578184.431:702): pid=5631 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396578184.432:703): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396578184.468:704): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396578244.432:705): pid=5635 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396578244.433:706): pid=5635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396578244.469:707): pid=5635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396578304.433:708): pid=5640 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396578304.433:709): pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396578304.470:710): pid=5640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396578364.439:711): pid=5648 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396578364.439:712): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396578364.478:713): pid=5648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396578424.434:714): pid=5652 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396578424.435:715): pid=5652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396578424.469:716): pid=5652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396578484.442:717): pid=5656 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396578484.443:718): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396578484.489:719): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396578544.436:720): pid=5660 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396578544.436:721): pid=5660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396578544.471:722): pid=5660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396578601.914:723): pid=5665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396578601.914:724): pid=5665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396578601.914:725): pid=5665 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5 res=1 type=USER_START msg=audit(1396578601.924:726): pid=5665 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396578601.924:727): pid=5665 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1396578601.924:728): pid=5666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396578601.925:729): pid=5666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396578601.925:730): pid=5666 uid=0 old auid=4294967295 new auid=187 old ses=4294967295 new ses=6 res=1 type=CRED_DISP msg=audit(1396578601.934:731): pid=5665 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396578601.942:732): pid=5665 uid=0 auid=0 ses=5 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_START msg=audit(1396578601.945:733): pid=5666 uid=0 auid=187 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396578601.945:734): pid=5666 uid=0 auid=187 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1396578601.961:735): pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="heat" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1396578601.962:736): pid=5670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="heat" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=SERVICE_START msg=audit(1396578601.971:737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="user@187" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' type=CRED_DISP msg=audit(1396578602.585:738): pid=5666 uid=0 auid=187 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396578602.586:739): pid=5666 uid=0 auid=187 ses=6 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396578604.438:740): pid=5681 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396578604.439:741): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396578604.475:742): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396578664.438:743): pid=5689 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396578664.439:744): pid=5689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396578664.475:745): pid=5689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396578724.440:746): pid=5693 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396578724.440:747): pid=5693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396578724.481:748): pid=5693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396578784.440:749): pid=5697 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396578784.441:750): pid=5697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396578784.476:751): pid=5697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396578844.442:752): pid=5701 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396578844.443:753): pid=5701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396578844.478:754): pid=5701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396578904.446:755): pid=5706 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396578904.446:756): pid=5706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396578904.497:757): pid=5706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396578964.445:758): pid=5711 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396578964.446:759): pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396578964.482:760): pid=5711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396579024.447:761): pid=5715 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396579024.447:762): pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396579024.485:763): pid=5715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396579084.454:764): pid=5722 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396579084.455:765): pid=5722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396579084.499:766): pid=5722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396579144.447:767): pid=5726 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396579144.447:768): pid=5726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396579144.483:769): pid=5726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396579201.593:770): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396579201.593:771): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396579201.593:772): pid=5731 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 res=1 type=USER_START msg=audit(1396579201.599:773): pid=5731 uid=0 auid=0 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396579201.599:774): pid=5731 uid=0 auid=0 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396579201.615:775): pid=5731 uid=0 auid=0 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396579201.616:776): pid=5731 uid=0 auid=0 ses=7 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396579204.447:777): pid=5735 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396579204.447:778): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396579204.483:779): pid=5735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396579264.447:780): pid=5740 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396579264.448:781): pid=5740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396579264.483:782): pid=5740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396579324.448:783): pid=5744 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396579324.448:784): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396579324.485:785): pid=5744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396579384.449:786): pid=5751 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396579384.450:787): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396579384.487:788): pid=5751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396579444.452:789): pid=5755 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396579444.452:790): pid=5755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396579444.490:791): pid=5755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396579504.451:792): pid=5760 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396579504.452:793): pid=5760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396579504.488:794): pid=5760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396579564.452:795): pid=5765 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396579564.453:796): pid=5765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396579564.488:797): pid=5765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396579624.452:798): pid=5769 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396579624.453:799): pid=5769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396579624.489:800): pid=5769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396579684.455:801): pid=5776 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396579684.455:802): pid=5776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396579684.504:803): pid=5776 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396579744.456:804): pid=5780 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396579744.456:805): pid=5780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396579744.493:806): pid=5780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396579801.623:807): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396579801.623:808): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396579801.623:809): pid=5785 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8 res=1 type=USER_START msg=audit(1396579801.628:810): pid=5785 uid=0 auid=0 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396579801.629:811): pid=5785 uid=0 auid=0 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396579801.633:812): pid=5785 uid=0 auid=0 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396579801.634:813): pid=5785 uid=0 auid=0 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396579804.457:814): pid=5789 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396579804.457:815): pid=5789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396579804.494:816): pid=5789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396579864.458:817): pid=5794 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396579864.458:818): pid=5794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396579864.494:819): pid=5794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396579924.459:820): pid=5798 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396579924.460:821): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396579924.495:822): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396579984.461:823): pid=5805 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396579984.461:824): pid=5805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396579984.496:825): pid=5805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396580044.462:826): pid=5809 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396580044.462:827): pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396580044.500:828): pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396580104.463:829): pid=5814 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396580104.463:830): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396580104.500:831): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396580164.463:832): pid=5819 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396580164.464:833): pid=5819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396580164.502:834): pid=5819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396580224.464:835): pid=5823 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396580224.465:836): pid=5823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396580224.500:837): pid=5823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396580284.471:838): pid=5830 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396580284.471:839): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396580284.508:840): pid=5830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396580344.467:841): pid=5834 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396580344.467:842): pid=5834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396580344.502:843): pid=5834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396580401.640:844): pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396580401.641:845): pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396580401.641:846): pid=5839 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9 res=1 type=USER_START msg=audit(1396580401.647:847): pid=5839 uid=0 auid=0 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396580401.647:848): pid=5839 uid=0 auid=0 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396580401.651:849): pid=5839 uid=0 auid=0 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396580401.652:850): pid=5839 uid=0 auid=0 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396580404.468:851): pid=5843 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396580404.469:852): pid=5843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396580404.505:853): pid=5843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396580461.657:854): pid=5848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396580461.657:855): pid=5848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396580461.657:856): pid=5848 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10 res=1 type=USER_START msg=audit(1396580461.662:857): pid=5848 uid=0 auid=0 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396580461.662:858): pid=5848 uid=0 auid=0 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396580461.689:859): pid=5848 uid=0 auid=0 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396580461.690:860): pid=5848 uid=0 auid=0 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396580464.468:861): pid=5862 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396580464.468:862): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396580464.507:863): pid=5862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396580524.470:864): pid=5866 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396580524.470:865): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396580524.508:866): pid=5866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396580584.469:867): pid=5873 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396580584.469:868): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396580584.505:869): pid=5873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396580644.471:870): pid=5877 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396580644.472:871): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396580644.507:872): pid=5877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396580704.472:873): pid=5882 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396580704.472:874): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396580704.509:875): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396580764.473:876): pid=5887 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396580764.474:877): pid=5887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396580764.511:878): pid=5887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396580824.474:879): pid=5891 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396580824.474:880): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396580824.512:881): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396580884.484:882): pid=5898 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396580884.484:883): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396580884.545:884): pid=5898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396580944.476:885): pid=5902 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396580944.476:886): pid=5902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396580944.512:887): pid=5902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396581001.696:888): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396581001.697:889): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396581001.697:890): pid=5913 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11 res=1 type=USER_START msg=audit(1396581001.702:891): pid=5913 uid=0 auid=0 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396581001.702:892): pid=5913 uid=0 auid=0 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396581001.706:893): pid=5913 uid=0 auid=0 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396581001.707:894): pid=5913 uid=0 auid=0 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396581004.478:895): pid=5917 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396581004.478:896): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396581004.514:897): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396581064.479:898): pid=5922 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396581064.479:899): pid=5922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396581064.515:900): pid=5922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396581124.490:901): pid=11305 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396581124.490:902): pid=11305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396581124.572:903): pid=11305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396581184.490:904): pid=19621 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396581184.490:905): pid=19621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396581184.551:906): pid=19621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396581244.482:907): pid=19625 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396581244.482:908): pid=19625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396581244.520:909): pid=19625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396581304.482:910): pid=19630 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396581304.483:911): pid=19630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396581304.518:912): pid=19630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396581364.483:913): pid=19638 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396581364.483:914): pid=19638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396581364.519:915): pid=19638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396581424.485:916): pid=19642 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396581424.485:917): pid=19642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396581424.521:918): pid=19642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396581484.486:919): pid=19646 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396581484.487:920): pid=19646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396581484.531:921): pid=19646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396581544.487:922): pid=19650 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396581544.487:923): pid=19650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396581544.524:924): pid=19650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396581601.714:925): pid=19655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396581601.714:926): pid=19655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396581601.714:927): pid=19655 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12 res=1 type=USER_START msg=audit(1396581601.719:928): pid=19655 uid=0 auid=0 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396581601.719:929): pid=19655 uid=0 auid=0 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396581601.724:930): pid=19655 uid=0 auid=0 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396581601.725:931): pid=19655 uid=0 auid=0 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396581604.487:932): pid=19659 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396581604.487:933): pid=19659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396581604.527:934): pid=19659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396581664.487:935): pid=19668 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396581664.488:936): pid=19668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396581664.522:937): pid=19668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396581724.492:938): pid=19672 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396581724.492:939): pid=19672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396581724.534:940): pid=19672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396581784.490:941): pid=19676 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396581784.491:942): pid=19676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396581784.526:943): pid=19676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396581844.502:944): pid=19680 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396581844.503:945): pid=19680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396581844.542:946): pid=19680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396581904.492:947): pid=19685 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396581904.492:948): pid=19685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396581904.530:949): pid=19685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396581964.493:950): pid=19690 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396581964.493:951): pid=19690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396581964.530:952): pid=19690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396582024.493:953): pid=19694 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396582024.494:954): pid=19694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396582024.530:955): pid=19694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396582084.501:956): pid=19701 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396582084.502:957): pid=19701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396582084.540:958): pid=19701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396582144.497:959): pid=19705 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396582144.497:960): pid=19705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396582144.536:961): pid=19705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396582201.736:962): pid=19711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396582201.736:963): pid=19711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396582201.736:964): pid=19711 uid=0 old auid=4294967295 new auid=187 old ses=4294967295 new ses=13 res=1 type=USER_START msg=audit(1396582201.742:965): pid=19711 uid=0 auid=187 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396582201.743:966): pid=19711 uid=0 auid=187 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1396582201.744:967): pid=19710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396582201.744:968): pid=19710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396582201.744:969): pid=19710 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14 res=1 type=USER_START msg=audit(1396582201.756:970): pid=19710 uid=0 auid=0 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396582201.757:971): pid=19710 uid=0 auid=0 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396582201.767:972): pid=19710 uid=0 auid=0 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396582201.768:973): pid=19710 uid=0 auid=0 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396582202.556:974): pid=19711 uid=0 auid=187 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396582202.557:975): pid=19711 uid=0 auid=187 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396582204.498:976): pid=19722 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396582204.498:977): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396582204.536:978): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396582264.498:979): pid=19727 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396582264.498:980): pid=19727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396582264.537:981): pid=19727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396582324.497:982): pid=19733 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396582324.498:983): pid=19733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396582324.535:984): pid=19733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396582384.498:985): pid=19740 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396582384.499:986): pid=19740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396582384.534:987): pid=19740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396582444.505:988): pid=19744 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396582444.505:989): pid=19744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396582444.541:990): pid=19744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396582504.516:991): pid=19749 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396582504.517:992): pid=19749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396582504.553:993): pid=19749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396582564.527:994): pid=19754 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396582564.527:995): pid=19754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396582564.571:996): pid=19754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396582624.515:997): pid=19758 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396582624.516:998): pid=19758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396582624.553:999): pid=19758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396582684.525:1000): pid=19765 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396582684.526:1001): pid=19765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396582684.569:1002): pid=19765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396582744.522:1003): pid=19769 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396582744.523:1004): pid=19769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396582744.560:1005): pid=19769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396582801.563:1006): pid=19774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396582801.563:1007): pid=19774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396582801.563:1008): pid=19774 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15 res=1 type=USER_START msg=audit(1396582801.568:1009): pid=19774 uid=0 auid=0 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396582801.569:1010): pid=19774 uid=0 auid=0 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396582801.573:1011): pid=19774 uid=0 auid=0 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396582801.573:1012): pid=19774 uid=0 auid=0 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396582804.520:1013): pid=19778 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396582804.521:1014): pid=19778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396582804.557:1015): pid=19778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396582864.515:1016): pid=19783 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396582864.515:1017): pid=19783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396582864.558:1018): pid=19783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396582924.516:1019): pid=19787 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396582924.516:1020): pid=19787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396582924.564:1021): pid=19787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396582984.516:1022): pid=19794 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396582984.516:1023): pid=19794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396582984.564:1024): pid=19794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396583044.519:1025): pid=19798 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396583044.519:1026): pid=19798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396583044.573:1027): pid=19798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396583104.514:1028): pid=19803 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396583104.514:1029): pid=19803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396583104.565:1030): pid=19803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396583164.513:1031): pid=19808 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396583164.514:1032): pid=19808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396583164.569:1033): pid=19808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396583224.512:1034): pid=19812 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396583224.513:1035): pid=19812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396583224.565:1036): pid=19812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396583284.514:1037): pid=19819 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396583284.514:1038): pid=19819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396583284.583:1039): pid=19819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396583344.514:1040): pid=19823 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396583344.515:1041): pid=19823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396583344.569:1042): pid=19823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396583401.581:1043): pid=19828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396583401.581:1044): pid=19828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396583401.581:1045): pid=19828 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16 res=1 type=USER_START msg=audit(1396583401.587:1046): pid=19828 uid=0 auid=0 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396583401.587:1047): pid=19828 uid=0 auid=0 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396583401.591:1048): pid=19828 uid=0 auid=0 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396583401.592:1049): pid=19828 uid=0 auid=0 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396583404.516:1050): pid=19832 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396583404.516:1051): pid=19832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396583404.575:1052): pid=19832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396583464.516:1053): pid=19837 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396583464.517:1054): pid=19837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396583464.568:1055): pid=19837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396583524.518:1056): pid=19844 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396583524.518:1057): pid=19844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396583524.565:1058): pid=19844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396583584.520:1059): pid=19851 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396583584.521:1060): pid=19851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396583584.564:1061): pid=19851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396583644.523:1062): pid=19855 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396583644.524:1063): pid=19855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396583644.574:1064): pid=19855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396583704.523:1065): pid=19860 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396583704.523:1066): pid=19860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396583704.561:1067): pid=19860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396583764.523:1068): pid=19865 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396583764.524:1069): pid=19865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396583764.560:1070): pid=19865 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396583824.534:1071): pid=19869 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396583824.534:1072): pid=19869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396583824.643:1073): pid=19869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396583884.524:1074): pid=19876 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396583884.524:1075): pid=19876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396583884.560:1076): pid=19876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396583944.524:1077): pid=19880 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396583944.525:1078): pid=19880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396583944.561:1079): pid=19880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396584001.599:1080): pid=19885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396584001.599:1081): pid=19885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396584001.599:1082): pid=19885 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17 res=1 type=USER_START msg=audit(1396584001.609:1083): pid=19885 uid=0 auid=0 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396584001.610:1084): pid=19885 uid=0 auid=0 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396584001.614:1085): pid=19885 uid=0 auid=0 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396584001.620:1086): pid=19885 uid=0 auid=0 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396584004.524:1087): pid=19889 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396584004.525:1088): pid=19889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396584004.563:1089): pid=19889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396584061.625:1090): pid=19894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396584061.625:1091): pid=19894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396584061.625:1092): pid=19894 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=18 res=1 type=USER_START msg=audit(1396584061.631:1093): pid=19894 uid=0 auid=0 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396584061.631:1094): pid=19894 uid=0 auid=0 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396584061.643:1095): pid=19894 uid=0 auid=0 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396584061.644:1096): pid=19894 uid=0 auid=0 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396584064.526:1097): pid=19907 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396584064.526:1098): pid=19907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396584064.564:1099): pid=19907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396584124.526:1100): pid=19911 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396584124.526:1101): pid=19911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396584124.565:1102): pid=19911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396584184.526:1103): pid=19918 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396584184.526:1104): pid=19918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396584184.563:1105): pid=19918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396584244.528:1106): pid=19922 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396584244.528:1107): pid=19922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396584244.565:1108): pid=19922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396584304.529:1109): pid=19927 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396584304.529:1110): pid=19927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396584304.566:1111): pid=19927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396584364.531:1112): pid=19932 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396584364.532:1113): pid=19932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396584364.571:1114): pid=19932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396584424.533:1115): pid=19936 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396584424.533:1116): pid=19936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396584424.572:1117): pid=19936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396584484.544:1118): pid=19943 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396584484.544:1119): pid=19943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396584484.606:1120): pid=19943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396584544.534:1121): pid=19947 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396584544.535:1122): pid=19947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396584544.572:1123): pid=19947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396584601.650:1124): pid=19952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396584601.651:1125): pid=19952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396584601.651:1126): pid=19952 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=19 res=1 type=USER_START msg=audit(1396584601.656:1127): pid=19952 uid=0 auid=0 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396584601.656:1128): pid=19952 uid=0 auid=0 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396584601.660:1129): pid=19952 uid=0 auid=0 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396584601.661:1130): pid=19952 uid=0 auid=0 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396584604.536:1131): pid=19962 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396584604.537:1132): pid=19962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396584604.573:1133): pid=19962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396584664.536:1134): pid=19967 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396584664.537:1135): pid=19967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396584664.574:1136): pid=19967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396584724.537:1137): pid=19971 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396584724.537:1138): pid=19971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396584724.575:1139): pid=19971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396584784.538:1140): pid=19975 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396584784.538:1141): pid=19975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396584784.577:1142): pid=19975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396584844.538:1143): pid=19979 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396584844.538:1144): pid=19979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396584844.577:1145): pid=19979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396584904.538:1146): pid=19984 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396584904.538:1147): pid=19984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396584904.574:1148): pid=19984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396584964.541:1149): pid=19992 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396584964.541:1150): pid=19992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396584964.583:1151): pid=19992 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396585024.542:1152): pid=19996 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396585024.542:1153): pid=19996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396585024.579:1154): pid=19996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396585084.544:1155): pid=20000 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396585084.544:1156): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396585084.581:1157): pid=20000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396585144.545:1158): pid=20004 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396585144.546:1159): pid=20004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396585144.583:1160): pid=20004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396585201.668:1161): pid=20009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396585201.669:1162): pid=20009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396585201.669:1163): pid=20009 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=20 res=1 type=USER_START msg=audit(1396585201.674:1164): pid=20009 uid=0 auid=0 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396585201.674:1165): pid=20009 uid=0 auid=0 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396585201.679:1166): pid=20009 uid=0 auid=0 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396585201.680:1167): pid=20009 uid=0 auid=0 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396585204.546:1168): pid=20013 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396585204.546:1169): pid=20013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396585204.584:1170): pid=20013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396585264.547:1171): pid=20021 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396585264.547:1172): pid=20021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396585264.582:1173): pid=20021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396585324.548:1174): pid=20025 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396585324.548:1175): pid=20025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396585324.585:1176): pid=20025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396585384.548:1177): pid=20029 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396585384.548:1178): pid=20029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396585384.591:1179): pid=20029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396585444.549:1180): pid=20033 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396585444.549:1181): pid=20033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396585444.587:1182): pid=20033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396585504.550:1183): pid=20038 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396585504.551:1184): pid=20038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396585504.588:1185): pid=20038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396585564.553:1186): pid=20043 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396585564.553:1187): pid=20043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396585564.590:1188): pid=20043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396585624.555:1189): pid=20047 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396585624.555:1190): pid=20047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396585624.611:1191): pid=20047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396585684.554:1192): pid=20054 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396585684.554:1193): pid=20054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396585684.590:1194): pid=20054 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396585744.555:1195): pid=20058 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396585744.556:1196): pid=20058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396585744.592:1197): pid=20058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396585801.687:1198): pid=20064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396585801.687:1199): pid=20064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396585801.687:1200): pid=20064 uid=0 old auid=4294967295 new auid=187 old ses=4294967295 new ses=21 res=1 type=USER_START msg=audit(1396585801.693:1201): pid=20064 uid=0 auid=187 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396585801.694:1202): pid=20064 uid=0 auid=187 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1396585801.695:1203): pid=20063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396585801.695:1204): pid=20063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396585801.695:1205): pid=20063 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=22 res=1 type=USER_START msg=audit(1396585801.700:1206): pid=20063 uid=0 auid=0 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396585801.700:1207): pid=20063 uid=0 auid=0 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396585801.709:1208): pid=20063 uid=0 auid=0 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396585801.710:1209): pid=20063 uid=0 auid=0 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396585802.092:1210): pid=20064 uid=0 auid=187 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396585802.093:1211): pid=20064 uid=0 auid=187 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396585804.557:1212): pid=20075 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396585804.558:1213): pid=20075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396585804.595:1214): pid=20075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396585864.573:1215): pid=20080 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396585864.573:1216): pid=20080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396585864.663:1217): pid=20080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396585924.558:1218): pid=20084 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396585924.558:1219): pid=20084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396585924.596:1220): pid=20084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396585984.559:1221): pid=20091 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396585984.559:1222): pid=20091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396585984.594:1223): pid=20091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396586044.559:1224): pid=20095 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396586044.560:1225): pid=20095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396586044.601:1226): pid=20095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396586104.561:1227): pid=20100 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396586104.561:1228): pid=20100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396586104.596:1229): pid=20100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396586164.562:1230): pid=20105 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396586164.562:1231): pid=20105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396586164.599:1232): pid=20105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396586224.562:1233): pid=20109 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396586224.563:1234): pid=20109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396586224.602:1235): pid=20109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396586284.564:1236): pid=20116 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396586284.565:1237): pid=20116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396586284.601:1238): pid=20116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396586344.564:1239): pid=20120 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396586344.565:1240): pid=20120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396586344.599:1241): pid=20120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396586401.100:1242): pid=20125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396586401.100:1243): pid=20125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396586401.101:1244): pid=20125 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=23 res=1 type=USER_START msg=audit(1396586401.106:1245): pid=20125 uid=0 auid=0 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396586401.106:1246): pid=20125 uid=0 auid=0 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396586401.110:1247): pid=20125 uid=0 auid=0 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396586401.111:1248): pid=20125 uid=0 auid=0 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396586404.582:1249): pid=20129 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396586404.584:1250): pid=20129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396586404.670:1251): pid=20129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396586464.568:1252): pid=20134 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396586464.568:1253): pid=20134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396586464.604:1254): pid=20134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396586524.569:1255): pid=20138 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396586524.570:1256): pid=20138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396586524.606:1257): pid=20138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396586584.572:1258): pid=20145 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396586584.572:1259): pid=20145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396586584.609:1260): pid=20145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396586644.574:1261): pid=20149 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396586644.574:1262): pid=20149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396586644.610:1263): pid=20149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396586704.574:1264): pid=20154 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396586704.574:1265): pid=20154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396586704.608:1266): pid=20154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396586764.574:1267): pid=20159 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396586764.575:1268): pid=20159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396586764.610:1269): pid=20159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396586824.576:1270): pid=20163 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396586824.576:1271): pid=20163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396586824.612:1272): pid=20163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396586884.579:1273): pid=20170 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396586884.580:1274): pid=20170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396586884.623:1275): pid=20170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396586944.591:1276): pid=20174 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396586944.591:1277): pid=20174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396586944.674:1278): pid=20174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396587001.118:1279): pid=20179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396587001.118:1280): pid=20179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396587001.118:1281): pid=20179 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=24 res=1 type=USER_START msg=audit(1396587001.123:1282): pid=20179 uid=0 auid=0 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396587001.123:1283): pid=20179 uid=0 auid=0 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396587001.127:1284): pid=20179 uid=0 auid=0 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396587001.129:1285): pid=20179 uid=0 auid=0 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396587004.579:1286): pid=20183 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396587004.580:1287): pid=20183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396587004.617:1288): pid=20183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396587064.579:1289): pid=20188 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396587064.580:1290): pid=20188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396587064.615:1291): pid=20188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396587124.581:1292): pid=20192 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396587124.582:1293): pid=20192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396587124.618:1294): pid=20192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396587184.582:1295): pid=20199 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396587184.582:1296): pid=20199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396587184.619:1297): pid=20199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396587244.584:1298): pid=20203 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396587244.584:1299): pid=20203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396587244.620:1300): pid=20203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396587304.608:1301): pid=20208 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396587304.608:1302): pid=20208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396587304.659:1303): pid=20208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396587364.587:1304): pid=20213 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396587364.587:1305): pid=20213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396587364.625:1306): pid=20213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396587424.587:1307): pid=20217 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396587424.588:1308): pid=20217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396587424.623:1309): pid=20217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396587484.588:1310): pid=20224 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396587484.589:1311): pid=20224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396587484.623:1312): pid=20224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396587544.592:1313): pid=20228 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396587544.592:1314): pid=20228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396587544.636:1315): pid=20228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396587601.140:1316): pid=20233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396587601.140:1317): pid=20233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396587601.140:1318): pid=20233 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=25 res=1 type=USER_START msg=audit(1396587601.146:1319): pid=20233 uid=0 auid=0 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396587601.146:1320): pid=20233 uid=0 auid=0 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396587601.152:1321): pid=20233 uid=0 auid=0 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396587601.153:1322): pid=20233 uid=0 auid=0 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396587604.591:1323): pid=20237 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396587604.591:1324): pid=20237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396587604.628:1325): pid=20237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396587661.157:1326): pid=20242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396587661.158:1327): pid=20242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396587661.158:1328): pid=20242 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=26 res=1 type=USER_START msg=audit(1396587661.164:1329): pid=20242 uid=0 auid=0 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396587661.164:1330): pid=20242 uid=0 auid=0 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396587661.177:1331): pid=20242 uid=0 auid=0 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396587661.177:1332): pid=20242 uid=0 auid=0 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396587664.591:1333): pid=20255 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396587664.592:1334): pid=20255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396587664.629:1335): pid=20255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396587724.592:1336): pid=20259 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396587724.592:1337): pid=20259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396587724.635:1338): pid=20259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396587784.598:1339): pid=20266 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396587784.598:1340): pid=20266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396587784.633:1341): pid=20266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396587844.592:1342): pid=20270 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396587844.592:1343): pid=20270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396587844.628:1344): pid=20270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396587904.593:1345): pid=20275 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396587904.593:1346): pid=20275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396587904.629:1347): pid=20275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396587964.594:1348): pid=20280 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396587964.594:1349): pid=20280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396587964.632:1350): pid=20280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396588024.596:1351): pid=20284 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396588024.596:1352): pid=20284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396588024.635:1353): pid=20284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396588084.596:1354): pid=20291 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396588084.596:1355): pid=20291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396588084.634:1356): pid=20291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396588144.597:1357): pid=20295 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396588144.597:1358): pid=20295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396588144.633:1359): pid=20295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396588201.184:1360): pid=20300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396588201.184:1361): pid=20300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396588201.184:1362): pid=20300 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=27 res=1 type=USER_START msg=audit(1396588201.189:1363): pid=20300 uid=0 auid=0 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396588201.189:1364): pid=20300 uid=0 auid=0 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396588201.194:1365): pid=20300 uid=0 auid=0 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396588201.194:1366): pid=20300 uid=0 auid=0 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396588204.597:1367): pid=20304 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396588204.597:1368): pid=20304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396588204.633:1369): pid=20304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396588264.599:1370): pid=20315 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396588264.599:1371): pid=20315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396588264.635:1372): pid=20315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396588324.600:1373): pid=20319 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396588324.601:1374): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396588324.639:1375): pid=20319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396588384.602:1376): pid=20323 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396588384.603:1377): pid=20323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396588384.640:1378): pid=20323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396588444.602:1379): pid=20327 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396588444.603:1380): pid=20327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396588444.642:1381): pid=20327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396588504.604:1382): pid=20332 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396588504.604:1383): pid=20332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396588504.639:1384): pid=20332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396588564.605:1385): pid=20340 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396588564.605:1386): pid=20340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396588564.641:1387): pid=20340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396588624.606:1388): pid=20344 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396588624.607:1389): pid=20344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396588624.642:1390): pid=20344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396588684.609:1391): pid=20348 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396588684.610:1392): pid=20348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396588684.647:1393): pid=20348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396588744.611:1394): pid=20352 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396588744.611:1395): pid=20352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396588744.648:1396): pid=20352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396588801.200:1397): pid=20357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396588801.200:1398): pid=20357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396588801.200:1399): pid=20357 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=28 res=1 type=USER_START msg=audit(1396588801.205:1400): pid=20357 uid=0 auid=0 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396588801.206:1401): pid=20357 uid=0 auid=0 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396588801.210:1402): pid=20357 uid=0 auid=0 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396588801.211:1403): pid=20357 uid=0 auid=0 ses=28 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396588804.612:1404): pid=20361 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396588804.612:1405): pid=20361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396588804.650:1406): pid=20361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396588864.612:1407): pid=20366 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396588864.612:1408): pid=20366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396588864.657:1409): pid=20366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396588924.612:1410): pid=20373 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396588924.612:1411): pid=20373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396588924.647:1412): pid=20373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396588984.614:1413): pid=20377 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396588984.615:1414): pid=20377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396588984.650:1415): pid=20377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396589044.617:1416): pid=20381 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396589044.618:1417): pid=20381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396589044.654:1418): pid=20381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396589104.618:1419): pid=20386 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396589104.618:1420): pid=20386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396589104.655:1421): pid=20386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396589164.619:1422): pid=20391 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396589164.620:1423): pid=20391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396589164.657:1424): pid=20391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396589224.620:1425): pid=20395 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396589224.620:1426): pid=20395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396589224.656:1427): pid=20395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396589284.621:1428): pid=20402 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396589284.622:1429): pid=20402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396589284.657:1430): pid=20402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396589344.622:1431): pid=20406 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396589344.623:1432): pid=20406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396589344.660:1433): pid=20406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1396589401.219:1434): pid=20412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396589401.219:1435): pid=20412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396589401.219:1436): pid=20412 uid=0 old auid=4294967295 new auid=187 old ses=4294967295 new ses=29 res=1 type=USER_START msg=audit(1396589401.225:1437): pid=20412 uid=0 auid=187 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396589401.225:1438): pid=20412 uid=0 auid=187 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1396589401.227:1439): pid=20411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1396589401.227:1440): pid=20411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1396589401.227:1441): pid=20411 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=30 res=1 type=USER_START msg=audit(1396589401.232:1442): pid=20411 uid=0 auid=0 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_REFR msg=audit(1396589401.232:1443): pid=20411 uid=0 auid=0 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396589401.241:1444): pid=20411 uid=0 auid=0 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396589401.242:1445): pid=20411 uid=0 auid=0 ses=30 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1396589401.659:1446): pid=20412 uid=0 auid=187 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1396589401.660:1447): pid=20412 uid=0 auid=187 ses=29 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="heat" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_CMD msg=audit(1396589404.624:1448): pid=20423 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396589404.624:1449): pid=20423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396589404.663:1450): pid=20423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396589464.624:1451): pid=20428 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396589464.625:1452): pid=20428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396589464.663:1453): pid=20428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396589524.626:1454): pid=20432 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396589524.626:1455): pid=20432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396589524.665:1456): pid=20432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396589584.629:1457): pid=20439 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396589584.629:1458): pid=20439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396589584.668:1459): pid=20439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396589644.631:1460): pid=20443 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396589644.632:1461): pid=20443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396589644.669:1462): pid=20443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396589704.636:1463): pid=20448 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396589704.637:1464): pid=20448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396589704.674:1465): pid=20448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396589764.641:1466): pid=20453 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396589764.641:1467): pid=20453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396589764.680:1468): pid=20453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396589824.640:1469): pid=20457 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396589824.641:1470): pid=20457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396589824.680:1471): pid=20457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_CMD msg=audit(1396589884.641:1472): pid=20464 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396589884.641:1473): pid=20464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396589884.681:1474): pid=20464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1396589927.759:1475): pid=20469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=e6:bf:b9:e7:42:87:7b:da:56:79:dc:1c:d6:89:cf:08 direction=? spid=20469 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1396589927.759:1476): pid=20469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=7d:a8:50:0e:18:d4:a2:64:dc:08:9c:57:96:3f:1f:b3 direction=? spid=20469 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=AVC msg=audit(1396589927.760:1477): avc: denied { dyntransition } for pid=20469 comm="sshd" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:sshd_net_t:s0 tclass=process type=SYSCALL msg=audit(1396589927.760:1477): arch=c000003e syscall=1 success=yes exit=32 a0=6 a1=7fdffd254f40 a2=20 a3=7fffdbc90f20 items=0 ppid=20468 pid=20469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_net_t:s0 key=(null) type=AVC msg=audit(1396589927.760:1478): avc: denied { search } for pid=20469 comm="sshd" name="var" dev="vda1" ino=96673 scontext=system_u:system_r:sshd_net_t:s0 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=dir type=SYSCALL msg=audit(1396589927.760:1478): arch=c000003e syscall=161 success=yes exit=0 a0=7fdffbe984a8 a1=1 a2=7fdff9365770 a3=7fffdbc90f20 items=0 ppid=20468 pid=20469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_net_t:s0 key=(null) type=CRYPTO_SESSION msg=audit(1396589927.761:1479): pid=20468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20469 suid=74 rport=48228 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=CRYPTO_SESSION msg=audit(1396589927.761:1480): pid=20468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-md5-etm@openssh.com spid=20469 suid=74 rport=48228 laddr=19 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=USER_AUTH msg=audit(1396589927.830:1481): pid=20468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=pubkey_auth rport=48228 acct="heat-admin" exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=USER_AUTH msg=audit(1396589927.830:1482): pid=20468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=key algo=ssh-rsa size=2048 fp=d0:f4:fd:54:97:fd:9a:5e:b5:c1:41:79:28:ad:52:32 rport=48228 acct="heat-admin" exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=USER_ACCT msg=audit(1396589927.832:1483): pid=20468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting acct="heat-admin" exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=CRYPTO_KEY_USER msg=audit(1396589927.833:1484): pid=20468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=session fp=? direction=both spid=20469 suid=74 rport=48228 laddr=192.0.2.8 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=AVC msg=audit(1396589927.834:1485): avc: denied { sigchld } for pid=20468 comm="sshd" scontext=system_u:system_r:sshd_net_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process type=SYSCALL msg=audit(1396589927.834:1485): arch=c000003e syscall=61 success=yes exit=20469 a0=4ff5 a1=7fffdbc91270 a2=0 a3=0 items=0 ppid=856 pid=20468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) type=USER_AUTH msg=audit(1396589927.834:1486): pid=20468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=success acct="heat-admin" exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=ssh res=success' type=CRED_ACQ msg=audit(1396589927.834:1487): pid=20468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="heat-admin" exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=LOGIN msg=audit(1396589927.834:1488): pid=20468 uid=0 old auid=4294967295 new auid=1001 old ses=4294967295 new ses=31 res=1 type=USER_ROLE_CHANGE msg=audit(1396589927.908:1489): pid=20468 uid=0 auid=1001 ses=31 subj=system_u:system_r:kernel_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0 selected-context=unconfined_u:unconfined_r:unconfined_t:s0 exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=USER_START msg=audit(1396589927.917:1490): pid=20468 uid=0 auid=1001 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="heat-admin" exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=CRYPTO_KEY_USER msg=audit(1396589927.917:1491): pid=20468 uid=0 auid=1001 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=session fp=? direction=both spid=20468 suid=0 rport=48228 laddr=192.0.2.8 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1396589927.918:1492): pid=20471 uid=0 auid=1001 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=e6:bf:b9:e7:42:87:7b:da:56:79:dc:1c:d6:89:cf:08 direction=? spid=20471 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=CRYPTO_KEY_USER msg=audit(1396589927.918:1493): pid=20471 uid=0 auid=1001 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=destroy kind=server fp=7d:a8:50:0e:18:d4:a2:64:dc:08:9c:57:96:3f:1f:b3 direction=? spid=20471 suid=0 exe="/usr/sbin/sshd" hostname=? addr=192.0.2.1 terminal=? res=success' type=CRED_ACQ msg=audit(1396589927.918:1494): pid=20471 uid=0 auid=1001 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred acct="heat-admin" exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=ssh res=success' type=AVC msg=audit(1396589927.918:1495): avc: denied { dyntransition } for pid=20471 comm="sshd" scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=process type=SYSCALL msg=audit(1396589927.918:1495): arch=c000003e syscall=1 success=yes exit=42 a0=7 a1=7fdffd252ed0 a2=2a a3=666e6f636e753a72 items=0 ppid=20468 pid=20471 auid=1001 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=31 tty=(none) comm="sshd" exe="/usr/sbin/sshd" subj=unconfined_u:unconfined_r:unconfined_t:s0 key=(null) type=USER_LOGIN msg=audit(1396589927.930:1496): pid=20468 uid=0 auid=1001 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1396589927.930:1497): pid=20468 uid=0 auid=1001 ses=31 subj=system_u:system_r:kernel_t:s0 msg='op=login id=1001 exe="/usr/sbin/sshd" hostname=192.0.2.1 addr=192.0.2.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1396589931.199:1498): pid=20492 uid=1001 auid=1001 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='cwd="/home/heat-admin" cmd=7375202D20726F6F74 terminal=pts/0 res=success' type=USER_START msg=audit(1396589931.200:1499): pid=20492 uid=0 auid=1001 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_AUTH msg=audit(1396589931.211:1500): pid=20493 uid=0 auid=1001 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=PAM:authentication acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=pts/0 res=success' type=USER_ACCT msg=audit(1396589931.211:1501): pid=20493 uid=0 auid=1001 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=PAM:accounting acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=pts/0 res=success' type=CRED_ACQ msg=audit(1396589931.212:1502): pid=20493 uid=0 auid=1001 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=PAM:setcred acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=pts/0 res=success' type=USER_START msg=audit(1396589931.215:1503): pid=20493 uid=0 auid=1001 ses=31 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/su" hostname=? addr=? terminal=pts/0 res=success' type=USER_CMD msg=audit(1396589944.642:1504): pid=20515 uid=165 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='cwd="/" cmd=63696E6465722D726F6F7477726170202F6574632F63696E6465722F726F6F74777261702E636F6E6620656E76204C435F414C4C3D4320766773202D2D6E6F68656164696E6773202D2D756E69743D67202D6F206E616D652C73697A652C667265652C6C765F636F756E742C75756964202D2D736570617261746F72203A202D2D6E6F7375666669782063696E6465722D766F6C756D6573 terminal=? res=success' type=USER_START msg=audit(1396589944.643:1505): pid=20515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' type=USER_END msg=audit(1396589944.683:1506): pid=20515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'