type=AVC msg=audit(1254201640.042:20): avc: denied { read write } for pid=1755 comm="abrtd" name="__db.001" dev=dm-1 ino=7857 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254201640.042:20): avc: denied { open } for pid=1755 comm="abrtd" name="__db.001" dev=dm-1 ino=7857 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254201640.042:20): arch=c000003e syscall=2 success=yes exit=0 a0=84d450 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_AVC msg=audit(1254201665.022:21): user pid=1357 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.PolicyKit1.Authority member=CheckAuthorization dest=org.freedesktop.PolicyKit1 spid=2458 tpid=1943 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tclass=dbus : exe="/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' type=AVC msg=audit(1254201665.023:22): avc: denied { getattr } for pid=1943 comm="polkitd" path="/proc/2458" dev=proc ino=22250 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dir type=SYSCALL msg=audit(1254201665.023:22): arch=c000003e syscall=4 success=yes exit=0 a0=7fff358b05e0 a1=7fff358b0550 a2=7fff358b0550 a3=1 items=0 ppid=1 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="polkitd" exe="/usr/libexec/polkit-1/polkitd" subj=system_u:system_r:policykit_t:s0-s0:c0.c1023 key=(null) type=USER_AVC msg=audit(1254201665.032:23): user pid=1357 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_return dest=:1.69 spid=1943 tpid=2458 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dbus : exe="/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' type=AVC msg=audit(1254201665.696:24): avc: denied { lock } for pid=2461 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254201665.696:24): arch=c000003e syscall=72 success=yes exit=0 a0=c a1=6 a2=7fffbfc73560 a3=7fffbfc732b0 items=0 ppid=1755 pid=2461 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4294967295 comm="gdb" exe="/usr/bin/gdb" subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_AUTH msg=audit(1254201797.968:25): user pid=1665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254201797.979:26): user pid=1665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254204062.091:27): user pid=3264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254204062.096:28): user pid=3264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254204062.096:29): login pid=3264 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 type=USER_START msg=audit(1254204062.101:30): user pid=3264 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254204062.535:31): user pid=3264 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254204062.535:32): user pid=3264 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254205576.785:33): user pid=3348 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254207661.636:34): user pid=3415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254207661.639:35): user pid=3415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254207661.639:36): login pid=3415 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 type=USER_START msg=audit(1254207661.644:37): user pid=3415 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254207661.832:38): user pid=3415 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254207661.833:39): user pid=3415 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254208274.325:40): user pid=3478 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254211261.933:41): user pid=4104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254211261.935:42): user pid=4104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254211261.936:43): login pid=4104 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 type=USER_START msg=audit(1254211261.940:44): user pid=4104 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254211262.117:45): user pid=4104 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254211262.119:46): user pid=4104 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254214861.225:47): user pid=5373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254214861.227:48): user pid=5373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254214861.227:49): login pid=5373 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5 type=USER_START msg=audit(1254214861.232:50): user pid=5373 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254214861.415:51): user pid=5373 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254214861.415:52): user pid=5373 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254216315.366:53): user pid=21099 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254216315.373:54): user pid=21099 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254216315.377:55): user pid=21099 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254216315.383:56): user pid=21099 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254216315.384:57): user pid=21099 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254216315.386:58): user pid=21099 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/rpmbuild" cmd=2F62696E2F72706D202D5576682052504D532F7838365F36342F67616A696D2D6465627567696E666F2D302E31332D302E312E323030393039323968672E312E666331322E7838365F36342E72706D2052504D532F7838365F36342F67616A696D2D302E31332D302E312E323030393039323968672E312E666331322E7838365F36342E72706D terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254216315.394:59): user pid=21105 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_AUTH msg=audit(1254217219.443:60): user pid=21787 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254219130.064:61): user pid=22380 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254219194.511:62): user pid=22648 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254222709.208:63): user pid=22946 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254222718.285:64): user pid=1665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254222718.296:65): user pid=1665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254222749.569:66): user pid=23198 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254222749.582:67): user pid=23198 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254222749.584:68): user pid=23198 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254222749.595:69): user pid=23198 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254222749.595:70): user pid=23198 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254222749.599:71): user pid=23198 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254222749.603:72): user pid=23204 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254225661.187:73): user pid=24857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254225661.190:74): user pid=24857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254225661.190:75): login pid=24857 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6 type=USER_START msg=audit(1254225661.195:76): user pid=24857 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254225661.467:77): user pid=24857 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254225661.467:78): user pid=24857 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1254226675.724:79): avc: denied { write } for pid=1755 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254226675.724:79): arch=c000003e syscall=21 success=yes exit=0 a0=8719b0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254226675.732:80): avc: denied { read write } for pid=1755 comm="abrtd" name="__db.001" dev=dm-1 ino=7857 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254226675.732:80): avc: denied { open } for pid=1755 comm="abrtd" name="__db.001" dev=dm-1 ino=7857 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254226675.732:80): arch=c000003e syscall=2 success=yes exit=0 a0=84d450 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254226683.293:81): avc: denied { signull } for pid=1755 comm="abrtd" scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:system_r:setroubleshootd_t:s0-s0:c0.c1023 tclass=process type=SYSCALL msg=audit(1254226683.293:81): arch=c000003e syscall=62 success=yes exit=0 a0=63e1 a1=0 a2=6db a3=1 items=0 ppid=1 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_ACCT msg=audit(1254229261.549:82): user pid=26691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254229261.552:83): user pid=26691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254229261.553:84): login pid=26691 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 type=USER_START msg=audit(1254229261.557:85): user pid=26691 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254229261.807:86): user pid=26691 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254229261.807:87): user pid=26691 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_LOGIN msg=audit(1254229850.990:88): user pid=26857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="matej": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_ACCT msg=audit(1254229851.279:89): user pid=26857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=CRED_ACQ msg=audit(1254229851.283:90): user pid=26857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=LOGIN msg=audit(1254229851.284:91): login pid=26857 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=8 type=USER_ROLE_CHANGE msg=audit(1254229851.418:92): user pid=26857 uid=0 auid=500 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed' type=USER_ROLE_CHANGE msg=audit(1254229851.420:93): user pid=26857 uid=0 auid=500 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254229851.427:94): user pid=26857 uid=0 auid=500 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=CRED_ACQ msg=audit(1254229851.431:95): user pid=26862 uid=0 auid=500 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_LOGIN msg=audit(1254229851.453:96): user pid=26857 uid=0 auid=500 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=/dev/pts/1 res=success' type=CRED_DISP msg=audit(1254230961.319:97): user pid=26857 uid=0 auid=500 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_END msg=audit(1254230961.324:98): user pid=26857 uid=0 auid=500 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="matej" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_AUTH msg=audit(1254232074.269:99): user pid=28841 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1254232074.276:100): user pid=28841 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=CRED_ACQ msg=audit(1254232074.302:101): user pid=28841 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1254232074.312:102): user pid=28841 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1254232074.313:103): user pid=28841 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1254232074.314:104): user pid=28841 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1254232074.323:105): user pid=28848 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_AUTH msg=audit(1254232381.839:106): user pid=29114 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1254232381.845:107): user pid=29114 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=CRED_ACQ msg=audit(1254232381.850:108): user pid=29114 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1254232381.856:109): user pid=29114 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1254232381.857:110): user pid=29114 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1254232381.861:111): user pid=29114 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/rpmbuild" cmd=2F7573722F62696E2F79756D646F776E6C6F61646572202D2D736F757263652070794F70656E53534C terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1254232381.865:112): user pid=29121 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_AUTH msg=audit(1254232729.117:113): user pid=29483 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1254232729.124:114): user pid=29483 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=CRED_ACQ msg=audit(1254232729.127:115): user pid=29483 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1254232729.133:116): user pid=29483 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1254232729.133:117): user pid=29483 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1254232729.135:118): user pid=29483 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/rpmbuild" cmd=2F7573722F62696E2F79756D20696E7374616C6C206F70656E73736C2D646576656C terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1254232729.139:119): user pid=29491 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1254232861.917:120): user pid=29985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254232861.921:121): user pid=29985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254232861.922:122): login pid=29985 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9 type=USER_START msg=audit(1254232861.927:123): user pid=29985 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254232862.485:124): user pid=29985 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254232862.486:125): user pid=29985 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254232911.053:126): user pid=30034 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1254232911.063:127): user pid=30034 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1254232911.064:128): user pid=30034 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1254232911.065:129): user pid=30034 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1254232911.070:130): user pid=30035 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_AUTH msg=audit(1254233107.659:131): user pid=30446 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_ACCT msg=audit(1254233107.666:132): user pid=30446 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254233107.668:133): user pid=30446 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254233107.678:134): user pid=30446 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254233107.679:135): user pid=30446 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254233107.688:136): user pid=30446 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254233107.693:137): user pid=30454 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_AUTH msg=audit(1254233638.303:138): user pid=32523 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1254233638.309:139): user pid=32523 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=CRED_ACQ msg=audit(1254233638.311:140): user pid=32523 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1254233638.320:141): user pid=32523 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1254233638.321:142): user pid=32523 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1254233638.322:143): user pid=32523 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/rpmbuild" cmd=2F62696E2F72706D202D557668202F686F6D652F6D6174656A2F70794F70656E53534C2D6465627567696E666F2D302E392D302E666331322E7838365F36342E72706D202F686F6D652F6D6174656A2F70794F70656E53534C2D302E392D302E666331322E7838365F36342E72706D terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1254233638.327:144): user pid=32531 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=ANOM_ABEND msg=audit(1254233766.228:145): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=32602 comm="python" sig=6 type=AVC msg=audit(1254233766.717:146): avc: denied { write } for pid=1755 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254233766.717:146): arch=c000003e syscall=21 success=yes exit=0 a0=8719b0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254233766.720:147): avc: denied { read write } for pid=1755 comm="abrtd" name="__db.001" dev=dm-1 ino=7857 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254233766.720:147): avc: denied { open } for pid=1755 comm="abrtd" name="__db.001" dev=dm-1 ino=7857 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254233766.720:147): arch=c000003e syscall=2 success=yes exit=0 a0=84ccd0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254233814.323:148): avc: denied { getattr } for pid=1943 comm="polkitd" path="/proc/32667" dev=proc ino=736011 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dir type=SYSCALL msg=audit(1254233814.323:148): arch=c000003e syscall=4 success=yes exit=0 a0=7fff358b05e0 a1=7fff358b0550 a2=7fff358b0550 a3=1 items=0 ppid=1 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="polkitd" exe="/usr/libexec/polkit-1/polkitd" subj=system_u:system_r:policykit_t:s0-s0:c0.c1023 key=(null) type=USER_AUTH msg=audit(1254234048.491:149): user pid=15523 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1254234048.498:150): user pid=15523 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=CRED_ACQ msg=audit(1254234048.501:151): user pid=15523 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1254234048.507:152): user pid=15523 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1254234048.508:153): user pid=15523 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1254234048.512:154): user pid=15523 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F62696E2F72706D202D5576682072706D6275696C642F52504D532F7838365F36342F67616A696D2D6465627567696E666F2D302E31332D302E312E323030393039323968672E322E666331322E7838365F36342E72706D2072706D6275696C642F52504D532F7838365F36342F67616A696D2D302E31332D302E312E323030393039323968672E322E666331322E7838365F36342E72706D terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1254234048.517:155): user pid=15530 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=AVC msg=audit(1254234242.137:156): avc: denied { write } for pid=1755 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254234242.137:156): arch=c000003e syscall=21 success=yes exit=0 a0=8719b0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254234242.141:157): avc: denied { read write } for pid=1755 comm="abrtd" name="__db.001" dev=dm-1 ino=7857 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254234242.141:157): avc: denied { open } for pid=1755 comm="abrtd" name="__db.001" dev=dm-1 ino=7857 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254234242.141:157): arch=c000003e syscall=2 success=yes exit=0 a0=86bd70 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_AUTH msg=audit(1254234430.807:158): user pid=15861 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=failed' type=USER_AUTH msg=audit(1254234436.358:159): user pid=15861 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1254234436.364:160): user pid=15861 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=CRED_ACQ msg=audit(1254234436.366:161): user pid=15861 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1254234436.387:162): user pid=15861 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1254234436.388:163): user pid=15861 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1254234436.389:164): user pid=15861 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1254234436.396:165): user pid=15871 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1254236461.755:166): user pid=16819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254236461.764:167): user pid=16819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254236461.764:168): login pid=16819 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10 type=USER_START msg=audit(1254236461.769:169): user pid=16819 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254236462.337:170): user pid=16819 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254236462.337:171): user pid=16819 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254239531.564:172): user pid=21593 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_ACCT msg=audit(1254239531.573:173): user pid=21593 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254239531.575:174): user pid=21593 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254239531.581:175): user pid=21593 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254239531.582:176): user pid=21593 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254239531.587:177): user pid=21593 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/rpmbuild/BUILD/pyOpenSSL-0.9" cmd=2F7573722F62696E2F79756D206C697374202A7465782A73757065722A terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254239531.591:178): user pid=21603 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254239550.555:179): user pid=21617 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254239550.560:180): user pid=21617 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254239550.561:181): user pid=21617 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254239550.562:182): user pid=21617 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/rpmbuild/BUILD/pyOpenSSL-0.9" cmd=2F7573722F62696E2F79756D20696E7374616C6C207465786C6976652D636D2D73757065722E6E6F61726368 terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254239550.566:183): user pid=21618 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_AUTH msg=audit(1254239585.063:184): user pid=21683 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/4 res=success' type=USER_ACCT msg=audit(1254239585.074:185): user pid=21683 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/4 res=success' type=CRED_ACQ msg=audit(1254239585.133:186): user pid=21683 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/4 res=success' type=USER_START msg=audit(1254239585.138:187): user pid=21683 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/4 res=success' type=USER_END msg=audit(1254239585.139:188): user pid=21683 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/4 res=success' type=USER_CMD msg=audit(1254239585.143:189): user pid=21683 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/rpmbuild/BUILD/pyOpenSSL-0.9" cmd=2F7573722F62696E2F7265706F7175657279202D71202D2D70726F7669646573207465786C6976652D636D2D7375706572 terminal=pts/4 res=success' type=USER_ROLE_CHANGE msg=audit(1254239585.146:190): user pid=21689 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/4 res=success' type=USER_ACCT msg=audit(1254240061.424:191): user pid=23305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254240061.428:192): user pid=23305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254240061.428:193): login pid=23305 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11 type=USER_START msg=audit(1254240061.433:194): user pid=23305 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254240061.603:195): user pid=23305 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254240061.604:196): user pid=23305 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254240416.249:197): user pid=26017 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_ACCT msg=audit(1254240416.256:198): user pid=26017 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254240416.259:199): user pid=26017 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254240416.267:200): user pid=26017 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254240416.268:201): user pid=26017 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254240416.274:202): user pid=26017 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/rpmbuild/Extras/pyOpenSSL/devel" cmd=2F7573722F62696E2F79756D207265706F6C697374 terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254240416.297:203): user pid=26024 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254240453.675:204): user pid=26028 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254240453.680:205): user pid=26028 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254240453.680:206): user pid=26028 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254240453.681:207): user pid=26028 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/rpmbuild/Extras/pyOpenSSL/devel" cmd=2F7573722F62696E2F79756D206C697374202D2D64697361626C657265706F3D7465786C6976652D72617768696465202A7465782A73757065722A terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254240453.684:208): user pid=26029 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_AUTH msg=audit(1254240748.723:209): user pid=26245 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/4 res=success' type=USER_ACCT msg=audit(1254240748.733:210): user pid=26245 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/4 res=success' type=CRED_ACQ msg=audit(1254240748.734:211): user pid=26245 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/4 res=success' type=USER_START msg=audit(1254240748.740:212): user pid=26245 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/4 res=success' type=USER_END msg=audit(1254240748.740:213): user pid=26245 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/4 res=success' type=USER_CMD msg=audit(1254240748.742:214): user pid=26245 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="?" cmd=2F7573722F62696E2F7265706F7175657279202D71202D2D7768617470726F7669646573207465786C6976652D636D2D7375706572 terminal=pts/4 res=success' type=USER_ROLE_CHANGE msg=audit(1254240748.747:215): user pid=26252 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/4 res=success' type=CRED_ACQ msg=audit(1254240765.135:216): user pid=26260 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/4 res=success' type=USER_START msg=audit(1254240765.140:217): user pid=26260 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/4 res=success' type=USER_END msg=audit(1254240765.141:218): user pid=26260 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/4 res=success' type=USER_CMD msg=audit(1254240765.142:219): user pid=26260 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F7265706F7175657279202D71202D2D64697361626C657265706F3D7465786C6976652D72617768696465202D2D7768617470726F7669646573207465786C6976652D636D2D7375706572 terminal=pts/4 res=success' type=USER_ROLE_CHANGE msg=audit(1254240765.145:220): user pid=26261 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/4 res=success' type=USER_AUTH msg=audit(1254241314.275:221): user pid=29317 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=USER_ACCT msg=audit(1254241314.281:222): user pid=29317 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=CRED_ACQ msg=audit(1254241314.284:223): user pid=29317 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_START msg=audit(1254241314.292:224): user pid=29317 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_END msg=audit(1254241314.292:225): user pid=29317 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_CMD msg=audit(1254241314.294:226): user pid=29317 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/3 res=success' type=USER_ROLE_CHANGE msg=audit(1254241314.300:227): user pid=29324 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=USER_ACCT msg=audit(1254243662.383:228): user pid=32014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254243662.408:229): user pid=32014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254243662.408:230): login pid=32014 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12 type=USER_START msg=audit(1254243662.548:231): user pid=32014 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254243663.923:232): user pid=32014 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254243663.923:233): user pid=32014 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1254243786.454:234): avc: denied { write } for pid=1755 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254243786.454:234): arch=c000003e syscall=21 success=yes exit=0 a0=8719b0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254243786.480:235): avc: denied { read write } for pid=1755 comm="abrtd" name="__db.001" dev=dm-1 ino=7857 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254243786.480:235): avc: denied { open } for pid=1755 comm="abrtd" name="__db.001" dev=dm-1 ino=7857 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254243786.480:235): arch=c000003e syscall=2 success=yes exit=7 a0=84d660 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254243797.020:236): avc: denied { signull } for pid=1755 comm="abrtd" scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:system_r:setroubleshootd_t:s0-s0:c0.c1023 tclass=process type=SYSCALL msg=audit(1254243797.020:236): arch=c000003e syscall=62 success=yes exit=0 a0=7d5c a1=0 a2=6db a3=1 items=0 ppid=1 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_AUTH msg=audit(1254245220.262:237): user pid=599 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254247264.914:238): user pid=1665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254247264.920:239): user pid=1665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254247268.430:240): user pid=1074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254247268.435:241): user pid=1074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254247268.435:242): login pid=1074 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13 type=USER_START msg=audit(1254247268.561:243): user pid=1074 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254247269.011:244): user pid=1074 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254247269.012:245): user pid=1074 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254247387.016:246): user pid=1120 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254250800.780:247): user pid=1640 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254250861.114:248): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254250861.115:249): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254250861.116:250): login pid=1650 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14 type=USER_START msg=audit(1254250861.121:251): user pid=1650 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254250861.445:252): user pid=1650 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254250861.447:253): user pid=1650 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254254103.170:254): user pid=2622 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254254103.178:255): user pid=2622 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254254103.180:256): user pid=2622 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254254103.186:257): user pid=2622 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254254103.186:258): user pid=2622 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254254103.188:259): user pid=2622 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/rpmbuild" cmd=2F7573722F62696E2F79756D646F776E6C6F61646572202D2D736F757263652074656C6570617468792D676162626C65 terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254254103.194:260): user pid=2629 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254254338.883:261): user pid=9928 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254254338.891:262): user pid=9928 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254254338.892:263): user pid=9928 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254254338.893:264): user pid=9928 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/rpmbuild" cmd=2F62696E2F72706D202D5576682052504D532F7838365F36342F74656C6570617468792D676162626C652D6465627567696E666F2D302E382E342D302E666331322E7838365F36342E72706D2052504D532F7838365F36342F74656C6570617468792D676162626C652D302E382E342D302E666331322E7838365F36342E72706D terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254254338.896:265): user pid=9930 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254254461.559:266): user pid=9959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254254461.562:267): user pid=9959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254254461.563:268): login pid=9959 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15 type=USER_START msg=audit(1254254461.568:269): user pid=9959 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254254461.757:270): user pid=9959 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254254461.758:271): user pid=9959 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254255267.635:272): user pid=10334 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254255267.642:273): user pid=10334 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254255267.645:274): user pid=10334 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254255267.653:275): user pid=10334 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254255267.654:276): user pid=10334 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254255267.656:277): user pid=10334 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254255267.662:278): user pid=10341 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254255315.147:279): user pid=10506 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254255315.151:280): user pid=10506 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254255315.152:281): user pid=10506 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254255315.153:282): user pid=10506 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/archiv/website/fedorapeople/scripts" cmd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terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254255315.156:283): user pid=10507 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_AUTH msg=audit(1254257609.377:284): user pid=11552 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254257609.387:285): user pid=11552 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254257609.390:286): user pid=11552 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254257609.402:287): user pid=11552 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254257609.403:288): user pid=11552 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254257609.407:289): user pid=11552 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254257609.411:290): user pid=11559 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_AUTH msg=audit(1254258040.882:291): user pid=11761 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254258040.891:292): user pid=11761 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254258040.893:293): user pid=11761 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254258040.899:294): user pid=11761 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254258040.899:295): user pid=11761 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254258040.900:296): user pid=11761 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp" cmd=2F7573722F62696E2F79756D646F776E6C6F61646572202D2D736F757263652067616A696D terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254258040.905:297): user pid=11768 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254258061.963:298): user pid=11789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254258061.970:299): user pid=11789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254258061.979:300): login pid=11789 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16 type=USER_START msg=audit(1254258061.985:301): user pid=11789 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254258062.589:302): user pid=11789 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254258062.590:303): user pid=11789 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1254260046.348:304): avc: denied { write } for pid=1755 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254260046.348:304): arch=c000003e syscall=21 success=yes exit=0 a0=8719b0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254260046.349:305): avc: denied { read write } for pid=1755 comm="abrtd" name="__db.001" dev=dm-1 ino=7857 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254260046.349:305): avc: denied { open } for pid=1755 comm="abrtd" name="__db.001" dev=dm-1 ino=7857 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254260046.349:305): arch=c000003e syscall=2 success=yes exit=7 a0=84e9a0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_ACCT msg=audit(1254261662.022:306): user pid=13941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254261662.024:307): user pid=13941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254261662.024:308): login pid=13941 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17 type=USER_START msg=audit(1254261662.030:309): user pid=13941 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254261663.004:310): user pid=13941 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254261663.005:311): user pid=13941 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=SYSTEM_SHUTDOWN msg=audit(1254287600.499:312): user pid=15624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:apmd_t:s0 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=? res=success' type=SYSTEM_RUNLEVEL msg=audit(1254287600.671:313): user pid=15631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='old-level=5 new-level=0: exe="/sbin/runlevel" hostname=? addr=? terminal=console res=success' type=SYSTEM_SHUTDOWN msg=audit(1254287601.712:314): user pid=15647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:apmd_t:s0 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=? res=success' type=AVC msg=audit(1254287607.197:315): avc: denied { write } for pid=1755 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254287607.197:315): arch=c000003e syscall=21 success=yes exit=0 a0=8719b0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254287607.198:316): avc: denied { read write } for pid=1755 comm="abrtd" name="__db.001" dev=dm-1 ino=7857 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254287607.198:316): avc: denied { open } for pid=1755 comm="abrtd" name="__db.001" dev=dm-1 ino=7857 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254287607.198:316): arch=c000003e syscall=2 success=yes exit=0 a0=865280 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=DAEMON_END msg=audit(1254287623.402:5437): auditd normal halt, sending auid=0 pid=15879 subj=system_u:system_r:initrc_t:s0 res=success type=DAEMON_START msg=audit(1254287719.112:9980): auditd start, ver=2.0 format=raw kernel=2.6.31.1-48.fc12.x86_64 auid=4294967295 pid=1204 subj=system_u:system_r:auditd_t:s0 res=success type=CONFIG_CHANGE msg=audit(1254287719.263:6): audit_backlog_limit=320 old=256 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 type=USER_AUTH msg=audit(1254287748.408:7): user pid=1969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=failed' type=USER_LOGIN msg=audit(1254287748.409:8): user pid=1969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=failed' type=USER_AUTH msg=audit(1254287753.269:9): user pid=1968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1254287753.277:10): user pid=1968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=CRED_ACQ msg=audit(1254287753.344:11): user pid=1968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=LOGIN msg=audit(1254287753.346:12): login pid=1968 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1 type=USER_ROLE_CHANGE msg=audit(1254287753.433:13): user pid=1968 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254287753.747:14): user pid=1968 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_LOGIN msg=audit(1254287753.748:15): user pid=1968 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=success' type=USER_AUTH msg=audit(1254287983.032:16): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254287983.038:17): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=ANOM_ABEND msg=audit(1254289266.984:18): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=2457 comm="evolution" sig=11 type=AVC msg=audit(1254289271.096:19): avc: denied { write } for pid=1774 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254289271.096:19): arch=c000003e syscall=21 success=yes exit=0 a0=22f9d30 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254289271.100:20): avc: denied { read write } for pid=1774 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254289271.100:20): avc: denied { open } for pid=1774 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254289271.100:20): arch=c000003e syscall=2 success=yes exit=7 a0=22eaa40 a1=2 a2=0 a3=48 items=0 ppid=1 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254289271.102:21): avc: denied { lock } for pid=1774 comm="abrtd" path="/var/lib/rpm/Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254289271.102:21): arch=c000003e syscall=72 success=yes exit=0 a0=7 a1=6 a2=7fffcbef91f0 a3=1 items=0 ppid=1 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254289271.872:22): avc: denied { signull } for pid=1774 comm="abrtd" scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:system_r:setroubleshootd_t:s0-s0:c0.c1023 tclass=process type=SYSCALL msg=audit(1254289271.872:22): arch=c000003e syscall=62 success=yes exit=0 a0=b8f a1=0 a2=6ee a3=1 items=0 ppid=1 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_AVC msg=audit(1254289308.532:23): user pid=1378 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.PolicyKit1.Authority member=CheckAuthorization dest=org.freedesktop.PolicyKit1 spid=2972 tpid=1962 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tclass=dbus : exe="/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' type=AVC msg=audit(1254289308.533:24): avc: denied { getattr } for pid=1962 comm="polkitd" path="/proc/2972" dev=proc ino=41565 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dir type=SYSCALL msg=audit(1254289308.533:24): arch=c000003e syscall=4 success=yes exit=0 a0=7fff855ee200 a1=7fff855ee170 a2=7fff855ee170 a3=1 items=0 ppid=1 pid=1962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="polkitd" exe="/usr/libexec/polkit-1/polkitd" subj=system_u:system_r:policykit_t:s0-s0:c0.c1023 key=(null) type=USER_AVC msg=audit(1254289308.544:25): user pid=1378 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_return dest=:1.71 spid=1962 tpid=2972 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dbus : exe="/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' type=USER_ACCT msg=audit(1254290461.349:26): user pid=3097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254290461.352:27): user pid=3097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254290461.353:28): login pid=3097 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 type=USER_START msg=audit(1254290461.358:29): user pid=3097 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254290461.784:30): user pid=3097 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254290461.784:31): user pid=3097 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254292875.530:32): user pid=3184 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254294720.127:33): user pid=3515 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254294732.685:34): user pid=1832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_ACCT msg=audit(1254294732.693:35): user pid=1832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=LOGIN msg=audit(1254294732.694:36): login pid=1832 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 type=USER_ROLE_CHANGE msg=audit(1254294732.722:37): user pid=1832 uid=0 auid=0 ses=3 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_START msg=audit(1254294732.766:38): user pid=1832 uid=0 auid=0 ses=3 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=CRED_ACQ msg=audit(1254294732.768:39): user pid=1832 uid=0 auid=0 ses=3 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_LOGIN msg=audit(1254294732.770:40): user pid=1832 uid=0 auid=0 ses=3 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=SYSTEM_SHUTDOWN msg=audit(1254294870.658:41): user pid=3747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:apmd_t:s0 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=? res=success' type=CRED_DISP msg=audit(1254294870.679:42): user pid=1832 uid=0 auid=0 ses=3 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_END msg=audit(1254294870.682:43): user pid=1832 uid=0 auid=0 ses=3 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=SYSTEM_RUNLEVEL msg=audit(1254294870.755:44): user pid=3758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='old-level=5 new-level=0: exe="/sbin/runlevel" hostname=? addr=? terminal=console res=success' type=DAEMON_END msg=audit(1254294876.682:9981): auditd normal halt, sending auid=0 pid=3935 subj=system_u:system_r:initrc_t:s0 res=success type=DAEMON_START msg=audit(1254294976.006:4243): auditd start, ver=2.0 format=raw kernel=2.6.31.1-48.fc12.x86_64 auid=4294967295 pid=1173 subj=system_u:system_r:auditd_t:s0 res=success type=CONFIG_CHANGE msg=audit(1254294976.155:6): audit_backlog_limit=320 old=256 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 type=USER_AUTH msg=audit(1254295002.420:7): user pid=1925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=failed' type=USER_LOGIN msg=audit(1254295002.420:8): user pid=1925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=failed' type=USER_AUTH msg=audit(1254295004.722:9): user pid=1924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1254295004.729:10): user pid=1924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=CRED_ACQ msg=audit(1254295004.795:11): user pid=1924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=LOGIN msg=audit(1254295004.796:12): login pid=1924 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1 type=USER_ROLE_CHANGE msg=audit(1254295004.873:13): user pid=1924 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254295005.181:14): user pid=1924 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_LOGIN msg=audit(1254295005.182:15): user pid=1924 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=success' type=USER_AUTH msg=audit(1254295869.953:16): user pid=2589 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=failed' type=USER_AUTH msg=audit(1254295878.994:17): user pid=2593 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254297858.412:18): user pid=3060 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=ANOM_ABEND msg=audit(1254297981.855:19): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=2669 comm="gnome-terminal" sig=11 type=AVC msg=audit(1254297982.476:20): avc: denied { write } for pid=1731 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254297982.476:20): arch=c000003e syscall=21 success=yes exit=0 a0=13cbd30 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254297982.484:21): avc: denied { read write } for pid=1731 comm="abrtd" name="__db.001" dev=dm-1 ino=2614 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254297982.484:21): avc: denied { open } for pid=1731 comm="abrtd" name="__db.001" dev=dm-1 ino=2614 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254297982.484:21): arch=c000003e syscall=2 success=yes exit=0 a0=13bc5e0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254297982.487:22): avc: denied { lock } for pid=1731 comm="abrtd" path="/var/lib/rpm/Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254297982.487:22): arch=c000003e syscall=72 success=yes exit=0 a0=7 a1=6 a2=7fff51bcfa00 a3=1 items=0 ppid=1 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254297982.734:23): avc: denied { signull } for pid=1731 comm="abrtd" scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:system_r:setroubleshootd_t:s0-s0:c0.c1023 tclass=process type=SYSCALL msg=audit(1254297982.734:23): arch=c000003e syscall=62 success=yes exit=0 a0=c30 a1=0 a2=6c3 a3=1 items=0 ppid=1 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_AVC msg=audit(1254297998.309:24): user pid=1335 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.PolicyKit1.Authority member=CheckAuthorization dest=org.freedesktop.PolicyKit1 spid=3133 tpid=1916 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tclass=dbus : exe="/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' type=AVC msg=audit(1254297998.311:25): avc: denied { getattr } for pid=1916 comm="polkitd" path="/proc/3133" dev=proc ino=29979 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dir type=SYSCALL msg=audit(1254297998.311:25): arch=c000003e syscall=4 success=yes exit=0 a0=7fff1e5636f0 a1=7fff1e563660 a2=7fff1e563660 a3=1 items=0 ppid=1 pid=1916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="polkitd" exe="/usr/libexec/polkit-1/polkitd" subj=system_u:system_r:policykit_t:s0-s0:c0.c1023 key=(null) type=USER_AVC msg=audit(1254297998.324:26): user pid=1335 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_return dest=:1.114 spid=1916 tpid=3133 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dbus : exe="/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' type=AVC msg=audit(1254297999.331:27): avc: denied { read } for pid=3134 comm="gdb" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254297999.331:27): avc: denied { open } for pid=3134 comm="gdb" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254297999.331:27): arch=c000003e syscall=2 success=yes exit=0 a0=231e4b0 a1=0 a2=0 a3=7fffac625da0 items=0 ppid=1731 pid=3134 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4294967295 comm="gdb" exe="/usr/bin/gdb" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254297999.333:28): avc: denied { lock } for pid=3134 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254297999.333:28): arch=c000003e syscall=72 success=yes exit=0 a0=e a1=6 a2=7fffac6265e0 a3=7fffac626330 items=0 ppid=1731 pid=3134 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4294967295 comm="gdb" exe="/usr/bin/gdb" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254298086.217:29): avc: denied { write } for pid=1731 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254298086.217:29): arch=c000003e syscall=21 success=yes exit=0 a0=1420310 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254298086.220:30): avc: denied { write } for pid=1731 comm="abrtd" name="__db.001" dev=dm-1 ino=2614 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254298086.220:30): arch=c000003e syscall=2 success=yes exit=7 a0=13bbb30 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254298091.508:31): avc: denied { write } for pid=1731 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254298091.508:31): arch=c000003e syscall=21 success=yes exit=0 a0=1420310 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254298091.515:32): avc: denied { signull } for pid=1731 comm="abrtd" scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:system_r:setroubleshootd_t:s0-s0:c0.c1023 tclass=process type=SYSCALL msg=audit(1254298091.515:32): arch=c000003e syscall=62 success=yes exit=0 a0=c5f a1=0 a2=6c3 a3=1 items=0 ppid=1 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254298093.522:33): avc: denied { read write } for pid=1731 comm="abrtd" name="__db.001" dev=dm-1 ino=2614 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254298093.522:33): avc: denied { open } for pid=1731 comm="abrtd" name="__db.001" dev=dm-1 ino=2614 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254298093.522:33): arch=c000003e syscall=2 success=yes exit=0 a0=13bb3e0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1731 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_AUTH msg=audit(1254298417.275:34): user pid=3494 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254298417.286:35): user pid=3494 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254298417.289:36): user pid=3494 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254298417.297:37): user pid=3494 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254298417.298:38): user pid=3494 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254298417.299:39): user pid=3494 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254298417.306:40): user pid=3501 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_AUTH msg=audit(1254298925.010:41): user pid=3672 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254298925.016:42): user pid=3672 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=ADD_USER msg=audit(1254299571.394:43): user pid=4420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="nscd" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' type=ADD_USER msg=audit(1254299571.395:44): user pid=4420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="nscd" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' type=ADD_USER msg=audit(1254299629.628:45): user pid=4452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="gdm" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' type=ADD_USER msg=audit(1254299629.629:46): user pid=4452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="gdm" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' type=DAEMON_END msg=audit(1254299684.534:4244): auditd normal halt, sending auid=0 pid=4531 subj=system_u:system_r:initrc_t:s0 res=success type=DAEMON_START msg=audit(1254299684.719:1406): auditd start, ver=2.0.1 format=raw kernel=2.6.31.1-48.fc12.x86_64 auid=4294967295 pid=4549 subj=system_u:system_r:auditd_t:s0 res=success type=CONFIG_CHANGE msg=audit(1254299684.831:49): audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 type=CONFIG_CHANGE msg=audit(1254299684.835:50): audit_backlog_limit=320 old=320 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 type=USER_ACCT msg=audit(1254301261.213:51): user pid=5115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254301261.215:52): user pid=5115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254301261.216:53): login pid=5115 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 type=USER_START msg=audit(1254301261.221:54): user pid=5115 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254301261.639:55): user pid=5115 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254301261.640:56): user pid=5115 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=SYSTEM_SHUTDOWN msg=audit(1254303871.949:57): user pid=16163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:consolekit_t:s0-s0:c0.c1023 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=? res=success' type=SYSTEM_RUNLEVEL msg=audit(1254303872.005:58): user pid=16174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='old-level=5 new-level=6: exe="/sbin/runlevel" hostname=? addr=? terminal=console res=success' type=DAEMON_END msg=audit(1254303878.005:1407): auditd normal halt, sending auid=0 pid=16382 subj=system_u:system_r:initrc_t:s0 res=success type=DAEMON_START msg=audit(1254303967.745:8089): auditd start, ver=2.0.1 format=raw kernel=2.6.31.1-48.fc12.x86_64 auid=4294967295 pid=1172 subj=system_u:system_r:auditd_t:s0 res=success type=CONFIG_CHANGE msg=audit(1254303967.891:6): audit_backlog_limit=320 old=256 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 type=USER_AUTH msg=audit(1254304000.425:7): user pid=1990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=failed' type=USER_LOGIN msg=audit(1254304000.426:8): user pid=1990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=failed' type=USER_AUTH msg=audit(1254304003.346:9): user pid=1989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1254304003.353:10): user pid=1989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=CRED_ACQ msg=audit(1254304003.403:11): user pid=1989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=LOGIN msg=audit(1254304003.405:12): login pid=1989 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1 type=USER_ROLE_CHANGE msg=audit(1254304003.464:13): user pid=1989 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254304003.797:14): user pid=1989 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_LOGIN msg=audit(1254304003.797:15): user pid=1989 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=success' type=USER_AUTH msg=audit(1254304191.197:16): user pid=1656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254304191.202:17): user pid=1656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254304203.845:18): user pid=2681 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254304203.851:19): user pid=2681 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254304203.854:20): user pid=2681 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254304203.863:21): user pid=2681 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254304203.864:22): user pid=2681 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254304203.866:23): user pid=2681 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254304203.876:24): user pid=2687 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254304861.140:25): user pid=3485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254304861.144:26): user pid=3485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254304861.144:27): login pid=3485 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 type=USER_START msg=audit(1254304861.150:28): user pid=3485 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254304861.564:29): user pid=3485 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254304861.565:30): user pid=3485 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254305228.937:31): user pid=3698 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254305228.945:32): user pid=3698 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254305228.947:33): user pid=3698 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254305228.955:34): user pid=3698 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254305228.956:35): user pid=3698 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254305228.961:36): user pid=3698 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254305228.964:37): user pid=3705 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_AUTH msg=audit(1254305712.895:38): user pid=3899 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254305712.901:39): user pid=3899 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254305712.903:40): user pid=3899 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254305712.910:41): user pid=3899 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254305712.910:42): user pid=3899 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254305712.915:43): user pid=3899 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254305712.918:44): user pid=3905 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=AVC msg=audit(1254305801.833:45): avc: denied { write } for pid=1747 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254305801.833:45): arch=c000003e syscall=21 success=yes exit=0 a0=12c1a30 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254305801.834:46): avc: denied { read write } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254305801.834:46): avc: denied { open } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254305801.834:46): arch=c000003e syscall=2 success=yes exit=0 a0=12cb4f0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254305801.842:47): avc: denied { read } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254305801.842:47): avc: denied { open } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254305801.842:47): arch=c000003e syscall=2 success=yes exit=0 a0=12ab290 a1=0 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254305801.843:48): avc: denied { lock } for pid=1747 comm="abrtd" path="/var/lib/rpm/Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254305801.843:48): arch=c000003e syscall=72 success=yes exit=0 a0=7 a1=6 a2=7fff11ec2820 a3=1 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_ACCT msg=audit(1254308461.670:49): user pid=4173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254308461.672:50): user pid=4173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254308461.672:51): login pid=4173 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 type=USER_START msg=audit(1254308461.677:52): user pid=4173 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254308461.867:53): user pid=4173 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254308461.868:54): user pid=4173 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254312061.966:55): user pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254312061.968:56): user pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254312061.968:57): login pid=4571 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 type=USER_START msg=audit(1254312061.973:58): user pid=4571 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254312062.147:59): user pid=4571 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254312062.148:60): user pid=4571 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254315486.793:61): user pid=4901 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=AVC msg=audit(1254315510.637:62): avc: denied { write } for pid=1747 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254315510.637:62): arch=c000003e syscall=21 success=yes exit=0 a0=134d2f0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254315510.640:63): avc: denied { read write } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254315510.640:63): avc: denied { open } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254315510.640:63): arch=c000003e syscall=2 success=yes exit=0 a0=12a71e0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254315510.647:64): avc: denied { read } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254315510.647:64): avc: denied { open } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254315510.647:64): arch=c000003e syscall=2 success=yes exit=0 a0=12c8e20 a1=0 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_ACCT msg=audit(1254315661.248:65): user pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254315661.250:66): user pid=5046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254315661.251:67): login pid=5046 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5 type=USER_START msg=audit(1254315661.256:68): user pid=5046 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254315661.429:69): user pid=5046 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254315661.430:70): user pid=5046 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1254316019.860:71): avc: denied { write } for pid=1747 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254316019.860:71): arch=c000003e syscall=21 success=yes exit=0 a0=12ce3c0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254316019.863:72): avc: denied { read write } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254316019.863:72): avc: denied { open } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254316019.863:72): arch=c000003e syscall=2 success=yes exit=0 a0=12ab290 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254316019.869:73): avc: denied { read } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254316019.869:73): avc: denied { open } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254316019.869:73): arch=c000003e syscall=2 success=yes exit=0 a0=12cb4f0 a1=0 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254316048.060:74): avc: denied { write } for pid=1747 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254316048.060:74): arch=c000003e syscall=21 success=yes exit=0 a0=12d1fe0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254316048.067:75): avc: denied { read write } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254316048.067:75): avc: denied { open } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254316048.067:75): arch=c000003e syscall=2 success=yes exit=7 a0=12ab930 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254316048.068:76): avc: denied { read } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254316048.068:76): avc: denied { open } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254316048.068:76): arch=c000003e syscall=2 success=yes exit=0 a0=12ac1c0 a1=0 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_ACCT msg=audit(1254319261.529:77): user pid=8062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254319261.535:78): user pid=8062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254319261.536:79): login pid=8062 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6 type=USER_START msg=audit(1254319261.556:80): user pid=8062 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254319261.778:81): user pid=8062 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254319261.779:82): user pid=8062 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254320738.881:83): user pid=1656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254320738.888:84): user pid=1656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=ANOM_ABEND msg=audit(1254322344.746:85): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 pid=9689 comm="npviewer.bin" sig=11 type=AVC msg=audit(1254322345.815:86): avc: denied { write } for pid=1747 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254322345.815:86): arch=c000003e syscall=21 success=yes exit=0 a0=12d4980 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254322345.817:87): avc: denied { read write } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254322345.817:87): avc: denied { open } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254322345.817:87): arch=c000003e syscall=2 success=yes exit=0 a0=12be7a0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254322345.821:88): avc: denied { read } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254322345.821:88): avc: denied { open } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254322345.821:88): arch=c000003e syscall=2 success=yes exit=0 a0=12aaf30 a1=0 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_ACCT msg=audit(1254322861.882:89): user pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254322861.886:90): user pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254322861.887:91): login pid=10118 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 type=USER_START msg=audit(1254322861.892:92): user pid=10118 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254322862.154:93): user pid=10118 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254322862.155:94): user pid=10118 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254326461.256:95): user pid=13076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254326461.258:96): user pid=13076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254326461.258:97): login pid=13076 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8 type=USER_START msg=audit(1254326461.263:98): user pid=13076 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254326461.427:99): user pid=13076 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254326461.428:100): user pid=13076 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254327774.340:101): user pid=13529 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254327774.348:102): user pid=13529 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254327841.759:103): user pid=13546 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254327841.766:104): user pid=13546 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=ANOM_ABEND msg=audit(1254328056.484:105): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=13595 comm="chmsee" sig=11 type=AVC msg=audit(1254328057.067:106): avc: denied { write } for pid=1747 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254328057.067:106): arch=c000003e syscall=21 success=yes exit=0 a0=12dc110 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254328057.070:107): avc: denied { read write } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254328057.070:107): avc: denied { open } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254328057.070:107): arch=c000003e syscall=2 success=yes exit=0 a0=12c8e20 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254328057.077:108): avc: denied { read } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254328057.077:108): avc: denied { open } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254328057.077:108): arch=c000003e syscall=2 success=yes exit=0 a0=12cb4f0 a1=0 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_AUTH msg=audit(1254328156.756:109): user pid=13763 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1254328156.763:110): user pid=13763 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=CRED_ACQ msg=audit(1254328156.767:111): user pid=13763 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1254328156.772:112): user pid=13763 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1254328156.773:113): user pid=13763 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1254328156.779:114): user pid=13763 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D2075706772616465 terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1254328156.783:115): user pid=13770 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_AUTH msg=audit(1254329704.916:116): user pid=14488 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254330061.543:117): user pid=14491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254330061.545:118): user pid=14491 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254330061.545:119): login pid=14491 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9 type=USER_START msg=audit(1254330061.552:120): user pid=14491 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254330061.772:121): user pid=14491 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254330061.773:122): user pid=14491 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254332588.329:123): user pid=14790 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254333661.979:124): user pid=14978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254333661.980:125): user pid=14978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254333661.981:126): login pid=14978 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10 type=USER_START msg=audit(1254333661.985:127): user pid=14978 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254333662.462:128): user pid=14978 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254333662.464:129): user pid=14978 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254336387.746:130): user pid=15646 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254338183.829:131): user pid=15942 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254341585.320:132): user pid=16792 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=ANOM_ABEND msg=audit(1254341589.689:133): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=2177 comm="nm-applet" sig=6 type=AVC msg=audit(1254341590.803:134): avc: denied { write } for pid=1747 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254341590.803:134): arch=c000003e syscall=21 success=yes exit=0 a0=12dc110 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254341590.804:135): avc: denied { read write } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254341590.804:135): avc: denied { open } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254341590.804:135): arch=c000003e syscall=2 success=yes exit=0 a0=12aaf30 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254341590.806:136): avc: denied { signull } for pid=1747 comm="abrtd" scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:system_r:setroubleshootd_t:s0-s0:c0.c1023 tclass=process type=SYSCALL msg=audit(1254341590.806:136): arch=c000003e syscall=62 success=yes exit=0 a0=3ad3 a1=0 a2=6d3 a3=1 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254341590.807:137): avc: denied { read } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254341590.807:137): avc: denied { open } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254341590.807:137): arch=c000003e syscall=2 success=yes exit=0 a0=12aba30 a1=0 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_AVC msg=audit(1254341604.109:138): user pid=1347 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.PolicyKit1.Authority member=CheckAuthorization dest=org.freedesktop.PolicyKit1 spid=16847 tpid=1981 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tclass=dbus : exe="/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' type=AVC msg=audit(1254341604.111:139): avc: denied { getattr } for pid=1981 comm="polkitd" path="/proc/16847" dev=proc ino=329056 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dir type=SYSCALL msg=audit(1254341604.111:139): arch=c000003e syscall=4 success=yes exit=0 a0=7fff42534100 a1=7fff42534070 a2=7fff42534070 a3=1 items=0 ppid=1 pid=1981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="polkitd" exe="/usr/libexec/polkit-1/polkitd" subj=system_u:system_r:policykit_t:s0-s0:c0.c1023 key=(null) type=USER_AVC msg=audit(1254341604.120:140): user pid=1347 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_return dest=:1.302 spid=1981 tpid=16847 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dbus : exe="/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' type=AVC msg=audit(1254341604.349:141): avc: denied { lock } for pid=16848 comm="gdb" path="/var/lib/rpm/Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254341604.349:141): arch=c000003e syscall=72 success=yes exit=0 a0=c a1=6 a2=7fff2f1f58f0 a3=7fff2f1f5640 items=0 ppid=1747 pid=16848 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4294967295 comm="gdb" exe="/usr/bin/gdb" subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_AUTH msg=audit(1254341625.353:142): user pid=16907 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1254341625.360:143): user pid=16907 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=CRED_ACQ msg=audit(1254341625.364:144): user pid=16907 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1254341625.374:145): user pid=16907 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1254341625.376:146): user pid=16907 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1254341625.379:147): user pid=16907 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1254341625.385:148): user pid=16913 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=ANOM_ABEND msg=audit(1254341645.051:149): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=16974 comm="nm-applet" sig=6 type=AVC msg=audit(1254341645.590:150): avc: denied { write } for pid=1747 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254341645.590:150): arch=c000003e syscall=21 success=yes exit=0 a0=12dc920 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254341645.594:151): avc: denied { read write } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254341645.594:151): avc: denied { open } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254341645.594:151): arch=c000003e syscall=2 success=yes exit=0 a0=12d2980 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254341645.596:152): avc: denied { signull } for pid=1747 comm="abrtd" scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:system_r:setroubleshootd_t:s0-s0:c0.c1023 tclass=process type=SYSCALL msg=audit(1254341645.596:152): arch=c000003e syscall=62 success=yes exit=0 a0=3ad3 a1=0 a2=6d3 a3=1 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254341645.597:153): avc: denied { read } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254341645.597:153): avc: denied { open } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254341645.597:153): arch=c000003e syscall=2 success=yes exit=0 a0=12aba30 a1=0 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254341663.874:154): avc: denied { write } for pid=1747 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254341663.874:154): arch=c000003e syscall=21 success=yes exit=0 a0=12dc920 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254341663.875:155): avc: denied { read write } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254341663.875:155): avc: denied { open } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254341663.875:155): arch=c000003e syscall=2 success=yes exit=0 a0=12aba30 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254341663.877:156): avc: denied { read } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254341663.877:156): avc: denied { open } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254341663.877:156): arch=c000003e syscall=2 success=yes exit=0 a0=12c3270 a1=0 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=ANOM_ABEND msg=audit(1254341729.668:157): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=17401 comm="nm-applet" sig=6 type=AVC msg=audit(1254341730.207:158): avc: denied { write } for pid=1747 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254341730.207:158): arch=c000003e syscall=21 success=yes exit=0 a0=12dc920 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254341730.211:159): avc: denied { read write } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254341730.211:159): avc: denied { open } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254341730.211:159): arch=c000003e syscall=2 success=yes exit=0 a0=12aa510 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254341730.215:160): avc: denied { signull } for pid=1747 comm="abrtd" scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:system_r:setroubleshootd_t:s0-s0:c0.c1023 tclass=process type=SYSCALL msg=audit(1254341730.215:160): arch=c000003e syscall=62 success=yes exit=0 a0=3ad3 a1=0 a2=6d3 a3=1 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254341730.216:161): avc: denied { read } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254341730.216:161): avc: denied { open } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254341730.216:161): arch=c000003e syscall=2 success=yes exit=0 a0=12aba30 a1=0 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=CRED_ACQ msg=audit(1254341751.604:162): user pid=18190 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1254341751.615:163): user pid=18190 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1254341751.615:164): user pid=18190 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1254341751.617:165): user pid=18190 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1254341751.621:166): user pid=18191 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_AUTH msg=audit(1254343225.707:167): user pid=1656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254343225.714:168): user pid=1656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254344461.938:169): user pid=19019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254344461.941:170): user pid=19019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254344461.941:171): login pid=19019 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11 type=USER_START msg=audit(1254344461.947:172): user pid=19019 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254344462.167:173): user pid=19019 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254344462.168:174): user pid=19019 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254348061.651:175): user pid=19316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254348061.653:176): user pid=19316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254348061.653:177): login pid=19316 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12 type=USER_START msg=audit(1254348061.659:178): user pid=19316 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254348061.835:179): user pid=19316 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254348061.835:180): user pid=19316 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254351661.929:181): user pid=19622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254351661.931:182): user pid=19622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254351661.932:183): login pid=19622 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13 type=USER_START msg=audit(1254351661.937:184): user pid=19622 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254351662.107:185): user pid=19622 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254351662.109:186): user pid=19622 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254355261.199:187): user pid=19942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254355261.201:188): user pid=19942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254355261.202:189): login pid=19942 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14 type=USER_START msg=audit(1254355261.207:190): user pid=19942 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254355261.391:191): user pid=19942 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254355261.392:192): user pid=19942 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254358861.480:193): user pid=20443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254358861.482:194): user pid=20443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254358861.482:195): login pid=20443 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15 type=USER_START msg=audit(1254358861.488:196): user pid=20443 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254358861.671:197): user pid=20443 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254358861.671:198): user pid=20443 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254362461.864:199): user pid=22263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254362461.877:200): user pid=22263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254362461.878:201): login pid=22263 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16 type=USER_START msg=audit(1254362461.890:202): user pid=22263 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254362462.339:203): user pid=22263 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254362462.340:204): user pid=22263 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254366061.439:205): user pid=22550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254366061.441:206): user pid=22550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254366061.441:207): login pid=22550 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17 type=USER_START msg=audit(1254366061.446:208): user pid=22550 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254366061.598:209): user pid=22550 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254366061.599:210): user pid=22550 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254369661.689:211): user pid=22955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254369661.691:212): user pid=22955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254369661.692:213): login pid=22955 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=18 type=USER_START msg=audit(1254369661.697:214): user pid=22955 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254369662.207:215): user pid=22955 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254369662.208:216): user pid=22955 uid=0 auid=0 ses=18 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254373261.284:217): user pid=23102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254373261.286:218): user pid=23102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254373261.287:219): login pid=23102 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=19 type=USER_START msg=audit(1254373261.292:220): user pid=23102 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254373261.540:221): user pid=23102 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254373261.540:222): user pid=23102 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254374715.180:223): user pid=23167 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=ANOM_ABEND msg=audit(1254375168.758:224): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=17818 comm="nm-applet" sig=6 type=AVC msg=audit(1254375168.925:225): avc: denied { write } for pid=1747 comm="abrtd" name="rpm" dev=dm-1 ino=19 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=dir type=SYSCALL msg=audit(1254375168.925:225): arch=c000003e syscall=21 success=yes exit=0 a0=132fcb0 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254375168.928:226): avc: denied { read write } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254375168.928:226): avc: denied { open } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254375168.928:226): arch=c000003e syscall=2 success=yes exit=0 a0=12a9f70 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254375168.936:227): avc: denied { read } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254375168.936:227): avc: denied { open } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254375168.936:227): arch=c000003e syscall=2 success=yes exit=0 a0=1321020 a1=0 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254375169.030:228): avc: denied { read } for pid=1747 comm="abrtd" path="/var/lib/rpm/Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254375169.030:228): arch=c000003e syscall=17 success=yes exit=4096 a0=7 a1=7f8ec55eca70 a2=1000 a3=2b7e000 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254375169.072:229): avc: denied { read write } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=AVC msg=audit(1254375169.072:229): avc: denied { open } for pid=1747 comm="abrtd" name="__db.001" dev=dm-1 ino=2536 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254375169.072:229): arch=c000003e syscall=2 success=yes exit=0 a0=12bea80 a1=2 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254375169.074:230): avc: denied { open } for pid=1747 comm="abrtd" name="Packages" dev=dm-1 ino=24 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:object_r:rpm_var_lib_t:s0 tclass=file type=SYSCALL msg=audit(1254375169.074:230): arch=c000003e syscall=2 success=yes exit=0 a0=12acf90 a1=0 a2=0 a3=0 items=0 ppid=1 pid=1747 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_AUTH msg=audit(1254375690.282:231): user pid=1656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254375690.288:232): user pid=1656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254375694.170:233): user pid=23735 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1254375694.177:234): user pid=23735 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=CRED_ACQ msg=audit(1254375694.180:235): user pid=23735 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1254375694.190:236): user pid=23735 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1254375694.190:237): user pid=23735 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1254375694.192:238): user pid=23735 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1254375694.197:239): user pid=23741 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1254376861.651:240): user pid=24009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254376861.654:241): user pid=24009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254376861.654:242): login pid=24009 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=20 type=USER_START msg=audit(1254376861.659:243): user pid=24009 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254376861.880:244): user pid=24009 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254376861.881:245): user pid=24009 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254380461.990:246): user pid=24501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254380461.992:247): user pid=24501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254380461.992:248): login pid=24501 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=21 type=USER_START msg=audit(1254380461.997:249): user pid=24501 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254380462.180:250): user pid=24501 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254380462.181:251): user pid=24501 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254384061.279:252): user pid=24718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254384061.281:253): user pid=24718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254384061.282:254): login pid=24718 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=22 type=USER_START msg=audit(1254384061.287:255): user pid=24718 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254384061.779:256): user pid=24718 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254384061.780:257): user pid=24718 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254385271.803:258): user pid=24879 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254387536.349:259): user pid=26583 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=failed' type=USER_AUTH msg=audit(1254387543.840:260): user pid=26588 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254387662.019:261): user pid=26591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254387662.023:262): user pid=26591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254387662.024:263): login pid=26591 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=23 type=USER_START msg=audit(1254387662.028:264): user pid=26591 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254387662.213:265): user pid=26591 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254387662.213:266): user pid=26591 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254389564.312:267): user pid=26920 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254389569.251:268): user pid=1656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254389569.264:269): user pid=1656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254389584.841:270): user pid=27091 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254389584.847:271): user pid=27091 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254389584.854:272): user pid=27091 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254389584.862:273): user pid=27091 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254389584.863:274): user pid=27091 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254389584.867:275): user pid=27091 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254389584.871:276): user pid=27095 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254389606.942:277): user pid=27193 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254389606.951:278): user pid=27193 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254389606.952:279): user pid=27193 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254389606.954:280): user pid=27193 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254389606.958:281): user pid=27194 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254391261.405:282): user pid=28079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254391261.409:283): user pid=28079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254391261.410:284): login pid=28079 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=24 type=USER_START msg=audit(1254391261.415:285): user pid=28079 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254391261.653:286): user pid=28079 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254391261.654:287): user pid=28079 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254392795.711:288): user pid=28261 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254392846.787:289): user pid=28271 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254392846.793:290): user pid=28271 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=ADD_USER msg=audit(1254393152.141:291): user pid=28933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="ntp" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' type=ADD_USER msg=audit(1254393152.142:292): user pid=28933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="ntp" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' type=ADD_USER msg=audit(1254393175.138:293): user pid=28955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="rpcuser" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' type=ADD_USER msg=audit(1254393175.139:294): user pid=28955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="rpcuser" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' type=MAC_POLICY_LOAD msg=audit(1254393250.362:295): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1254393250.362:295): arch=c000003e syscall=1 success=yes exit=4064091 a0=4 a1=7f6107e0f000 a2=3e035b a3=7fff5b321120 items=0 ppid=29023 pid=29028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="load_policy" exe="/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) type=DAEMON_CONFIG msg=audit(1254393467.176:7855) config changed, auid=0 pid=10453 subj=system_u:system_r:initrc_t:s0 res=success type=AVC msg=audit(1254393551.043:296): avc: denied { getcap } for pid=10674 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=process type=SYSCALL msg=audit(1254393551.043:296): arch=c000003e syscall=125 success=no exit=-14 a0=1e53aa4 a1=0 a2=3162d7be80 a3=7fff67550620 items=0 ppid=1 pid=10674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) type=AVC msg=audit(1254393551.043:297): avc: denied { setcap } for pid=10674 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=process type=SYSCALL msg=audit(1254393551.043:297): arch=c000003e syscall=126 success=yes exit=0 a0=1e53aa4 a1=1e53aac a2=6 a3=7fff67550640 items=0 ppid=1 pid=10674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) type=USER_AUTH msg=audit(1254393754.890:298): user pid=10679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254393754.899:299): user pid=10679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254393830.575:300): user pid=11009 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254393830.582:301): user pid=11009 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254393830.649:302): user pid=11009 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254393830.690:303): user pid=11009 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254393830.691:304): user pid=11009 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254393830.697:305): user pid=11009 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254393830.701:306): user pid=11015 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_AUTH msg=audit(1254393886.286:307): user pid=10679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254393886.297:308): user pid=10679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254394200.665:309): user pid=10679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254394200.671:310): user pid=10679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254394861.989:311): user pid=11977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254394861.999:312): user pid=11977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254394862.001:313): login pid=11977 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=25 type=USER_START msg=audit(1254394862.044:314): user pid=11977 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254394862.596:315): user pid=11977 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254394862.596:316): user pid=11977 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254398461.690:317): user pid=14116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254398461.693:318): user pid=14116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254398461.693:319): login pid=14116 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=26 type=USER_START msg=audit(1254398461.699:320): user pid=14116 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254398461.902:321): user pid=14116 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254398461.903:322): user pid=14116 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254402061.983:323): user pid=15792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254402061.986:324): user pid=15792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254402061.986:325): login pid=15792 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=27 type=USER_START msg=audit(1254402061.992:326): user pid=15792 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254402062.175:327): user pid=15792 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254402062.176:328): user pid=15792 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254403518.584:329): user pid=17373 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254403518.590:330): user pid=17373 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254403530.065:331): user pid=17447 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=USER_ACCT msg=audit(1254403530.072:332): user pid=17447 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=CRED_ACQ msg=audit(1254403530.095:333): user pid=17447 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_START msg=audit(1254403530.114:334): user pid=17447 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_END msg=audit(1254403530.114:335): user pid=17447 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_CMD msg=audit(1254403530.120:336): user pid=17447 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/3 res=success' type=USER_ROLE_CHANGE msg=audit(1254403530.124:337): user pid=17454 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=ANOM_PROMISCUOUS msg=audit(1254403992.396:338): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1254403992.396:338): arch=c000003e syscall=16 success=yes exit=0 a0=11 a1=89a2 a2=7f45bd9fcd90 a3=7f45bd9fcb20 items=0 ppid=1 pid=1918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) type=ANOM_PROMISCUOUS msg=audit(1254404023.064:339): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 type=ANOM_PROMISCUOUS msg=audit(1254404092.627:340): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1254404092.627:340): arch=c000003e syscall=16 success=yes exit=0 a0=11 a1=89a2 a2=7f45bc5fadc0 a3=7 items=0 ppid=1 pid=1920 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) type=ANOM_PROMISCUOUS msg=audit(1254404328.004:341): dev=vnet1 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1254404328.004:341): arch=c000003e syscall=16 success=yes exit=0 a0=11 a1=89a2 a2=7f45bbbf9dc0 a3=3162d7b14c items=0 ppid=1 pid=1921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) type=USER_ACCT msg=audit(1254405661.806:342): user pid=20841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254405661.813:343): user pid=20841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254405661.814:344): login pid=20841 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=28 type=USER_START msg=audit(1254405661.924:345): user pid=20841 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254405663.203:346): user pid=20841 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254405663.203:347): user pid=20841 uid=0 auid=0 ses=28 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254409261.877:348): user pid=4203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254409261.880:349): user pid=4203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254409261.880:350): login pid=4203 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=29 type=USER_START msg=audit(1254409262.002:351): user pid=4203 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254409265.086:352): user pid=4203 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254409265.087:353): user pid=4203 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254409376.642:354): user pid=4440 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/5 res=success' type=USER_ACCT msg=audit(1254409376.646:355): user pid=4440 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/5 res=success' type=CRED_ACQ msg=audit(1254409376.734:356): user pid=4440 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/5 res=success' type=USER_START msg=audit(1254409376.739:357): user pid=4440 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/5 res=success' type=USER_END msg=audit(1254409376.740:358): user pid=4440 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/5 res=success' type=USER_CMD msg=audit(1254409376.741:359): user pid=4440 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/rpmbuild" cmd=2F62696E2F72706D202D5576682052504D532F7838365F36342F67616A696D2D6465627567696E666F2D302E31332D302E312E323030393130303168672E312E666331322E7838365F36342E72706D2052504D532F7838365F36342F67616A696D2D302E31332D302E312E323030393130303168672E312E666331322E7838365F36342E72706D terminal=pts/5 res=success' type=USER_ROLE_CHANGE msg=audit(1254409376.747:360): user pid=4449 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/5 res=success' type=USER_AUTH msg=audit(1254410315.696:361): user pid=5843 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254410315.711:362): user pid=5843 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=AVC msg=audit(1254410329.621:363): avc: denied { write } for pid=5841 comm="cups-pk-helper-" name="tmpw0DoJK" dev=tmpfs ino=906697 scontext=system_u:system_r:cupsd_config_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=file type=SYSCALL msg=audit(1254410329.621:363): arch=c000003e syscall=2 success=yes exit=10 a0=bb5e60 a1=281 a2=bb5e60 a3=7fffb725b230 items=0 ppid=1 pid=5841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cups-pk-helper-" exe="/usr/libexec/cups-pk-helper-mechanism" subj=system_u:system_r:cupsd_config_t:s0-s0:c0.c1023 key=(null) type=USER_AUTH msg=audit(1254410406.775:364): user pid=6072 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_ACCT msg=audit(1254410406.808:365): user pid=6072 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254410406.838:366): user pid=6072 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254410406.847:367): user pid=6072 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254410406.847:368): user pid=6072 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254410406.848:369): user pid=6072 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254410406.860:370): user pid=6083 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_AUTH msg=audit(1254410456.206:371): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=CRED_ACQ msg=audit(1254410456.207:372): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_ACCT msg=audit(1254410456.213:373): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_AUTH msg=audit(1254410456.306:374): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=CRED_ACQ msg=audit(1254410456.306:375): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_ACCT msg=audit(1254410456.335:376): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_AUTH msg=audit(1254410456.432:377): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=CRED_ACQ msg=audit(1254410456.433:378): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_ACCT msg=audit(1254410456.468:379): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_AUTH msg=audit(1254410456.574:380): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=CRED_ACQ msg=audit(1254410456.575:381): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_ACCT msg=audit(1254410456.580:382): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_AUTH msg=audit(1254410480.354:383): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=CRED_ACQ msg=audit(1254410480.355:384): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_ACCT msg=audit(1254410480.362:385): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_AUTH msg=audit(1254410595.093:386): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=CRED_ACQ msg=audit(1254410595.094:387): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_ACCT msg=audit(1254410595.101:388): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=LABEL_LEVEL_CHANGE msg=audit(1254410621.460:389): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=USER_AUTH msg=audit(1254410621.608:390): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=CRED_ACQ msg=audit(1254410621.608:391): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_ACCT msg=audit(1254410621.613:392): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_AUTH msg=audit(1254410621.683:393): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=CRED_ACQ msg=audit(1254410621.683:394): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_ACCT msg=audit(1254410621.714:395): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_AUTH msg=audit(1254410621.758:396): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=CRED_ACQ msg=audit(1254410621.758:397): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_ACCT msg=audit(1254410621.763:398): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=LABEL_LEVEL_CHANGE msg=audit(1254410621.766:399): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=USER_AUTH msg=audit(1254410621.805:400): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=CRED_ACQ msg=audit(1254410621.805:401): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_ACCT msg=audit(1254410621.812:402): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=LABEL_LEVEL_CHANGE msg=audit(1254410621.813:403): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=USER_AUTH msg=audit(1254410621.852:404): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=CRED_ACQ msg=audit(1254410621.853:405): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_ACCT msg=audit(1254410621.858:406): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_AUTH msg=audit(1254410621.897:407): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=CRED_ACQ msg=audit(1254410621.898:408): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_ACCT msg=audit(1254410621.904:409): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_AUTH msg=audit(1254410621.944:410): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=CRED_ACQ msg=audit(1254410621.945:411): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_ACCT msg=audit(1254410621.951:412): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_AUTH msg=audit(1254410622.035:413): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=CRED_ACQ msg=audit(1254410622.035:414): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_ACCT msg=audit(1254410622.048:415): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_AUTH msg=audit(1254410622.100:416): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=CRED_ACQ msg=audit(1254410622.100:417): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_ACCT msg=audit(1254410622.105:418): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_AUTH msg=audit(1254410622.151:419): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=CRED_ACQ msg=audit(1254410622.164:420): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_ACCT msg=audit(1254410622.170:421): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_AUTH msg=audit(1254410622.233:422): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=CRED_ACQ msg=audit(1254410622.234:423): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=USER_ACCT msg=audit(1254410622.254:424): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/cupsd" hostname=192.168.122.172 addr=192.168.122.172 terminal=cups res=success' type=LABEL_LEVEL_CHANGE msg=audit(1254410760.260:425): user pid=1368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=USER_AUTH msg=audit(1254411439.881:426): user pid=7632 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_ACCT msg=audit(1254411439.901:427): user pid=7632 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254411439.902:428): user pid=7632 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254411439.918:429): user pid=7632 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254411439.918:430): user pid=7632 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254411439.919:431): user pid=7632 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254411439.924:432): user pid=7641 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=LABEL_LEVEL_CHANGE msg=audit(1254411541.082:433): user pid=7879 uid=0 auid=500 ses=1 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=LABEL_LEVEL_CHANGE msg=audit(1254411703.149:434): user pid=7879 uid=0 auid=500 ses=1 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=LABEL_LEVEL_CHANGE msg=audit(1254411703.514:435): user pid=7879 uid=0 auid=500 ses=1 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=LABEL_LEVEL_CHANGE msg=audit(1254411715.398:436): user pid=8149 uid=0 auid=500 ses=1 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=LABEL_LEVEL_CHANGE msg=audit(1254411752.876:437): user pid=8149 uid=0 auid=500 ses=1 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=LABEL_LEVEL_CHANGE msg=audit(1254411753.221:438): user pid=8149 uid=0 auid=500 ses=1 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=LABEL_LEVEL_CHANGE msg=audit(1254411877.025:439): user pid=8643 uid=0 auid=500 ses=1 subj=unconfined_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=ANOM_PROMISCUOUS msg=audit(1254411940.431:440): dev=vnet1 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 type=SYSCALL msg=audit(1254411940.431:440): arch=c000003e syscall=3 success=yes exit=0 a0=13 a1=7fffeb7385d0 a2=8 a3=1 items=0 ppid=1 pid=18635 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/bin/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c558,c619 key=(null) type=USER_AUTH msg=audit(1254412168.288:441): user pid=8963 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_ACCT msg=audit(1254412168.293:442): user pid=8963 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254412168.295:443): user pid=8963 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254412168.316:444): user pid=8963 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254412168.317:445): user pid=8963 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254412168.320:446): user pid=8963 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254412168.323:447): user pid=8970 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_ACCT msg=audit(1254412861.229:448): user pid=9610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254412861.232:449): user pid=9610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254412861.233:450): login pid=9610 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=30 type=USER_START msg=audit(1254412861.237:451): user pid=9610 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254412861.732:452): user pid=9610 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254412861.733:453): user pid=9610 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254415519.332:454): user pid=10679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254415519.361:455): user pid=10679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254416461.822:456): user pid=11490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254416461.825:457): user pid=11490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254416461.825:458): login pid=11490 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=31 type=USER_START msg=audit(1254416461.829:459): user pid=11490 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254416462.086:460): user pid=11490 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254416462.087:461): user pid=11490 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254417862.562:462): user pid=12172 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254421670.005:463): user pid=12545 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=SYSTEM_SHUTDOWN msg=audit(1254422144.088:464): user pid=12634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:consolekit_t:s0-s0:c0.c1023 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=? res=success' type=SYSTEM_RUNLEVEL msg=audit(1254422144.223:465): user pid=12642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='old-level=5 new-level=6: exe="/sbin/runlevel" hostname=? addr=? terminal=console res=success' type=DAEMON_END msg=audit(1254422159.467:8090): auditd normal halt, sending auid=0 pid=12873 subj=system_u:system_r:initrc_t:s0 res=success type=DAEMON_START msg=audit(1254422239.286:7088): auditd start, ver=2.0.1 format=raw kernel=2.6.31.1-56.fc12.x86_64 auid=4294967295 pid=1212 subj=system_u:system_r:auditd_t:s0 res=success type=CONFIG_CHANGE msg=audit(1254422239.422:6): audit_backlog_limit=320 old=256 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 type=LABEL_LEVEL_CHANGE msg=audit(1254422244.978:7): user pid=1407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=AVC msg=audit(1254422248.777:8): avc: denied { getcap } for pid=1679 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=process type=SYSCALL msg=audit(1254422248.777:8): arch=c000003e syscall=125 success=no exit=-14 a0=15fdaa4 a1=0 a2=3162d7be80 a3=7fffa10d4510 items=0 ppid=1 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) type=AVC msg=audit(1254422248.779:9): avc: denied { setcap } for pid=1679 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=process type=SYSCALL msg=audit(1254422248.779:9): arch=c000003e syscall=126 success=yes exit=0 a0=15fdaa4 a1=15fdaac a2=6 a3=7fffa10d4530 items=0 ppid=1 pid=1679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) type=USER_AUTH msg=audit(1254422291.130:10): user pid=1970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=failed' type=USER_LOGIN msg=audit(1254422291.131:11): user pid=1970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=failed' type=USER_AUTH msg=audit(1254422293.712:12): user pid=1969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1254422293.719:13): user pid=1969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=CRED_ACQ msg=audit(1254422293.769:14): user pid=1969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=LOGIN msg=audit(1254422293.772:15): login pid=1969 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1 type=USER_ROLE_CHANGE msg=audit(1254422293.832:16): user pid=1969 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254422294.224:17): user pid=1969 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_LOGIN msg=audit(1254422294.225:18): user pid=1969 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=success' type=USER_ACCT msg=audit(1254423661.245:19): user pid=2957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254423661.251:20): user pid=2957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254423661.251:21): login pid=2957 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 type=USER_START msg=audit(1254423661.256:22): user pid=2957 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254423661.731:23): user pid=2957 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254423661.731:24): user pid=2957 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254426007.629:25): user pid=1689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254426007.647:26): user pid=1689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254427261.614:27): user pid=4741 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254427261.620:28): user pid=4741 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254427261.623:29): user pid=4741 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254427261.631:30): user pid=4741 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254427261.631:31): user pid=4741 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254427261.636:32): user pid=4741 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D206C697374206379636C65 terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254427261.640:33): user pid=4750 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254427261.812:34): user pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254427261.815:35): user pid=4751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254427261.816:36): login pid=4751 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 type=USER_START msg=audit(1254427261.821:37): user pid=4751 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254427262.085:38): user pid=4751 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254427262.085:39): user pid=4751 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254427360.437:40): user pid=4842 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254427360.449:41): user pid=4842 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254427360.450:42): user pid=4842 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254427360.451:43): user pid=4842 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254427360.454:44): user pid=4844 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_AUTH msg=audit(1254429704.383:45): user pid=1689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254429704.390:46): user pid=1689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254430861.166:47): user pid=5747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254430861.170:48): user pid=5747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254430861.170:49): login pid=5747 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 type=USER_START msg=audit(1254430861.175:50): user pid=5747 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254430861.390:51): user pid=5747 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254430861.391:52): user pid=5747 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254430953.113:53): user pid=1689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254430953.120:54): user pid=1689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254435133.101:55): user pid=7651 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=failed' type=USER_AUTH msg=audit(1254435142.301:56): user pid=1689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254435142.308:57): user pid=1689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254435152.464:58): user pid=7733 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=ANOM_ABEND msg=audit(1254435298.886:59): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=2134 comm="nautilus" sig=6 type=USER_AVC msg=audit(1254435316.006:60): user pid=1386 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.PolicyKit1.Authority member=CheckAuthorization dest=org.freedesktop.PolicyKit1 spid=7769 tpid=1961 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tclass=dbus : exe="/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' type=DAEMON_START msg=audit(1254473776.224:890): auditd start, ver=2.0.1 format=raw kernel=2.6.31.1-56.fc12.x86_64 auid=4294967295 pid=1181 subj=system_u:system_r:auditd_t:s0 res=success type=CONFIG_CHANGE msg=audit(1254473776.366:6): audit_backlog_limit=320 old=256 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 type=LABEL_LEVEL_CHANGE msg=audit(1254473783.753:7): user pid=1366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=AVC msg=audit(1254473787.403:8): avc: denied { getcap } for pid=1635 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=process type=SYSCALL msg=audit(1254473787.403:8): arch=c000003e syscall=125 success=no exit=-14 a0=11bdaa4 a1=0 a2=3162d7be80 a3=24 items=0 ppid=1 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) type=AVC msg=audit(1254473787.406:9): avc: denied { setcap } for pid=1635 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=process type=SYSCALL msg=audit(1254473787.406:9): arch=c000003e syscall=126 success=yes exit=0 a0=11bdaa4 a1=11bdaac a2=6 a3=0 items=0 ppid=1 pid=1635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) type=USER_AUTH msg=audit(1254473820.017:10): user pid=1929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=failed' type=USER_LOGIN msg=audit(1254473820.017:11): user pid=1929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=failed' type=USER_AUTH msg=audit(1254473822.733:12): user pid=1928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1254473822.740:13): user pid=1928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=CRED_ACQ msg=audit(1254473822.795:14): user pid=1928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=LOGIN msg=audit(1254473822.797:15): login pid=1928 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1 type=USER_ROLE_CHANGE msg=audit(1254473822.857:16): user pid=1928 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254473823.178:17): user pid=1928 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_LOGIN msg=audit(1254473823.179:18): user pid=1928 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=success' type=USER_ACCT msg=audit(1254474061.657:19): user pid=2442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254474061.661:20): user pid=2442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254474061.661:21): login pid=2442 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 type=USER_START msg=audit(1254474061.666:22): user pid=2442 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254474062.071:23): user pid=2442 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254474062.073:24): user pid=2442 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254477661.179:25): user pid=3867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254477661.182:26): user pid=3867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254477661.182:27): login pid=3867 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 type=USER_START msg=audit(1254477661.187:28): user pid=3867 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254477661.402:29): user pid=3867 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254477661.404:30): user pid=3867 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=ANOM_ABEND msg=audit(1254481472.515:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=1587 comm="wpa_supplicant" sig=11 type=USER_AUTH msg=audit(1254481476.125:32): user pid=4715 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254482947.589:33): user pid=1646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254482947.596:34): user pid=1646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254484861.582:35): user pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254484861.586:36): user pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254484861.586:37): login pid=5976 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 type=USER_START msg=audit(1254484861.591:38): user pid=5976 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254484862.025:39): user pid=5976 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254484862.025:40): user pid=5976 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254485485.659:41): user pid=1646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254485485.681:42): user pid=1646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254488461.109:43): user pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254488461.112:44): user pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254488461.113:45): login pid=7221 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5 type=USER_START msg=audit(1254488461.117:46): user pid=7221 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254488461.365:47): user pid=7221 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254488461.366:48): user pid=7221 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254488901.138:49): user pid=22397 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1254488901.144:50): user pid=22397 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=CRED_ACQ msg=audit(1254488901.147:51): user pid=22397 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1254488901.153:52): user pid=22397 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1254488901.153:53): user pid=22397 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1254488901.158:54): user pid=22397 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/rpmbuild" cmd=2F62696E2F72706D202D5576682052504D532F7838365F36342F67616A696D2D6465627567696E666F2D302E31332D302E312E323030393130303268672E312E666331322E7838365F36342E72706D2052504D532F7838365F36342F67616A696D2D302E31332D302E312E323030393130303268672E312E666331322E7838365F36342E72706D terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1254488901.162:55): user pid=22404 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_AUTH msg=audit(1254490067.464:56): user pid=1646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254490067.470:57): user pid=1646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254492061.463:58): user pid=23469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254492061.465:59): user pid=23469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254492061.465:60): login pid=23469 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6 type=USER_START msg=audit(1254492061.470:61): user pid=23469 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254492061.960:62): user pid=23469 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254492061.961:63): user pid=23469 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254495661.072:64): user pid=24767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254495661.074:65): user pid=24767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254495661.075:66): login pid=24767 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 type=USER_START msg=audit(1254495661.079:67): user pid=24767 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254495661.293:68): user pid=24767 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254495661.293:69): user pid=24767 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254499261.402:70): user pid=26034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254499261.405:71): user pid=26034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254499261.406:72): login pid=26034 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8 type=USER_START msg=audit(1254499261.410:73): user pid=26034 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254499261.584:74): user pid=26034 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254499261.584:75): user pid=26034 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=ANOM_ABEND msg=audit(1254500505.859:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:NetworkManager_t:s0-s0:c0.c1023 pid=4710 comm="wpa_supplicant" sig=11 type=USER_AUTH msg=audit(1254500509.742:77): user pid=26647 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=DAEMON_START msg=audit(1254581279.208:3364): auditd start, ver=2.0.1 format=raw kernel=2.6.31.1-56.fc12.x86_64 auid=4294967295 pid=1243 subj=system_u:system_r:auditd_t:s0 res=success type=CONFIG_CHANGE msg=audit(1254581279.356:5): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 type=LABEL_LEVEL_CHANGE msg=audit(1254581286.817:6): user pid=1428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=AVC msg=audit(1254581290.714:7): avc: denied { getcap } for pid=1700 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=process type=SYSCALL msg=audit(1254581290.714:7): arch=c000003e syscall=125 success=no exit=-14 a0=d0daa4 a1=0 a2=3162d7be80 a3=24 items=0 ppid=1695 pid=1700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) type=AVC msg=audit(1254581290.714:8): avc: denied { setcap } for pid=1700 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=process type=SYSCALL msg=audit(1254581290.714:8): arch=c000003e syscall=126 success=yes exit=0 a0=d0daa4 a1=d0daac a2=6 a3=0 items=0 ppid=1695 pid=1700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) type=USER_AUTH msg=audit(1254581326.705:9): user pid=1995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=failed' type=USER_LOGIN msg=audit(1254581326.706:10): user pid=1995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=failed' type=USER_AUTH msg=audit(1254581333.606:11): user pid=1994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1254581333.613:12): user pid=1994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=CRED_ACQ msg=audit(1254581333.668:13): user pid=1994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=LOGIN msg=audit(1254581333.670:14): login pid=1994 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1 type=USER_ROLE_CHANGE msg=audit(1254581333.727:15): user pid=1994 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254581334.021:16): user pid=1994 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_LOGIN msg=audit(1254581334.023:17): user pid=1994 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=success' type=ANOM_ABEND msg=audit(1254581463.466:18): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=2159 comm="nautilus" sig=6 type=ANOM_ABEND msg=audit(1254581932.344:19): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=2174 comm="nm-applet" sig=6 type=USER_AVC msg=audit(1254581969.761:20): user pid=1407 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.PolicyKit1.Authority member=CheckAuthorization dest=org.freedesktop.PolicyKit1 spid=3327 tpid=1986 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tclass=dbus : exe="/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' type=AVC msg=audit(1254581969.763:21): avc: denied { getattr } for pid=1986 comm="polkitd" path="/proc/3327" dev=proc ino=29774 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dir type=SYSCALL msg=audit(1254581969.763:21): arch=c000003e syscall=4 success=yes exit=0 a0=7fff1b504350 a1=7fff1b5042c0 a2=7fff1b5042c0 a3=1 items=0 ppid=1 pid=1986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="polkitd" exe="/usr/libexec/polkit-1/polkitd" subj=system_u:system_r:policykit_t:s0-s0:c0.c1023 key=(null) type=USER_AVC msg=audit(1254581969.770:22): user pid=1407 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_return dest=:1.74 spid=1986 tpid=3327 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dbus : exe="/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' type=USER_AUTH msg=audit(1254581976.282:23): user pid=3335 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=USER_ACCT msg=audit(1254581976.288:24): user pid=3335 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=CRED_ACQ msg=audit(1254581976.291:25): user pid=3335 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_START msg=audit(1254581976.300:26): user pid=3335 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_END msg=audit(1254581976.300:27): user pid=3335 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_CMD msg=audit(1254581976.303:28): user pid=3335 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/3 res=success' type=USER_ROLE_CHANGE msg=audit(1254581976.308:29): user pid=3341 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=USER_ACCT msg=audit(1254582061.090:30): user pid=3401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254582061.093:31): user pid=3401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254582061.094:32): login pid=3401 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 type=USER_START msg=audit(1254582061.099:33): user pid=3401 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254582061.502:34): user pid=3401 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254582061.503:35): user pid=3401 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254582126.995:36): user pid=3457 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254582127.001:37): user pid=3457 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=ADD_USER msg=audit(1254582828.784:38): user pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="rpcuser" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' type=ADD_USER msg=audit(1254582828.785:39): user pid=4489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="rpcuser" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' type=ADD_USER msg=audit(1254583002.294:40): user pid=4807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="dbus" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' type=ADD_USER msg=audit(1254583002.294:41): user pid=4807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="dbus" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' type=SYSTEM_SHUTDOWN msg=audit(1254583246.474:42): user pid=5093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:consolekit_t:s0-s0:c0.c1023 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=? res=success' type=ANOM_ABEND msg=audit(1254583246.495:43): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=2569 comm="gnome-keyring-d" sig=11 type=SYSTEM_RUNLEVEL msg=audit(1254583246.593:44): user pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='old-level=5 new-level=6: exe="/sbin/runlevel" hostname=? addr=? terminal=console res=success' type=ANOM_ABEND msg=audit(1254583246.730:45): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=2036 comm="seahorse-agent" sig=6 type=DAEMON_END msg=audit(1254583252.016:3365): auditd normal halt, sending auid=0 pid=5309 subj=system_u:system_r:initrc_t:s0 res=success type=DAEMON_START msg=audit(1254583369.611:726): auditd start, ver=2.0.1 format=raw kernel=2.6.31.1-56.fc12.x86_64 auid=4294967295 pid=1204 subj=system_u:system_r:auditd_t:s0 res=success type=CONFIG_CHANGE msg=audit(1254583369.763:6): audit_backlog_limit=320 old=256 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 type=LABEL_LEVEL_CHANGE msg=audit(1254583375.250:7): user pid=1401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=AVC msg=audit(1254583380.775:8): avc: denied { getcap } for pid=1673 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=process type=SYSCALL msg=audit(1254583380.775:8): arch=c000003e syscall=125 success=no exit=-14 a0=1083aa4 a1=0 a2=3162d7be80 a3=24 items=0 ppid=1671 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) type=AVC msg=audit(1254583380.778:9): avc: denied { setcap } for pid=1673 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=process type=SYSCALL msg=audit(1254583380.778:9): arch=c000003e syscall=126 success=yes exit=0 a0=1083aa4 a1=1083aac a2=6 a3=0 items=0 ppid=1 pid=1673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) type=AVC msg=audit(1254583380.806:10): avc: denied { mmap_zero } for pid=1662 comm="ntpd" scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:system_r:ntpd_t:s0 tclass=memprotect type=SYSCALL msg=audit(1254583380.806:10): arch=c000003e syscall=125 success=no exit=-14 a0=7ffff7e32284 a1=0 a2=7ffff5dc0e80 a3=7fffdfe00600 items=0 ppid=1 pid=1662 auid=4294967295 uid=38 gid=38 euid=38 suid=38 fsuid=38 egid=38 sgid=38 fsgid=38 tty=(none) ses=4294967295 comm="ntpd" exe="/usr/sbin/ntpd" subj=system_u:system_r:ntpd_t:s0 key=(null) type=USER_AUTH msg=audit(1254583402.765:11): user pid=1965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=failed' type=USER_LOGIN msg=audit(1254583402.766:12): user pid=1965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=failed' type=USER_AUTH msg=audit(1254583404.999:13): user pid=1964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1254583405.006:14): user pid=1964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=CRED_ACQ msg=audit(1254583405.058:15): user pid=1964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=LOGIN msg=audit(1254583405.060:16): login pid=1964 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1 type=USER_ROLE_CHANGE msg=audit(1254583405.118:17): user pid=1964 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254583405.521:18): user pid=1964 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_LOGIN msg=audit(1254583405.522:19): user pid=1964 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=success' type=USER_AUTH msg=audit(1254584597.602:20): user pid=1683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254584597.608:21): user pid=1683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254585661.415:22): user pid=4057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254585661.419:23): user pid=4057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254585661.420:24): login pid=4057 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 type=USER_START msg=audit(1254585661.425:25): user pid=4057 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254585661.808:26): user pid=4057 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254585661.808:27): user pid=4057 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254589262.044:28): user pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254589262.049:29): user pid=8903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254589262.049:30): login pid=8903 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 type=USER_START msg=audit(1254589262.168:31): user pid=8903 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254589262.586:32): user pid=8903 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254589262.587:33): user pid=8903 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254592475.253:34): user pid=9197 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254592861.685:35): user pid=9214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254592861.687:36): user pid=9214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254592861.688:37): login pid=9214 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 type=USER_START msg=audit(1254592861.693:38): user pid=9214 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254592861.920:39): user pid=9214 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254592861.921:40): user pid=9214 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254596462.037:41): user pid=9493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254596462.043:42): user pid=9493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254596462.044:43): login pid=9493 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5 type=USER_START msg=audit(1254596462.049:44): user pid=9493 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254596462.238:45): user pid=9493 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254596462.239:46): user pid=9493 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254597718.514:47): user pid=1683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254597718.520:48): user pid=1683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254597797.380:49): user pid=10049 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254597797.387:50): user pid=10049 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254598472.395:51): user pid=10186 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254598472.402:52): user pid=10186 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254598838.079:53): user pid=1683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254598838.086:54): user pid=1683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254599279.711:55): user pid=1683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254599279.732:56): user pid=1683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254599279.903:57): user pid=24824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254599279.933:58): user pid=24824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254599324.103:59): user pid=25714 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254599324.110:60): user pid=25714 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254599324.132:61): user pid=25714 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254599324.143:62): user pid=25714 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254599324.143:63): user pid=25714 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254599324.148:64): user pid=25714 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/rpmbuild" cmd=2F62696E2F72706D202D5576682052504D532F7838365F36342F67616A696D2D6465627567696E666F2D302E31332D302E312E323030393130303368672E312E666331322E7838365F36342E72706D2052504D532F7838365F36342F67616A696D2D302E31332D302E312E323030393130303368672E312E666331322E7838365F36342E72706D terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254599324.152:65): user pid=25720 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254600061.367:66): user pid=25944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254600061.370:67): user pid=25944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254600061.370:68): login pid=25944 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6 type=USER_START msg=audit(1254600061.376:69): user pid=25944 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254600061.677:70): user pid=25944 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254600061.678:71): user pid=25944 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254602933.113:72): user pid=8288 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254603661.778:73): user pid=8469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254603661.782:74): user pid=8469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254603661.782:75): login pid=8469 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 type=USER_START msg=audit(1254603661.787:76): user pid=8469 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254603661.973:77): user pid=8469 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254603661.976:78): user pid=8469 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254607261.065:79): user pid=8812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254607261.067:80): user pid=8812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254607261.068:81): login pid=8812 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8 type=USER_START msg=audit(1254607261.073:82): user pid=8812 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254607261.266:83): user pid=8812 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254607261.266:84): user pid=8812 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254610861.377:85): user pid=9530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254610861.381:86): user pid=9530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254610861.381:87): login pid=9530 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9 type=USER_START msg=audit(1254610861.386:88): user pid=9530 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254610861.550:89): user pid=9530 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254610861.550:90): user pid=9530 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254611385.496:91): user pid=9583 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254611729.531:92): user pid=10048 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=ANOM_ABEND msg=audit(1254613749.039:93): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 pid=12303 comm="npviewer.bin" sig=11 type=USER_ACCT msg=audit(1254614461.581:94): user pid=13610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254614461.585:95): user pid=13610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254614461.585:96): login pid=13610 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10 type=USER_START msg=audit(1254614461.589:97): user pid=13610 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254614461.755:98): user pid=13610 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254614461.755:99): user pid=13610 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=SYSTEM_SHUTDOWN msg=audit(1254616458.000:100): user pid=15134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:consolekit_t:s0-s0:c0.c1023 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=? res=success' type=SYSTEM_RUNLEVEL msg=audit(1254616458.155:101): user pid=15141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='old-level=5 new-level=0: exe="/sbin/runlevel" hostname=? addr=? terminal=console res=success' type=DAEMON_END msg=audit(1254616467.261:727): auditd normal halt, sending auid=0 pid=15347 subj=system_u:system_r:initrc_t:s0 res=success type=DAEMON_START msg=audit(1254636910.535:6447): auditd start, ver=2.0.1 format=raw kernel=2.6.31.1-56.fc12.x86_64 auid=4294967295 pid=1190 subj=system_u:system_r:auditd_t:s0 res=success type=CONFIG_CHANGE msg=audit(1254636910.739:6): audit_backlog_limit=320 old=256 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 type=LABEL_LEVEL_CHANGE msg=audit(1254636915.973:7): user pid=1371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=AVC msg=audit(1254636919.445:8): avc: denied { getcap } for pid=1643 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=process type=SYSCALL msg=audit(1254636919.445:8): arch=c000003e syscall=125 success=no exit=-14 a0=15caaa4 a1=0 a2=3162d7be80 a3=24 items=0 ppid=1640 pid=1643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) type=AVC msg=audit(1254636919.445:9): avc: denied { setcap } for pid=1643 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=process type=SYSCALL msg=audit(1254636919.445:9): arch=c000003e syscall=126 success=yes exit=0 a0=15caaa4 a1=15caaac a2=6 a3=0 items=0 ppid=1640 pid=1643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) type=USER_AUTH msg=audit(1254636946.292:10): user pid=1802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_ACCT msg=audit(1254636946.299:11): user pid=1802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=LOGIN msg=audit(1254636946.300:12): login pid=1802 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=1 type=USER_ROLE_CHANGE msg=audit(1254636946.328:13): user pid=1802 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_START msg=audit(1254636946.531:14): user pid=1802 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=CRED_ACQ msg=audit(1254636946.532:15): user pid=1802 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_LOGIN msg=audit(1254636946.533:16): user pid=1802 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=CRED_DISP msg=audit(1254637369.954:17): user pid=1802 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_END msg=audit(1254637369.956:18): user pid=1802 uid=0 auid=0 ses=1 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=SYSTEM_RUNLEVEL msg=audit(1254637370.020:19): user pid=2172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='old-level=5 new-level=1: exe="/sbin/runlevel" hostname=? addr=? terminal=console res=success' type=DAEMON_END msg=audit(1254637375.806:6448): auditd normal halt, sending auid=0 pid=2336 subj=system_u:system_r:initrc_t:s0 res=success type=DAEMON_START msg=audit(1254638763.668:5492): auditd start, ver=2.0.1 format=raw kernel=2.6.31.1-48.fc12.x86_64 auid=4294967295 pid=1193 subj=system_u:system_r:auditd_t:s0 res=success type=CONFIG_CHANGE msg=audit(1254638763.824:6): audit_backlog_limit=320 old=256 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 type=LABEL_LEVEL_CHANGE msg=audit(1254638769.630:7): user pid=1390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=AVC msg=audit(1254638773.242:8): avc: denied { getcap } for pid=1661 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=process type=SYSCALL msg=audit(1254638773.242:8): arch=c000003e syscall=125 success=no exit=-14 a0=1be9aa4 a1=0 a2=3162d7be80 a3=24 items=0 ppid=1 pid=1661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) type=AVC msg=audit(1254638773.243:9): avc: denied { setcap } for pid=1661 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=process type=SYSCALL msg=audit(1254638773.243:9): arch=c000003e syscall=126 success=yes exit=0 a0=1be9aa4 a1=1be9aac a2=6 a3=0 items=0 ppid=1 pid=1661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) type=USER_AUTH msg=audit(1254638794.826:10): user pid=1952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=failed' type=USER_LOGIN msg=audit(1254638794.827:11): user pid=1952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=failed' type=USER_AUTH msg=audit(1254638798.251:12): user pid=1951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1254638798.258:13): user pid=1951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=CRED_ACQ msg=audit(1254638798.305:14): user pid=1951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=LOGIN msg=audit(1254638798.307:15): login pid=1951 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1 type=USER_ROLE_CHANGE msg=audit(1254638798.354:16): user pid=1951 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254638798.741:17): user pid=1951 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_LOGIN msg=audit(1254638798.742:18): user pid=1951 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=success' type=USER_AUTH msg=audit(1254638855.814:19): user pid=2540 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254638855.821:20): user pid=2540 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254638855.825:21): user pid=2540 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254638855.831:22): user pid=2540 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254638855.832:23): user pid=2540 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254638855.837:24): user pid=2540 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F6765646974202F6574632F677275622E636F6E66 terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254638855.841:25): user pid=2546 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=ANOM_ABEND msg=audit(1254638881.219:26): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=2131 comm="nm-applet" sig=6 type=CRED_ACQ msg=audit(1254638899.106:27): user pid=2594 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254638899.116:28): user pid=2594 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254638899.116:29): user pid=2594 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254638899.117:30): user pid=2594 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254638899.121:31): user pid=2595 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_AUTH msg=audit(1254639438.104:32): user pid=3013 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254639438.110:33): user pid=3013 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254639438.115:34): user pid=3013 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254639438.120:35): user pid=3013 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254639438.121:36): user pid=3013 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254639438.125:37): user pid=3013 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp" cmd=2F62696E2F72706D202D557668206B65726E656C2D6669726D776172652D322E362E33312E312D35382E666331322E6E6F617263682E72706D206B65726E656C2D686561646572732D322E362E33312E312D35382E666331322E7838365F36342E72706D terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254639438.128:38): user pid=3020 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254639476.764:39): user pid=3058 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254639476.768:40): user pid=3058 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254639476.770:41): user pid=3058 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254639476.771:42): user pid=3058 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp" cmd=2F62696E2F72706D202D557668206B65726E656C2D6465627567696E666F2D636F6D6D6F6E2D7838365F36342D322E362E33312E312D35382E666331322E7838365F36342E72706D terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254639476.774:43): user pid=3059 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254639549.959:44): user pid=3144 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254639549.967:45): user pid=3144 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254639549.968:46): user pid=3144 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254639549.969:47): user pid=3144 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp" cmd=2F62696E2F72706D202D697668206B65726E656C2D322E362E33312E312D35382E666331322E7838365F36342E72706D206B65726E656C2D646576656C2D322E362E33312E312D35382E666331322E7838365F36342E72706D terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254639549.973:48): user pid=3146 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254639661.608:49): user pid=15317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254639661.612:50): user pid=15317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254639661.612:51): login pid=15317 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 type=USER_START msg=audit(1254639661.619:52): user pid=15317 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254639662.263:53): user pid=15317 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254639662.264:54): user pid=15317 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254639709.121:55): user pid=15400 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254639709.127:56): user pid=15400 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254639709.128:57): user pid=15400 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254639709.129:58): user pid=15400 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp" cmd=2F62696E2F72706D202D46766820637279707473657475702D6C756B732D646576656C2D312E312E302D302E332E666331332E7838365F36342E72706D20637279707473657475702D6C756B732D6C6962732D312E312E302D302E332E666331332E7838365F36342E72706D20637279707473657475702D6C756B732D312E312E302D302E332E666331332E7838365F36342E72706D terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254639709.132:59): user pid=15401 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254639723.267:60): user pid=15403 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254639723.274:61): user pid=15403 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254639723.275:62): user pid=15403 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254639723.277:63): user pid=15403 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254639723.281:64): user pid=15404 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_AUTH msg=audit(1254639822.116:65): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254639822.122:66): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254639822.132:67): user pid=15487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254639822.138:68): user pid=15487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254639822.954:69): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254639822.961:70): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254639828.143:71): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254639828.150:72): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254639828.476:73): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254639828.483:74): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254643078.166:75): user pid=17370 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254643261.384:76): user pid=17437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254643261.387:77): user pid=17437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254643261.387:78): login pid=17437 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 type=USER_START msg=audit(1254643261.393:79): user pid=17437 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254643261.591:80): user pid=17437 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254643261.591:81): user pid=17437 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254643988.921:82): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254643988.928:83): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=ANOM_ABEND msg=audit(1254644796.549:84): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 pid=17870 comm="npviewer.bin" sig=11 type=USER_AUTH msg=audit(1254646379.372:85): user pid=17950 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254646861.700:86): user pid=17973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254646861.704:87): user pid=17973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254646861.704:88): login pid=17973 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 type=USER_START msg=audit(1254646861.710:89): user pid=17973 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254646862.226:90): user pid=17973 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254646862.226:91): user pid=17973 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254647400.279:92): user pid=18048 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254647848.983:93): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254647848.990:94): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254647867.204:95): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254647867.214:96): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254648106.737:97): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254648106.744:98): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254648231.514:99): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254648231.520:100): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=ANOM_ABEND msg=audit(1254650376.090:101): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=19681 comm="gnome-terminal" sig=6 type=USER_AVC msg=audit(1254650420.335:102): user pid=1369 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.PolicyKit1.Authority member=CheckAuthorization dest=org.freedesktop.PolicyKit1 spid=19757 tpid=1943 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tclass=dbus : exe="/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' type=AVC msg=audit(1254650420.337:103): avc: denied { getattr } for pid=1943 comm="polkitd" path="/proc/19757" dev=proc ino=200162 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dir type=SYSCALL msg=audit(1254650420.337:103): arch=c000003e syscall=4 success=yes exit=0 a0=7fff1c0f4dd0 a1=7fff1c0f4d40 a2=7fff1c0f4d40 a3=1 items=0 ppid=1 pid=1943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="polkitd" exe="/usr/libexec/polkit-1/polkitd" subj=system_u:system_r:policykit_t:s0-s0:c0.c1023 key=(null) type=USER_AVC msg=audit(1254650420.396:104): user pid=1369 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_return dest=:1.116 spid=1943 tpid=19757 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dbus : exe="/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' type=USER_ACCT msg=audit(1254650461.352:105): user pid=19825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254650461.354:106): user pid=19825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254650461.355:107): login pid=19825 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5 type=USER_START msg=audit(1254650461.414:108): user pid=19825 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254650461.735:109): user pid=19825 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254650461.736:110): user pid=19825 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254650548.911:111): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254650548.917:112): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254650555.321:113): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254650555.328:114): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254653415.438:115): user pid=20263 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254653446.326:116): user pid=1819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_ACCT msg=audit(1254653446.333:117): user pid=1819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=LOGIN msg=audit(1254653446.334:118): login pid=1819 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6 type=USER_ROLE_CHANGE msg=audit(1254653446.391:119): user pid=1819 uid=0 auid=0 ses=6 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_START msg=audit(1254653446.488:120): user pid=1819 uid=0 auid=0 ses=6 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=CRED_ACQ msg=audit(1254653446.489:121): user pid=1819 uid=0 auid=0 ses=6 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_LOGIN msg=audit(1254653446.493:122): user pid=1819 uid=0 auid=0 ses=6 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=CRED_DISP msg=audit(1254653489.885:123): user pid=1819 uid=0 auid=0 ses=6 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_END msg=audit(1254653489.888:124): user pid=1819 uid=0 auid=0 ses=6 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_ACCT msg=audit(1254654061.843:125): user pid=24167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254654061.845:126): user pid=24167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254654061.845:127): login pid=24167 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 type=USER_START msg=audit(1254654061.851:128): user pid=24167 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254654062.023:129): user pid=24167 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254654062.023:130): user pid=24167 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254661290.299:131): user pid=24542 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254661295.210:132): user pid=24545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254661295.213:133): user pid=24545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254661295.213:134): login pid=24545 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8 type=USER_START msg=audit(1254661295.218:135): user pid=24545 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254661295.430:136): user pid=24545 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254661295.431:137): user pid=24545 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254661783.008:138): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254661783.015:139): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254661904.487:140): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254661904.493:141): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254661915.466:142): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254661915.493:143): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254661915.501:144): user pid=24768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254661915.507:145): user pid=24768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254661918.176:146): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254661918.183:147): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254664734.636:148): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254664734.642:149): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254664861.346:150): user pid=25121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254664861.349:151): user pid=25121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254664861.350:152): login pid=25121 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9 type=USER_START msg=audit(1254664861.355:153): user pid=25121 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254664861.537:154): user pid=25121 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254664861.538:155): user pid=25121 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254665751.093:156): user pid=25887 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254665837.292:157): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254665837.296:158): user pid=25924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254665837.312:159): user pid=25924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254665837.319:160): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254665837.399:161): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254665837.407:162): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254665882.380:163): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254665882.386:164): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254665882.479:165): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254665882.485:166): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254676441.530:167): user pid=26405 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254676721.230:168): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254676721.260:169): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254676721.262:170): user pid=32017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254676721.269:171): user pid=32017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254676721.298:172): user pid=32015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254676721.371:173): user pid=32015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254676721.611:174): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254676721.613:175): user pid=32015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254676721.619:176): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254676721.622:177): user pid=32015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254676801.952:178): user pid=32071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="smolt" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254676801.956:179): user pid=32071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="smolt" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254676801.957:180): login pid=32071 uid=0 old auid=4294967295 new auid=493 old ses=4294967295 new ses=10 type=USER_START msg=audit(1254676801.961:181): user pid=32071 uid=0 auid=493 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="smolt" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254676819.847:182): user pid=32071 uid=493 auid=493 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="smolt" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254676819.848:183): user pid=32071 uid=493 auid=493 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="smolt" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254678396.626:184): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254678396.632:185): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254679261.371:186): user pid=32310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254679261.378:187): user pid=32310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254679261.379:188): login pid=32310 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11 type=USER_START msg=audit(1254679261.385:189): user pid=32310 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254679261.640:190): user pid=32310 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254679261.642:191): user pid=32310 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254681396.538:192): user pid=32527 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254682175.637:193): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254682175.646:194): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254682199.770:195): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254682199.776:196): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254682861.741:197): user pid=343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254682861.745:198): user pid=343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254682861.745:199): login pid=343 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12 type=USER_START msg=audit(1254682861.751:200): user pid=343 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254682861.981:201): user pid=343 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254682861.981:202): user pid=343 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254683984.154:203): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254683984.161:204): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254684107.427:205): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254684107.437:206): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=ANOM_ABEND msg=audit(1254684890.856:207): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=903 comm="telepathy-gabbl" sig=11 type=ANOM_ABEND msg=audit(1254685255.856:208): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=1263 comm="telepathy-gabbl" sig=11 type=ANOM_ABEND msg=audit(1254685620.854:209): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=1412 comm="telepathy-gabbl" sig=11 type=USER_AUTH msg=audit(1254685769.034:210): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254685769.040:211): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=ANOM_ABEND msg=audit(1254685986.855:212): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=1588 comm="telepathy-gabbl" sig=11 type=USER_AUTH msg=audit(1254686162.131:213): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254686162.136:214): user pid=1671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254686162.159:215): user pid=1716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254686162.165:216): user pid=1716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=SYSTEM_SHUTDOWN msg=audit(1254686334.700:217): user pid=1739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=? res=success' type=SYSTEM_RUNLEVEL msg=audit(1254686334.828:218): user pid=1747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='old-level=5 new-level=6: exe="/sbin/runlevel" hostname=? addr=? terminal=console res=success' type=ANOM_ABEND msg=audit(1254686335.094:219): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=1993 comm="seahorse-agent" sig=6 type=DAEMON_END msg=audit(1254686343.577:5493): auditd normal halt, sending auid=0 pid=1982 subj=system_u:system_r:initrc_t:s0 res=success type=DAEMON_START msg=audit(1254722194.721:9012): auditd start, ver=2.0.1 format=raw kernel=2.6.31.1-58.fc12.x86_64 auid=4294967295 pid=1154 subj=system_u:system_r:auditd_t:s0 res=success type=CONFIG_CHANGE msg=audit(1254722194.933:6): audit_backlog_limit=320 old=256 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 type=LABEL_LEVEL_CHANGE msg=audit(1254722200.357:7): user pid=1331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=AVC msg=audit(1254722203.822:8): avc: denied { getcap } for pid=1604 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=process type=SYSCALL msg=audit(1254722203.822:8): arch=c000003e syscall=125 success=no exit=-14 a0=e64aa4 a1=0 a2=3162d7be80 a3=24 items=0 ppid=1 pid=1604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) type=AVC msg=audit(1254722203.823:9): avc: denied { setcap } for pid=1604 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=process type=SYSCALL msg=audit(1254722203.823:9): arch=c000003e syscall=126 success=yes exit=0 a0=e64aa4 a1=e64aac a2=6 a3=0 items=0 ppid=1 pid=1604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) type=USER_AUTH msg=audit(1254722224.580:10): user pid=1894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=failed' type=USER_LOGIN msg=audit(1254722224.581:11): user pid=1894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=failed' type=USER_AUTH msg=audit(1254722227.493:12): user pid=1893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1254722227.499:13): user pid=1893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=CRED_ACQ msg=audit(1254722227.549:14): user pid=1893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=LOGIN msg=audit(1254722227.551:15): login pid=1893 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1 type=USER_ROLE_CHANGE msg=audit(1254722227.600:16): user pid=1893 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254722227.952:17): user pid=1893 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_LOGIN msg=audit(1254722227.952:18): user pid=1893 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=success' type=USER_ACCT msg=audit(1254722462.051:19): user pid=2602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254722462.054:20): user pid=2602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254722462.055:21): login pid=2602 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 type=USER_START msg=audit(1254722462.063:22): user pid=2602 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254722463.279:23): user pid=2602 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254722463.280:24): user pid=2602 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254722716.312:25): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254722716.315:26): user pid=2701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254722716.321:27): user pid=2701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254722716.324:28): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254722717.314:29): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254722717.319:30): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254722722.570:31): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254722722.576:32): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254722722.829:33): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254722722.837:34): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254726061.117:35): user pid=3729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254726061.119:36): user pid=3729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254726061.121:37): login pid=3729 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 type=USER_START msg=audit(1254726061.126:38): user pid=3729 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254726061.358:39): user pid=3729 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254726061.358:40): user pid=3729 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254729661.459:41): user pid=5548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254729661.463:42): user pid=5548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254729661.463:43): login pid=5548 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 type=USER_START msg=audit(1254729661.469:44): user pid=5548 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254729661.657:45): user pid=5548 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254729661.658:46): user pid=5548 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254733261.753:47): user pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254733261.756:48): user pid=5881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254733261.757:49): login pid=5881 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5 type=USER_START msg=audit(1254733261.762:50): user pid=5881 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254733261.943:51): user pid=5881 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254733261.945:52): user pid=5881 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254733901.144:53): user pid=5979 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254741203.788:54): user pid=6839 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254741476.625:55): user pid=7019 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1254741476.632:56): user pid=7019 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=CRED_ACQ msg=audit(1254741476.636:57): user pid=7019 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1254741476.649:58): user pid=7019 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1254741476.650:59): user pid=7019 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1254741476.675:60): user pid=7019 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1254741476.679:61): user pid=7026 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_AUTH msg=audit(1254742278.799:62): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254742278.805:63): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254742446.921:64): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254742446.926:65): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254744062.004:66): user pid=8950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254744062.009:67): user pid=8950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254744062.011:68): login pid=8950 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6 type=USER_START msg=audit(1254744062.016:69): user pid=8950 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254744062.318:70): user pid=8950 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254744062.319:71): user pid=8950 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254744844.602:72): user pid=9369 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254744844.610:73): user pid=9369 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=ANOM_PROMISCUOUS msg=audit(1254744848.949:74): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1254744848.949:74): arch=c000003e syscall=16 success=yes exit=0 a0=11 a1=89a2 a2=7f4950f09dc0 a3=7f4950f09b50 items=0 ppid=1 pid=1820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) type=ANOM_PROMISCUOUS msg=audit(1254747207.981:75): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 type=SYSCALL msg=audit(1254747207.981:75): arch=c000003e syscall=3 success=yes exit=0 a0=12 a1=7fffd6705dd0 a2=8 a3=1 items=0 ppid=1 pid=9387 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/bin/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c685,c852 key=(null) type=USER_AUTH msg=audit(1254747417.194:76): user pid=12992 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_ACCT msg=audit(1254747417.200:77): user pid=12992 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254747417.202:78): user pid=12992 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254747417.208:79): user pid=12992 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254747417.208:80): user pid=12992 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254747417.212:81): user pid=12992 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F62696E2F72706D202D7161202A6F70656E2A63742A terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254747417.215:82): user pid=12999 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254747512.463:83): user pid=13010 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254747512.467:84): user pid=13010 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254747512.468:85): user pid=13010 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254747512.469:86): user pid=13010 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F62696E2F72706D202D652068616C terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254747512.471:87): user pid=13012 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_ACCT msg=audit(1254747661.449:88): user pid=13114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254747661.452:89): user pid=13114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254747661.453:90): login pid=13114 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 type=USER_START msg=audit(1254747661.457:91): user pid=13114 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254747661.832:92): user pid=13114 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254747661.834:93): user pid=13114 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254747770.161:94): user pid=13186 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254747770.168:95): user pid=13186 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=AVC msg=audit(1254747773.730:96): avc: denied { write } for pid=13185 comm="cups-pk-helper-" name="tmpN8NPm8" dev=tmpfs ino=193789 scontext=system_u:system_r:cupsd_config_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=file type=SYSCALL msg=audit(1254747773.730:96): arch=c000003e syscall=2 success=yes exit=10 a0=1b67120 a1=281 a2=1b67120 a3=7fff47831a70 items=0 ppid=1 pid=13185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cups-pk-helper-" exe="/usr/libexec/cups-pk-helper-mechanism" subj=system_u:system_r:cupsd_config_t:s0-s0:c0.c1023 key=(null) type=LABEL_LEVEL_CHANGE msg=audit(1254747776.655:97): user pid=1331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=USER_AUTH msg=audit(1254748110.116:98): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254748110.118:99): user pid=13381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254748110.120:100): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254748110.124:101): user pid=13381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254748111.202:102): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254748111.213:103): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254750242.878:104): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254750242.887:105): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254750282.714:106): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254750282.718:107): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254751261.914:108): user pid=14824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254751261.917:109): user pid=14824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254751261.917:110): login pid=14824 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8 type=USER_START msg=audit(1254751261.922:111): user pid=14824 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254751262.107:112): user pid=14824 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254751262.107:113): user pid=14824 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254754861.215:114): user pid=18634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254754861.219:115): user pid=18634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254754861.219:116): login pid=18634 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9 type=USER_START msg=audit(1254754861.223:117): user pid=18634 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254754861.420:118): user pid=18634 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254754861.420:119): user pid=18634 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254756583.480:120): user pid=20705 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=USER_ACCT msg=audit(1254756583.485:121): user pid=20705 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=CRED_ACQ msg=audit(1254756583.487:122): user pid=20705 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_START msg=audit(1254756583.495:123): user pid=20705 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_END msg=audit(1254756583.496:124): user pid=20705 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_CMD msg=audit(1254756583.499:125): user pid=20705 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/3 res=success' type=USER_ROLE_CHANGE msg=audit(1254756583.503:126): user pid=20712 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=USER_ACCT msg=audit(1254758461.506:127): user pid=21584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254758461.509:128): user pid=21584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254758461.509:129): login pid=21584 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10 type=USER_START msg=audit(1254758461.513:130): user pid=21584 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254758461.698:131): user pid=21584 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254758461.699:132): user pid=21584 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=ANOM_ABEND msg=audit(1254759479.213:133): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=22314 comm="chmsee" sig=11 type=ANOM_ABEND msg=audit(1254759504.733:134): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=22324 comm="chmsee" sig=11 type=USER_AVC msg=audit(1254759513.204:135): user pid=1310 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.PolicyKit1.Authority member=CheckAuthorization dest=org.freedesktop.PolicyKit1 spid=22335 tpid=1885 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tclass=dbus : exe="/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' type=AVC msg=audit(1254759513.211:136): avc: denied { getattr } for pid=1885 comm="polkitd" path="/proc/22335" dev=proc ino=439061 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dir type=SYSCALL msg=audit(1254759513.211:136): arch=c000003e syscall=4 success=yes exit=0 a0=7fff1f313580 a1=7fff1f3134f0 a2=7fff1f3134f0 a3=1 items=0 ppid=1 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="polkitd" exe="/usr/libexec/polkit-1/polkitd" subj=system_u:system_r:policykit_t:s0-s0:c0.c1023 key=(null) type=USER_AVC msg=audit(1254759513.271:137): user pid=1310 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_return dest=:1.213 spid=1885 tpid=22335 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dbus : exe="/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' type=AVC msg=audit(1254759533.633:138): avc: denied { getattr } for pid=1885 comm="polkitd" path="/proc/22348" dev=proc ino=439465 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dir type=SYSCALL msg=audit(1254759533.633:138): arch=c000003e syscall=4 success=yes exit=0 a0=7fff1f313580 a1=7fff1f3134f0 a2=7fff1f3134f0 a3=1 items=0 ppid=1 pid=1885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="polkitd" exe="/usr/libexec/polkit-1/polkitd" subj=system_u:system_r:policykit_t:s0-s0:c0.c1023 key=(null) type=USER_ACCT msg=audit(1254762061.794:139): user pid=23119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254762061.796:140): user pid=23119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254762061.797:141): login pid=23119 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11 type=USER_START msg=audit(1254762061.800:142): user pid=23119 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254762061.967:143): user pid=23119 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254762061.969:144): user pid=23119 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254764149.229:145): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254764149.233:146): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254765661.081:147): user pid=29293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254765661.085:148): user pid=29293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254765661.085:149): login pid=29293 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12 type=USER_START msg=audit(1254765661.103:150): user pid=29293 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254765661.456:151): user pid=29293 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254765661.457:152): user pid=29293 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254767428.211:153): user pid=29727 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=failed' type=USER_AUTH msg=audit(1254767433.146:154): user pid=29731 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254772196.141:155): user pid=30569 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254772224.791:156): user pid=30668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254772224.796:157): user pid=30668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254772224.847:158): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254772224.852:159): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254772225.301:160): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254772225.309:161): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254772234.152:162): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254772234.157:163): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254772240.084:164): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254772240.089:165): user pid=1616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254772862.009:166): user pid=30981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254772862.011:167): user pid=30981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254772862.012:168): login pid=30981 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13 type=USER_START msg=audit(1254772862.017:169): user pid=30981 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254772862.373:170): user pid=30981 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254772862.374:171): user pid=30981 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254776462.026:172): user pid=786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254776462.030:173): user pid=786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254776462.031:174): login pid=786 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14 type=USER_START msg=audit(1254776462.082:175): user pid=786 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254776462.684:176): user pid=786 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254776462.685:177): user pid=786 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254780061.776:178): user pid=4429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254780061.780:179): user pid=4429 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254780061.780:180): login pid=4429 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15 type=USER_START msg=audit(1254780061.784:181): user pid=4429 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254780061.980:182): user pid=4429 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254780061.980:183): user pid=4429 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254783488.859:184): user pid=7197 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254783488.864:185): user pid=7197 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254783488.884:186): user pid=7197 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254783488.896:187): user pid=7197 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254783488.897:188): user pid=7197 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254783488.900:189): user pid=7197 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D2075706772616465202D79 terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254783488.927:190): user pid=7204 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254783613.303:191): user pid=7225 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254783613.307:192): user pid=7225 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254783613.308:193): user pid=7225 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254783613.308:194): user pid=7225 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D2072656D6F766520666C6173682D706C7567696E terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254783613.311:195): user pid=7227 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254783661.077:196): user pid=7236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254783661.080:197): user pid=7236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254783661.080:198): login pid=7236 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16 type=USER_START msg=audit(1254783661.084:199): user pid=7236 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254783661.397:200): user pid=7236 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254783661.398:201): user pid=7236 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254783710.727:202): user pid=7268 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254783710.732:203): user pid=7268 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254783710.733:204): user pid=7268 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254783710.733:205): user pid=7268 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D20696E7374616C6C207377666465632D6D6F7A696C6C61 terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254783710.736:206): user pid=7269 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254783817.798:207): user pid=7330 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254783817.802:208): user pid=7330 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254783817.803:209): user pid=7330 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254783817.804:210): user pid=7330 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D2072656D6F7665207377666465632D6D6F7A696C6C61 terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254783817.808:211): user pid=7332 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254783847.947:212): user pid=7337 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254783847.951:213): user pid=7337 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254783847.952:214): user pid=7337 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254783847.953:215): user pid=7337 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D2072656D6F766520676E6173682D706C7567696E terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254783847.957:216): user pid=7338 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254783861.680:217): user pid=7339 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254783861.685:218): user pid=7339 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254783861.685:219): user pid=7339 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254783861.686:220): user pid=7339 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D206C69737420676E6173682A terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254783861.689:221): user pid=7340 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254783884.626:222): user pid=7342 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254783884.630:223): user pid=7342 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254783884.631:224): user pid=7342 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254783884.632:225): user pid=7342 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D20696E7374616C6C20676E6173682D706C7567696E terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254783884.634:226): user pid=7343 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_AUTH msg=audit(1254785565.556:227): user pid=7794 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254785565.565:228): user pid=7794 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=ANOM_PROMISCUOUS msg=audit(1254785576.334:229): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1254785576.334:229): arch=c000003e syscall=16 success=yes exit=0 a0=11 a1=89a2 a2=7f494fb07dc0 a3=3162d7b14c items=0 ppid=1 pid=1822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) type=ANOM_ABEND msg=audit(1254786501.711:230): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=2073 comm="nm-applet" sig=6 type=USER_AUTH msg=audit(1254786519.969:231): user pid=9388 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254786519.978:232): user pid=9388 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254786519.981:233): user pid=9388 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254786520.011:234): user pid=9388 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254786520.012:235): user pid=9388 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254786520.013:236): user pid=9388 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254786520.020:237): user pid=9404 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=ANOM_ABEND msg=audit(1254786771.180:238): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=9228 comm="nm-applet" sig=6 type=USER_AUTH msg=audit(1254786915.836:239): user pid=10414 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/userhelper" hostname=? addr=? terminal=pts/0 res=success' type=USER_ACCT msg=audit(1254786915.837:240): user pid=10414 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/userhelper" hostname=? addr=? terminal=pts/0 res=success' type=SYSTEM_SHUTDOWN msg=audit(1254786915.883:241): user pid=10414 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=pts/0 res=success' type=SYSTEM_RUNLEVEL msg=audit(1254786916.015:242): user pid=10422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='old-level=5 new-level=6: exe="/sbin/runlevel" hostname=? addr=? terminal=console res=success' type=DAEMON_END msg=audit(1254786934.285:9013): auditd normal halt, sending auid=0 pid=10640 subj=system_u:system_r:initrc_t:s0 res=success type=DAEMON_START msg=audit(1254787130.768:2793): auditd start, ver=2.0.1 format=raw kernel=2.6.31.1-58.fc12.x86_64 auid=4294967295 pid=1212 subj=system_u:system_r:auditd_t:s0 res=success type=CONFIG_CHANGE msg=audit(1254787130.974:5): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 type=LABEL_LEVEL_CHANGE msg=audit(1254787136.397:6): user pid=1389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=AVC msg=audit(1254787139.980:7): avc: denied { getcap } for pid=1661 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=process type=SYSCALL msg=audit(1254787139.980:7): arch=c000003e syscall=125 success=no exit=-14 a0=d9baa4 a1=0 a2=3162d7be80 a3=24 items=0 ppid=1658 pid=1661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) type=AVC msg=audit(1254787139.983:8): avc: denied { setcap } for pid=1661 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=process type=SYSCALL msg=audit(1254787139.983:8): arch=c000003e syscall=126 success=yes exit=0 a0=d9baa4 a1=d9baac a2=6 a3=0 items=0 ppid=1 pid=1661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) type=USER_AUTH msg=audit(1254787241.101:9): user pid=1952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=failed' type=USER_LOGIN msg=audit(1254787241.102:10): user pid=1952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=failed' type=USER_AUTH msg=audit(1254787243.248:11): user pid=1951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1254787243.255:12): user pid=1951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=CRED_ACQ msg=audit(1254787243.307:13): user pid=1951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=LOGIN msg=audit(1254787243.309:14): login pid=1951 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1 type=USER_ROLE_CHANGE msg=audit(1254787243.385:15): user pid=1951 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254787243.651:16): user pid=1951 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_LOGIN msg=audit(1254787243.653:17): user pid=1951 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=success' type=USER_ACCT msg=audit(1254787261.680:18): user pid=2307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254787261.683:19): user pid=2307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254787261.683:20): login pid=2307 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 type=USER_START msg=audit(1254787261.689:21): user pid=2307 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254787263.165:22): user pid=2307 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254787263.165:23): user pid=2307 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254787365.619:24): user pid=2861 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254787365.637:25): user pid=2861 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254787365.641:26): user pid=2861 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254787365.659:27): user pid=2861 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254787365.660:28): user pid=2861 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254787365.661:29): user pid=2861 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254787365.707:30): user pid=2867 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_AUTH msg=audit(1254787749.822:31): user pid=3189 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254787749.828:32): user pid=3189 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254787749.832:33): user pid=3189 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254787749.846:34): user pid=3189 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254787749.849:35): user pid=3189 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254787749.861:36): user pid=3189 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D20696E7374616C6C20746F74656D2D796F7574756265 terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254787749.864:37): user pid=3196 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_AUTH msg=audit(1254789345.133:38): user pid=5101 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254789345.139:39): user pid=5101 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254789345.142:40): user pid=5101 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254789345.151:41): user pid=5101 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254789345.151:42): user pid=5101 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254789345.156:43): user pid=5101 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D20696E666F206F70656E6172656E61 terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254789345.160:44): user pid=5108 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254789430.993:45): user pid=5118 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254789431.011:46): user pid=5118 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254789431.012:47): user pid=5118 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254789431.013:48): user pid=5118 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254789431.017:49): user pid=5120 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254789553.606:50): user pid=5231 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254789553.611:51): user pid=5231 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254789553.612:52): user pid=5231 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254789553.613:53): user pid=5231 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/usr/lib64/mesa" cmd=2F62696E2F726D202E2E2F696D61676573 terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254789553.616:54): user pid=5233 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254790861.723:55): user pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254790861.727:56): user pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254790861.728:57): login pid=5900 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 type=USER_START msg=audit(1254790861.733:58): user pid=5900 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254790861.928:59): user pid=5900 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254790861.929:60): user pid=5900 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254794281.490:61): user pid=8980 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254794281.497:62): user pid=8980 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254794351.712:63): user pid=9098 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254794351.718:64): user pid=9098 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254794351.721:65): user pid=9098 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254794351.737:66): user pid=9098 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254794351.738:67): user pid=9098 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254794351.743:68): user pid=9098 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F62696E2F6C73202F7661722F6C69622F6C6962766972742F696D616765732F terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254794351.747:69): user pid=9107 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=ANOM_PROMISCUOUS msg=audit(1254794399.653:70): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1254794399.653:70): arch=c000003e syscall=16 success=yes exit=0 a0=11 a1=89a2 a2=7f283475cd90 a3=7f283475cb20 items=0 ppid=1 pid=1879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) type=USER_ACCT msg=audit(1254794462.039:71): user pid=9273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254794462.043:72): user pid=9273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254794462.043:73): login pid=9273 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 type=USER_START msg=audit(1254794462.047:74): user pid=9273 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254794462.276:75): user pid=9273 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254794462.277:76): user pid=9273 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254812857.781:77): user pid=11457 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254812957.579:78): user pid=1818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_ACCT msg=audit(1254812957.586:79): user pid=1818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=LOGIN msg=audit(1254812957.587:80): login pid=1818 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5 type=USER_ROLE_CHANGE msg=audit(1254812957.710:81): user pid=1818 uid=0 auid=0 ses=5 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_START msg=audit(1254812957.771:82): user pid=1818 uid=0 auid=0 ses=5 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=CRED_ACQ msg=audit(1254812957.771:83): user pid=1818 uid=0 auid=0 ses=5 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_LOGIN msg=audit(1254812957.772:84): user pid=1818 uid=0 auid=0 ses=5 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=CRED_DISP msg=audit(1254812970.945:85): user pid=1818 uid=0 auid=0 ses=5 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_END msg=audit(1254812970.958:86): user pid=1818 uid=0 auid=0 ses=5 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=ANOM_ABEND msg=audit(1254813031.958:87): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=2132 comm="nm-applet" sig=6 type=ANOM_ABEND msg=audit(1254813076.708:88): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=15798 comm="nm-applet" sig=6 type=USER_AUTH msg=audit(1254813100.134:89): user pid=16162 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254813100.139:90): user pid=16162 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254813100.144:91): user pid=16162 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254813100.152:92): user pid=16162 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254813100.159:93): user pid=16162 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254813100.163:94): user pid=16162 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254813100.171:95): user pid=16171 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_AUTH msg=audit(1254813742.992:96): user pid=17562 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_ACCT msg=audit(1254813743.001:97): user pid=17562 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254813743.004:98): user pid=17562 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254813743.009:99): user pid=17562 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254813743.010:100): user pid=17562 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254813743.011:101): user pid=17562 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp" cmd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terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254813743.027:102): user pid=17571 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254813912.420:103): user pid=17763 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254813912.427:104): user pid=17763 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254813912.428:105): user pid=17763 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254813912.429:106): user pid=17763 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254813912.432:107): user pid=17765 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=ANOM_ABEND msg=audit(1254813931.888:108): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=16049 comm="nm-applet" sig=6 type=AVC msg=audit(1254814442.579:109): avc: denied { write } for pid=1760 comm="abrtd" name="Bugzilla.conf" dev=dm-9 ino=64389 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file type=SYSCALL msg=audit(1254814442.579:109): arch=c000003e syscall=2 success=yes exit=7 a0=1fc6278 a1=241 a2=1b6 a3=0 items=0 ppid=1 pid=1760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=AVC msg=audit(1254814442.601:110): avc: denied { setattr } for pid=1760 comm="abrtd" name="Bugzilla.conf" dev=dm-9 ino=64389 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file type=AVC msg=audit(1254814442.601:110): avc: denied { chown } for pid=1760 comm="abrtd" capability=0 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:system_r:abrt_t:s0 tclass=capability type=SYSCALL msg=audit(1254814442.601:110): arch=c000003e syscall=92 success=yes exit=0 a0=1fc6278 a1=1f4 a2=1f4 a3=1 items=0 ppid=1 pid=1760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe="/usr/sbin/abrtd" subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_AVC msg=audit(1254814552.585:111): user pid=1368 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.PolicyKit1.Authority member=CheckAuthorization dest=org.freedesktop.PolicyKit1 spid=18689 tpid=1945 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tclass=dbus : exe="/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' type=AVC msg=audit(1254814552.586:112): avc: denied { getattr } for pid=1945 comm="polkitd" path="/proc/18689" dev=proc ino=234367 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dir type=SYSCALL msg=audit(1254814552.586:112): arch=c000003e syscall=4 success=yes exit=0 a0=7ffff5cd5c80 a1=7ffff5cd5bf0 a2=7ffff5cd5bf0 a3=1 items=0 ppid=1 pid=1945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="polkitd" exe="/usr/libexec/polkit-1/polkitd" subj=system_u:system_r:policykit_t:s0-s0:c0.c1023 key=(null) type=USER_AVC msg=audit(1254814552.636:113): user pid=1368 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_return dest=:1.189 spid=1945 tpid=18689 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dbus : exe="/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' type=USER_AUTH msg=audit(1254815634.184:114): user pid=19731 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=failed' type=USER_AUTH msg=audit(1254815636.234:115): user pid=19731 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_ACCT msg=audit(1254815636.247:116): user pid=19731 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254815636.319:117): user pid=19731 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254815636.392:118): user pid=19731 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254815636.394:119): user pid=19731 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254815636.396:120): user pid=19731 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F6465627567696E666F2D696E7374616C6C2063686D736565 terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254815636.421:121): user pid=19748 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_AUTH msg=audit(1254815757.107:122): user pid=19777 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254815757.113:123): user pid=19777 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=ANOM_PROMISCUOUS msg=audit(1254815777.280:124): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 type=SYSCALL msg=audit(1254815777.280:124): arch=c000003e syscall=3 success=yes exit=0 a0=12 a1=7fff2d84ab60 a2=8 a3=1 items=0 ppid=1 pid=9174 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/bin/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c143,c425 key=(null) type=ANOM_PROMISCUOUS msg=audit(1254815787.759:125): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1254815787.759:125): arch=c000003e syscall=16 success=yes exit=0 a0=11 a1=89a2 a2=7f283515ddc0 a3=3162d7b14c items=0 ppid=1 pid=1878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) type=ANOM_ABEND msg=audit(1254815977.519:126): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=19719 comm="telepathy-gabbl" sig=11 type=AVC msg=audit(1254815991.258:127): avc: denied { getattr } for pid=1945 comm="polkitd" path="/proc/20122" dev=proc ino=260178 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dir type=SYSCALL msg=audit(1254815991.258:127): arch=c000003e syscall=4 success=yes exit=0 a0=7ffff5cd5c80 a1=7ffff5cd5bf0 a2=7ffff5cd5bf0 a3=1 items=0 ppid=1 pid=1945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="polkitd" exe="/usr/libexec/polkit-1/polkitd" subj=system_u:system_r:policykit_t:s0-s0:c0.c1023 key=(null) type=USER_ACCT msg=audit(1254816061.178:128): user pid=20256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254816061.181:129): user pid=20256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254816061.181:130): login pid=20256 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6 type=USER_START msg=audit(1254816061.187:131): user pid=20256 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254816061.782:132): user pid=20256 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254816061.785:133): user pid=20256 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254816171.746:134): user pid=20414 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_ACCT msg=audit(1254816171.751:135): user pid=20414 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254816171.774:136): user pid=20414 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254816171.780:137): user pid=20414 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254816171.781:138): user pid=20414 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254816171.782:139): user pid=20414 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F6465627567696E666F2D696E7374616C6C2063686D736565 terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254816171.787:140): user pid=20423 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254816189.136:141): user pid=20461 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254816189.162:142): user pid=20461 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254816189.162:143): user pid=20461 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254816189.163:144): user pid=20461 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F6465627567696E666F2D696E7374616C6C2063686D736565 terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254816189.166:145): user pid=20462 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254816225.753:146): user pid=20507 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254816225.756:147): user pid=20507 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254816225.757:148): user pid=20507 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254816225.758:149): user pid=20507 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D20696E7374616C6C2063686D6C69622D6465627567696E666F2063686D7365652D6465627567696E666F206763632D6465627567696E666F20676C6962632D6465627567696E666F2067746B322D6465627567696E666F20676C6962322D6465627567696E666F terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254816225.760:150): user pid=20508 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254816242.832:151): user pid=20528 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254816242.835:152): user pid=20528 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254816242.836:153): user pid=20528 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254816242.837:154): user pid=20528 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D20696E7374616C6C202D2D656E61626C657265706F3D2A2D6465627567696E666F2063686D6C69622D6465627567696E666F2063686D7365652D6465627567696E666F206763632D6465627567696E666F20676C6962632D6465627567696E666F2067746B322D6465627567696E666F20676C6962322D6465627567696E666F terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254816242.840:155): user pid=20529 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=ANOM_ABEND msg=audit(1254816342.520:156): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=20101 comm="telepathy-gabbl" sig=11 type=CRED_ACQ msg=audit(1254816466.192:157): user pid=20802 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254816466.198:158): user pid=20802 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254816466.198:159): user pid=20802 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254816466.199:160): user pid=20802 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D20696E7374616C6C202D2D6E6F677067636865636B202D2D656E61626C657265706F3D2A2D6465627567696E666F2063686D6C69622D6465627567696E666F2063686D7365652D6465627567696E666F206763632D6465627567696E666F20676C6962632D6465627567696E666F2067746B322D6465627567696E666F20676C6962322D6465627567696E666F terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254816466.212:161): user pid=20804 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254816541.350:162): user pid=20900 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254816541.363:163): user pid=20900 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254816541.363:164): user pid=20900 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254816541.364:165): user pid=20900 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D20696E7374616C6C202D2D6E6F677067636865636B202D2D656E61626C657265706F3D726177686964652D6465627567696E666F2063686D6C69622D6465627567696E666F2063686D7365652D6465627567696E666F206763632D6465627567696E666F20676C6962632D6465627567696E666F2067746B322D6465627567696E666F20676C6962322D6465627567696E666F terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254816541.369:166): user pid=20902 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254816552.377:167): user pid=20916 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254816552.384:168): user pid=20916 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254816552.385:169): user pid=20916 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254816552.387:170): user pid=20916 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F7362696E2F79756D2D636F6D706C6574652D7472616E73616374696F6E202D2D68656C70 terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254816552.392:171): user pid=20917 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254816559.230:172): user pid=20925 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254816559.238:173): user pid=20925 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254816559.239:174): user pid=20925 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254816559.241:175): user pid=20925 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F7362696E2F79756D2D636F6D706C6574652D7472616E73616374696F6E202D2D636C65616E75702D6F6E6C79 terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254816559.264:176): user pid=20926 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254816563.646:177): user pid=20941 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254816563.652:178): user pid=20941 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254816563.653:179): user pid=20941 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254816563.654:180): user pid=20941 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F7573722F62696E2F79756D20696E7374616C6C202D2D6E6F677067636865636B202D2D656E61626C657265706F3D726177686964652D6465627567696E666F2063686D6C69622D6465627567696E666F2063686D7365652D6465627567696E666F206763632D6465627567696E666F20676C6962632D6465627567696E666F2067746B322D6465627567696E666F20676C6962322D6465627567696E666F terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254816563.660:181): user pid=20942 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=ANOM_ABEND msg=audit(1254816708.520:182): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=20650 comm="telepathy-gabbl" sig=11 type=ANOM_ABEND msg=audit(1254816862.725:183): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=21347 comm="chmsee" sig=11 type=AVC msg=audit(1254816872.576:184): avc: denied { getattr } for pid=1945 comm="polkitd" path="/proc/21369" dev=proc ino=278320 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dir type=SYSCALL msg=audit(1254816872.576:184): arch=c000003e syscall=4 success=yes exit=0 a0=7ffff5cd5c80 a1=7ffff5cd5bf0 a2=7ffff5cd5bf0 a3=1 items=0 ppid=1 pid=1945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="polkitd" exe="/usr/libexec/polkit-1/polkitd" subj=system_u:system_r:policykit_t:s0-s0:c0.c1023 key=(null) type=USER_AUTH msg=audit(1254816899.649:185): user pid=21408 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_ACCT msg=audit(1254816899.655:186): user pid=21408 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254816899.685:187): user pid=21408 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254816899.754:188): user pid=21408 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254816899.754:189): user pid=21408 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254816899.762:190): user pid=21408 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254816899.776:191): user pid=21417 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=ANOM_ABEND msg=audit(1254817003.637:192): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=21698 comm="chmsee" sig=11 type=ANOM_ABEND msg=audit(1254817078.519:193): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=21137 comm="telepathy-gabbl" sig=11 type=USER_AUTH msg=audit(1254817420.090:194): user pid=22352 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254817420.103:195): user pid=22352 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=ADD_USER msg=audit(1254817566.486:196): user pid=22737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="rpcuser" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' type=ADD_USER msg=audit(1254817566.498:197): user pid=22737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="rpcuser" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' type=USER_AUTH msg=audit(1254817677.947:198): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254817677.956:199): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254817691.004:200): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254817691.027:201): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254817754.325:202): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254817754.343:203): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254817854.335:204): user pid=23260 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254817854.364:205): user pid=23260 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=ANOM_PROMISCUOUS msg=audit(1254817859.694:206): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 type=SYSCALL msg=audit(1254817859.694:206): arch=c000003e syscall=3 success=yes exit=0 a0=12 a1=7fffa3c0e5a0 a2=8 a3=1 items=0 ppid=1 pid=19836 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe=2F7573722F62696E2F71656D752D6B766D202864656C6574656429 subj=system_u:system_r:svirt_t:s0:c536,c635 key=(null) type=USER_AUTH msg=audit(1254819107.106:207): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254819107.112:208): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254819309.479:209): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254819309.484:210): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254819354.578:211): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254819354.584:212): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254819662.035:213): user pid=25520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254819662.038:214): user pid=25520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254819662.038:215): login pid=25520 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 type=USER_START msg=audit(1254819662.068:216): user pid=25520 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254819662.496:217): user pid=25520 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254819662.500:218): user pid=25520 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254821054.514:219): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254821054.520:220): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254823255.938:221): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254823255.943:222): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254823261.575:223): user pid=27238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254823261.577:224): user pid=27238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254823261.577:225): login pid=27238 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8 type=USER_START msg=audit(1254823261.581:226): user pid=27238 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254823261.844:227): user pid=27238 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254823261.844:228): user pid=27238 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254823401.425:229): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254823401.429:230): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254823401.444:231): user pid=27297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254823401.449:232): user pid=27297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254824013.182:233): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254824013.188:234): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254824013.248:235): user pid=27297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254824013.291:236): user pid=27297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254824013.386:237): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254824013.391:238): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254824016.873:239): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254824016.877:240): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254824017.383:241): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254824017.396:242): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254824437.630:243): user pid=27973 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254825110.568:244): user pid=28419 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254826433.521:245): user pid=28730 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254826601.577:246): user pid=29031 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254826601.581:247): user pid=29031 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254826601.584:248): user pid=29031 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254826601.589:249): user pid=29031 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254826601.589:250): user pid=29031 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254826601.593:251): user pid=29031 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F6574632F4E6574776F726B4D616E616765722F646973706174636865722E642F39392D736574486F7374732065746830207570 terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254826601.597:252): user pid=29037 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254826861.230:253): user pid=29132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254826861.233:254): user pid=29132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254826861.233:255): login pid=29132 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9 type=USER_START msg=audit(1254826861.237:256): user pid=29132 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254826861.403:257): user pid=29132 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254826861.403:258): user pid=29132 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254829914.064:259): user pid=29509 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254830461.585:260): user pid=29793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254830461.605:261): user pid=29793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254830461.606:262): login pid=29793 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10 type=USER_START msg=audit(1254830461.610:263): user pid=29793 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254830462.064:264): user pid=29793 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254830462.065:265): user pid=29793 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254830487.799:266): user pid=29828 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254830487.804:267): user pid=29828 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=ANOM_PROMISCUOUS msg=audit(1254830493.746:268): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1254830493.746:268): arch=c000003e syscall=16 success=yes exit=0 a0=11 a1=89a2 a2=7f2835b5edc0 a3=3162d7b14c items=0 ppid=1 pid=1877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) type=USER_LOGIN msg=audit(1254830786.837:269): user pid=30267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="kasal": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_AUTH msg=audit(1254830791.795:270): user pid=30267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="?" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=failed' type=USER_LOGIN msg=audit(1254830791.796:271): user pid=30267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="kasal": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_AUTH msg=audit(1254830984.274:272): user pid=30641 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1254830984.282:273): user pid=30641 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=CRED_ACQ msg=audit(1254830984.349:274): user pid=30641 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1254830984.371:275): user pid=30641 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1254830984.374:276): user pid=30641 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1254830984.383:277): user pid=30641 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1254830984.387:278): user pid=30651 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=ADD_GROUP msg=audit(1254831042.055:279): user pid=30790 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding group acct="stepan" exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/1 res=success' type=ADD_USER msg=audit(1254831042.128:280): user pid=30790 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding user id=501 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/1 res=success' type=ADD_USER msg=audit(1254831042.295:281): user pid=30790 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=adding home directory id=501 exe="/usr/sbin/useradd" hostname=? addr=? terminal=pts/1 res=success' type=USER_CHAUTHTOK msg=audit(1254831067.355:282): user pid=30810 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 msg='op=PAM:chauthtok acct="stepan" exe="/usr/bin/passwd" hostname=? addr=? terminal=pts/1 res=success' type=USER_CHAUTHTOK msg=audit(1254831067.356:283): user pid=30810 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 msg='op=change password id=501 exe="/usr/bin/passwd" hostname=? addr=? terminal=pts/1 res=success' type=USER_LOGIN msg=audit(1254831085.426:284): user pid=30860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="kasal": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_ERR msg=audit(1254831085.502:285): user pid=30860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident acct="?" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=failed' type=USER_LOGIN msg=audit(1254831095.710:286): user pid=30886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="kasal": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_AUTH msg=audit(1254831101.777:287): user pid=30886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="?" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=failed' type=USER_LOGIN msg=audit(1254831101.779:288): user pid=30886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="kasal": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_LOGIN msg=audit(1254831107.818:289): user pid=30901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="stepan": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_LOGIN msg=audit(1254831107.821:290): user pid=30901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="stepan": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_AUTH msg=audit(1254831135.551:291): user pid=30901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=failed' type=USER_LOGIN msg=audit(1254831135.551:292): user pid=30901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="stepan": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_AUTH msg=audit(1254831161.782:293): user pid=30901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_ACCT msg=audit(1254831161.788:294): user pid=30901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=CRED_ACQ msg=audit(1254831161.791:295): user pid=30901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=LOGIN msg=audit(1254831161.791:296): login pid=30901 uid=0 old auid=4294967295 new auid=501 old ses=4294967295 new ses=11 type=USER_ROLE_CHANGE msg=audit(1254831161.919:297): user pid=30901 uid=0 auid=501 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed' type=USER_ROLE_CHANGE msg=audit(1254831161.921:298): user pid=30901 uid=0 auid=501 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254831161.930:299): user pid=30901 uid=0 auid=501 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=CRED_ACQ msg=audit(1254831161.933:300): user pid=30986 uid=0 auid=501 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_LOGIN msg=audit(1254831161.942:301): user pid=30901 uid=0 auid=501 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=/dev/pts/1 res=success' type=AVC msg=audit(1254831177.915:302): avc: denied { execute } for pid=31073 comm="passwd" name="gnome-keyring-daemon" dev=dm-1 ino=44281 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=file type=AVC msg=audit(1254831177.915:302): avc: denied { read open } for pid=31073 comm="passwd" name="gnome-keyring-daemon" dev=dm-1 ino=44281 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=file type=AVC msg=audit(1254831177.915:302): avc: denied { execute_no_trans } for pid=31073 comm="passwd" path="/usr/bin/gnome-keyring-daemon" dev=dm-1 ino=44281 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:bin_t:s0 tclass=file type=SYSCALL msg=audit(1254831177.915:302): arch=c000003e syscall=59 success=yes exit=0 a0=7feb79798fc1 a1=7fff592bc830 a2=b2a4c0 a3=fffffffffffffff0 items=0 ppid=31049 pid=31073 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831178.257:303): avc: denied { write } for pid=31073 comm="gnome-keyring-d" name="/" dev=tmpfs ino=10309 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tmp_t:s0 tclass=dir type=AVC msg=audit(1254831178.257:303): avc: denied { add_name } for pid=31073 comm="gnome-keyring-d" name="keyring-1ttqBr" scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tmp_t:s0 tclass=dir type=AVC msg=audit(1254831178.257:303): avc: denied { create } for pid=31073 comm="gnome-keyring-d" name="keyring-1ttqBr" scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmp_t:s0 tclass=dir type=SYSCALL msg=audit(1254831178.257:303): arch=c000003e syscall=83 success=yes exit=0 a0=fbf210 a1=1c0 a2=fbf222 a3=4 items=0 ppid=31049 pid=31073 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831178.264:304): avc: denied { write } for pid=31073 comm="gnome-keyring-d" name="keyring-1ttqBr" dev=tmpfs ino=483367 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmp_t:s0 tclass=dir type=AVC msg=audit(1254831178.264:304): avc: denied { add_name } for pid=31073 comm="gnome-keyring-d" name="socket" scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmp_t:s0 tclass=dir type=AVC msg=audit(1254831178.264:304): avc: denied { create } for pid=31073 comm="gnome-keyring-d" name="socket" scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmp_t:s0 tclass=sock_file type=SYSCALL msg=audit(1254831178.264:304): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fff7f17d520 a2=6e a3=10 items=0 ppid=31049 pid=31073 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831178.273:305): avc: denied { read } for pid=31077 comm="gnome-keyring-d" name="gphoto2.monitor" dev=dm-1 ino=12426 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=file type=AVC msg=audit(1254831178.273:305): avc: denied { open } for pid=31077 comm="gnome-keyring-d" name="gphoto2.monitor" dev=dm-1 ino=12426 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=file type=SYSCALL msg=audit(1254831178.273:305): arch=c000003e syscall=2 success=yes exit=0 a0=fb96b0 a1=0 a2=0 a3=7fff7f17cb30 items=0 ppid=31076 pid=31077 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831178.274:306): avc: denied { getattr } for pid=31077 comm="gnome-keyring-d" path="/usr/share/gvfs/remote-volume-monitors/gphoto2.monitor" dev=dm-1 ino=12426 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=file type=SYSCALL msg=audit(1254831178.274:306): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7fff7f17bc70 a2=7fff7f17bc70 a3=7fff7f17cb30 items=0 ppid=31076 pid=31077 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831178.276:307): avc: denied { getattr } for pid=31077 comm="gnome-keyring-d" path="inotify" dev=inotifyfs ino=1 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:inotifyfs_t:s0 tclass=dir type=SYSCALL msg=audit(1254831178.276:307): arch=c000003e syscall=5 success=yes exit=0 a0=6 a1=7fff7f17c3f0 a2=7fff7f17c3f0 a3=1 items=0 ppid=31076 pid=31077 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831178.287:308): avc: denied { getattr } for pid=31079 comm="passwd" path="/tmp/keyring-1ttqBr/socket" dev=tmpfs ino=483369 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmp_t:s0 tclass=sock_file type=SYSCALL msg=audit(1254831178.287:308): arch=c000003e syscall=6 success=yes exit=0 a0=b2a125 a1=7fff592bc460 a2=7fff592bc460 a3=7feb7fed87a0 items=0 ppid=31049 pid=31079 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="passwd" exe="/usr/bin/passwd" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831178.287:309): avc: denied { write } for pid=31079 comm="passwd" name="socket" dev=tmpfs ino=483369 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmp_t:s0 tclass=sock_file type=SYSCALL msg=audit(1254831178.287:309): arch=c000003e syscall=42 success=yes exit=0 a0=4 a1=7fff592bc500 a2=6e a3=b items=0 ppid=31049 pid=31079 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="passwd" exe="/usr/bin/passwd" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831178.349:310): avc: denied { write } for pid=31077 comm="gnome-keyring-d" name=".gnome2" dev=dm-9 ino=25127 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:gnome_home_t:s0 tclass=dir type=AVC msg=audit(1254831178.349:310): avc: denied { add_name } for pid=31077 comm="gnome-keyring-d" name="keyrings" scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:gnome_home_t:s0 tclass=dir type=AVC msg=audit(1254831178.349:310): avc: denied { create } for pid=31077 comm="gnome-keyring-d" name="keyrings" scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:gnome_home_t:s0 tclass=dir type=SYSCALL msg=audit(1254831178.349:310): arch=c000003e syscall=83 success=yes exit=0 a0=fd5200 a1=1c0 a2=2 a3=1e items=0 ppid=1 pid=31077 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831178.387:311): avc: denied { read } for pid=31077 comm="gnome-keyring-d" name="keyrings" dev=dm-9 ino=25128 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:gnome_home_t:s0 tclass=dir type=AVC msg=audit(1254831178.387:311): avc: denied { open } for pid=31077 comm="gnome-keyring-d" name="keyrings" dev=dm-9 ino=25128 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:gnome_home_t:s0 tclass=dir type=SYSCALL msg=audit(1254831178.387:311): arch=c000003e syscall=2 success=yes exit=7 a0=fd6780 a1=90800 a2=3162d7be80 a3=1f items=0 ppid=1 pid=31077 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831178.423:312): avc: denied { create } for pid=31077 comm="gnome-keyring-d" name=".keyringSEKG1U" scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:gnome_home_t:s0 tclass=file type=AVC msg=audit(1254831178.423:312): avc: denied { read write open } for pid=31077 comm="gnome-keyring-d" name=".keyringSEKG1U" dev=dm-9 ino=19188 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:gnome_home_t:s0 tclass=file type=SYSCALL msg=audit(1254831178.423:312): arch=c000003e syscall=2 success=yes exit=7 a0=fd4130 a1=c2 a2=180 a3=41 items=0 ppid=1 pid=31077 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831178.424:313): avc: denied { setattr } for pid=31077 comm="gnome-keyring-d" name=".keyringSEKG1U" dev=dm-9 ino=19188 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:gnome_home_t:s0 tclass=file type=SYSCALL msg=audit(1254831178.424:313): arch=c000003e syscall=91 success=yes exit=0 a0=7 a1=180 a2=7 a3=41 items=0 ppid=1 pid=31077 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831178.612:314): avc: denied { remove_name } for pid=31077 comm="gnome-keyring-d" name=".keyringSEKG1U" dev=dm-9 ino=19188 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:gnome_home_t:s0 tclass=dir type=AVC msg=audit(1254831178.612:314): avc: denied { rename } for pid=31077 comm="gnome-keyring-d" name=".keyringSEKG1U" dev=dm-9 ino=19188 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:gnome_home_t:s0 tclass=file type=SYSCALL msg=audit(1254831178.612:314): arch=c000003e syscall=82 success=yes exit=0 a0=fd4130 a1=fd8b00 a2=0 a3=41 items=0 ppid=1 pid=31077 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831178.612:315): avc: denied { getattr } for pid=31077 comm="gnome-keyring-d" path="/home/stepan/.gnome2/keyrings/login.keyring" dev=dm-9 ino=19188 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:gnome_home_t:s0 tclass=file type=SYSCALL msg=audit(1254831178.612:315): arch=c000003e syscall=4 success=yes exit=0 a0=fd8b00 a1=7fff7f17d440 a2=7fff7f17d440 a3=41 items=0 ppid=1 pid=31077 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831178.655:316): avc: denied { read } for pid=31081 comm="gnome-keyring-d" name="login.keyring" dev=dm-9 ino=19188 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:gnome_home_t:s0 tclass=file type=AVC msg=audit(1254831178.655:316): avc: denied { open } for pid=31081 comm="gnome-keyring-d" name="login.keyring" dev=dm-9 ino=19188 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:gnome_home_t:s0 tclass=file type=SYSCALL msg=audit(1254831178.655:316): arch=c000003e syscall=2 success=yes exit=8 a0=7fc46c003740 a1=0 a2=0 a3=6f6c2f73676e6972 items=0 ppid=1 pid=31081 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831178.660:317): avc: denied { create } for pid=31081 comm="gnome-keyring-d" name=".keyring73KZ0U" scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:gnome_home_t:s0 tclass=file type=AVC msg=audit(1254831178.660:317): avc: denied { write } for pid=31081 comm="gnome-keyring-d" name=".keyring73KZ0U" dev=dm-9 ino=19189 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:gnome_home_t:s0 tclass=file type=SYSCALL msg=audit(1254831178.660:317): arch=c000003e syscall=2 success=yes exit=8 a0=7fc46c003570 a1=c2 a2=180 a3=41 items=0 ppid=1 pid=31081 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831178.661:318): avc: denied { setattr } for pid=31081 comm="gnome-keyring-d" name=".keyring73KZ0U" dev=dm-9 ino=19189 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:gnome_home_t:s0 tclass=file type=SYSCALL msg=audit(1254831178.661:318): arch=c000003e syscall=91 success=yes exit=0 a0=8 a1=180 a2=8 a3=41 items=0 ppid=1 pid=31081 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831178.854:319): avc: denied { unlink } for pid=31081 comm="gnome-keyring-d" name="login.keyring" dev=dm-9 ino=19188 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:gnome_home_t:s0 tclass=file type=SYSCALL msg=audit(1254831178.854:319): arch=c000003e syscall=82 success=yes exit=0 a0=7fc46c003570 a1=7fc46c003400 a2=0 a3=41 items=0 ppid=1 pid=31081 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=USER_CHAUTHTOK msg=audit(1254831178.857:320): user pid=31049 uid=501 auid=501 ses=11 subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 msg='op=PAM:chauthtok acct="stepan" exe="/usr/bin/passwd" hostname=? addr=? terminal=pts/1 res=success' type=USER_CHAUTHTOK msg=audit(1254831178.857:321): user pid=31049 uid=501 auid=501 ses=11 subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 msg='op=change password id=501 exe="/usr/bin/passwd" hostname=? addr=? terminal=pts/1 res=success' type=AVC msg=audit(1254831178.884:322): avc: denied { remove_name } for pid=31077 comm="gnome-keyring-d" name="socket" dev=tmpfs ino=483369 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmp_t:s0 tclass=dir type=AVC msg=audit(1254831178.884:322): avc: denied { unlink } for pid=31077 comm="gnome-keyring-d" name="socket" dev=tmpfs ino=483369 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmp_t:s0 tclass=sock_file type=SYSCALL msg=audit(1254831178.884:322): arch=c000003e syscall=87 success=yes exit=0 a0=6a8000 a1=fbed50 a2=fbed50 a3=1 items=0 ppid=1 pid=31077 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831178.885:323): avc: denied { remove_name } for pid=31077 comm="gnome-keyring-d" name="keyring-1ttqBr" dev=tmpfs ino=483367 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tmp_t:s0 tclass=dir type=AVC msg=audit(1254831178.885:323): avc: denied { rmdir } for pid=31077 comm="gnome-keyring-d" name="keyring-1ttqBr" dev=tmpfs ino=483367 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmp_t:s0 tclass=dir type=SYSCALL msg=audit(1254831178.885:323): arch=c000003e syscall=84 success=yes exit=0 a0=fbf210 a1=fbed70 a2=fbed70 a3=1 items=0 ppid=1 pid=31077 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831188.758:324): avc: denied { write } for pid=31117 comm="gnome-keyring-d" name="/" dev=tmpfs ino=10309 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tmp_t:s0 tclass=dir type=AVC msg=audit(1254831188.758:324): avc: denied { add_name } for pid=31117 comm="gnome-keyring-d" name="keyring-DSLaM3" scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tmp_t:s0 tclass=dir type=AVC msg=audit(1254831188.758:324): avc: denied { create } for pid=31117 comm="gnome-keyring-d" name="keyring-DSLaM3" scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmp_t:s0 tclass=dir type=SYSCALL msg=audit(1254831188.758:324): arch=c000003e syscall=83 success=yes exit=0 a0=15f7210 a1=1c0 a2=15f7222 a3=4 items=0 ppid=31084 pid=31117 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831188.766:325): avc: denied { write } for pid=31117 comm="gnome-keyring-d" name="keyring-DSLaM3" dev=tmpfs ino=483776 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmp_t:s0 tclass=dir type=AVC msg=audit(1254831188.766:325): avc: denied { add_name } for pid=31117 comm="gnome-keyring-d" name="socket" scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmp_t:s0 tclass=dir type=SYSCALL msg=audit(1254831188.766:325): arch=c000003e syscall=49 success=yes exit=0 a0=5 a1=7fff029a79f0 a2=6e a3=10 items=0 ppid=31084 pid=31117 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=USER_CHAUTHTOK msg=audit(1254831188.908:326): user pid=31084 uid=501 auid=501 ses=11 subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 msg='op=PAM:chauthtok acct="stepan" exe="/usr/bin/passwd" hostname=? addr=? terminal=pts/1 res=success' type=AVC msg=audit(1254831188.910:327): avc: denied { remove_name } for pid=31119 comm="gnome-keyring-d" name="socket" dev=tmpfs ino=483778 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmp_t:s0 tclass=dir type=SYSCALL msg=audit(1254831188.910:327): arch=c000003e syscall=87 success=yes exit=0 a0=6a8000 a1=15f6d50 a2=15f6d50 a3=1 items=0 ppid=1 pid=31119 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254831188.910:328): avc: denied { remove_name } for pid=31119 comm="gnome-keyring-d" name="keyring-DSLaM3" dev=tmpfs ino=483776 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tmp_t:s0 tclass=dir type=AVC msg=audit(1254831188.910:328): avc: denied { rmdir } for pid=31119 comm="gnome-keyring-d" name="keyring-DSLaM3" dev=tmpfs ino=483776 scontext=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmp_t:s0 tclass=dir type=SYSCALL msg=audit(1254831188.910:328): arch=c000003e syscall=84 success=yes exit=0 a0=15f7210 a1=15f6d70 a2=15f6d70 a3=1 items=0 ppid=1 pid=31119 auid=501 uid=501 gid=502 euid=501 suid=501 fsuid=501 egid=502 sgid=502 fsgid=502 tty=pts1 ses=11 comm="gnome-keyring-d" exe="/usr/bin/gnome-keyring-daemon" subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 key=(null) type=USER_CHAUTHTOK msg=audit(1254831188.913:329): user pid=31084 uid=501 auid=501 ses=11 subj=unconfined_u:unconfined_r:passwd_t:s0-s0:c0.c1023 msg='op=change password id=501 exe="/usr/bin/passwd" hostname=? addr=? terminal=pts/1 res=success' type=CRED_DISP msg=audit(1254831251.129:330): user pid=30901 uid=0 auid=501 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_END msg=audit(1254831251.131:331): user pid=30901 uid=0 auid=501 ses=11 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_LOGIN msg=audit(1254831252.545:332): user pid=31325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="stepan": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_LOGIN msg=audit(1254831252.547:333): user pid=31325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="stepan": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_AUTH msg=audit(1254831254.482:334): user pid=31325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_ACCT msg=audit(1254831254.492:335): user pid=31325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=CRED_ACQ msg=audit(1254831254.496:336): user pid=31325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=LOGIN msg=audit(1254831254.496:337): login pid=31325 uid=0 old auid=4294967295 new auid=501 old ses=4294967295 new ses=12 type=USER_ROLE_CHANGE msg=audit(1254831254.531:338): user pid=31325 uid=0 auid=501 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed' type=USER_ROLE_CHANGE msg=audit(1254831254.532:339): user pid=31325 uid=0 auid=501 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254831254.539:340): user pid=31325 uid=0 auid=501 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=CRED_ACQ msg=audit(1254831254.542:341): user pid=31341 uid=0 auid=501 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_LOGIN msg=audit(1254831254.548:342): user pid=31325 uid=0 auid=501 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=/dev/pts/1 res=success' type=USER_AUTH msg=audit(1254833129.716:343): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254833129.743:344): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254833289.172:345): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254833289.177:346): user pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254834061.507:347): user pid=4542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254834061.509:348): user pid=4542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254834061.509:349): login pid=4542 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13 type=USER_START msg=audit(1254834061.646:350): user pid=4542 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254834063.161:351): user pid=4542 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254834063.161:352): user pid=4542 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254835135.936:353): user pid=6326 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=USER_ACCT msg=audit(1254835135.942:354): user pid=6326 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=CRED_ACQ msg=audit(1254835136.320:355): user pid=6326 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_START msg=audit(1254835136.329:356): user pid=6326 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_END msg=audit(1254835136.330:357): user pid=6326 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_CMD msg=audit(1254835136.334:358): user pid=6326 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp" cmd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type=USER_ROLE_CHANGE msg=audit(1254835136.345:359): user pid=6336 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=CRED_ACQ msg=audit(1254835160.791:360): user pid=6365 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_START msg=audit(1254835160.795:361): user pid=6365 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_END msg=audit(1254835160.812:362): user pid=6365 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_CMD msg=audit(1254835160.813:363): user pid=6365 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp" cmd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type=USER_ROLE_CHANGE msg=audit(1254835160.816:364): user pid=6366 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=CRED_DISP msg=audit(1254835166.398:365): user pid=31325 uid=0 auid=501 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_END msg=audit(1254835166.400:366): user pid=31325 uid=0 auid=501 ses=12 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=CRED_ACQ msg=audit(1254835186.657:367): user pid=6395 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_START msg=audit(1254835186.661:368): user pid=6395 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_END msg=audit(1254835186.661:369): user pid=6395 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_CMD msg=audit(1254835186.663:370): user pid=6395 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp" cmd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type=USER_ROLE_CHANGE msg=audit(1254835186.665:371): user pid=6396 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=CRED_ACQ msg=audit(1254835202.499:372): user pid=6414 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_START msg=audit(1254835202.503:373): user pid=6414 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_END msg=audit(1254835202.503:374): user pid=6414 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_CMD msg=audit(1254835202.504:375): user pid=6414 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp" cmd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type=USER_ROLE_CHANGE msg=audit(1254835202.507:376): user pid=6415 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=CRED_ACQ msg=audit(1254835217.358:377): user pid=6460 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_START msg=audit(1254835217.362:378): user pid=6460 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_END msg=audit(1254835217.363:379): user pid=6460 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_CMD msg=audit(1254835217.363:380): user pid=6460 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp" cmd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type=USER_ROLE_CHANGE msg=audit(1254835217.398:381): user pid=6461 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=CRED_ACQ msg=audit(1254835225.437:382): user pid=6489 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_START msg=audit(1254835225.448:383): user pid=6489 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_END msg=audit(1254835225.448:384): user pid=6489 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_CMD msg=audit(1254835225.449:385): user pid=6489 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp" cmd=2F62696E2F72706D202D557668205061636B6167654B69742D6261636B656E642D646576656C2D302E352E332D312E666331322E7838365F36342E72706D205061636B6167654B69742D62726F777365722D706C7567696E2D302E352E332D312E666331322E7838365F36342E72706D205061636B6167654B69742D636F6D6D616E642D6E6F742D666F756E642D302E352E332D312E666331322E7838365F36342E72706D205061636B6167654B69742D63726F6E2D302E352E332D312E666331322E7838365F36342E72706D205061636B6167654B69742D6465627567696E666F2D302E352E332D312E666331322E7838365F36342E72706D205061636B6167654B69742D64656275672D696E7374616C6C2D302E352E332D312E666331322E7838365F36342E72706D205061636B6167654B69742D6465766963652D726562696E642D302E352E332D312E666331322E7838365F36342E72706D205061636B6167654B69742D676C69622D646576656C2D302E352E332D312E666331322E7838365F36342E72706D205061636B6167654B69742D676C69622D302E352E332D312E666331322E7838365F36342E72706D205061636B6167654B69742D6773747265616D65722D706C7567696E2D302E352E332D312E666331322E7838365F36342E72706D205061636B6167654B69742D67746B2D6D6F6' type=USER_ROLE_CHANGE msg=audit(1254835225.452:386): user pid=6490 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=CRED_ACQ msg=audit(1254835310.505:387): user pid=6589 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_START msg=audit(1254835310.509:388): user pid=6589 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_END msg=audit(1254835310.510:389): user pid=6589 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_CMD msg=audit(1254835310.511:390): user pid=6589 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp" cmd=2F62696E2F72706D202D65205061636B6167654B69742D67746B2D6D6F64756C652D302E352E332D302E312E32303039303932386769742E666331322E69363836 terminal=pts/3 res=success' type=USER_ROLE_CHANGE msg=audit(1254835310.514:391): user pid=6591 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=CRED_ACQ msg=audit(1254835323.559:392): user pid=6605 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_START msg=audit(1254835323.563:393): user pid=6605 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_END msg=audit(1254835323.564:394): user pid=6605 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_CMD msg=audit(1254835323.565:395): user pid=6605 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp" cmd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type=USER_ROLE_CHANGE msg=audit(1254835323.567:396): user pid=6606 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=ANOM_PROMISCUOUS msg=audit(1254835611.035:397): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 type=SYSTEM_SHUTDOWN msg=audit(1254835668.889:398): user pid=6973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:consolekit_t:s0-s0:c0.c1023 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=? res=success' type=SYSTEM_RUNLEVEL msg=audit(1254835669.401:399): user pid=6981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='old-level=5 new-level=6: exe="/sbin/runlevel" hostname=? addr=? terminal=console res=success' type=DAEMON_END msg=audit(1254835685.978:2794): auditd normal halt, sending auid=0 pid=7196 subj=system_u:system_r:initrc_t:s0 res=success type=DAEMON_START msg=audit(1254836088.994:8128): auditd start, ver=2.0.1 format=raw kernel=2.6.31.1-58.fc12.x86_64 auid=4294967295 pid=1226 subj=system_u:system_r:auditd_t:s0 res=success type=CONFIG_CHANGE msg=audit(1254836089.200:5): audit_backlog_limit=320 old=64 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 type=LABEL_LEVEL_CHANGE msg=audit(1254836094.781:6): user pid=1403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=AVC msg=audit(1254836098.356:7): avc: denied { getcap } for pid=1674 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=process type=SYSCALL msg=audit(1254836098.356:7): arch=c000003e syscall=125 success=no exit=-14 a0=1f7eaa4 a1=0 a2=3162d7be80 a3=24 items=0 ppid=1673 pid=1674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) type=AVC msg=audit(1254836098.357:8): avc: denied { setcap } for pid=1674 comm="dovecot" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=process type=SYSCALL msg=audit(1254836098.357:8): arch=c000003e syscall=126 success=yes exit=0 a0=1f7eaa4 a1=1f7eaac a2=6 a3=0 items=0 ppid=1673 pid=1674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="dovecot" exe="/usr/sbin/dovecot" subj=system_u:system_r:dovecot_t:s0 key=(null) type=USER_AUTH msg=audit(1254836119.878:9): user pid=2021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=failed' type=USER_LOGIN msg=audit(1254836119.878:10): user pid=2021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=failed' type=USER_AUTH msg=audit(1254836125.578:11): user pid=2020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1254836125.584:12): user pid=2020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=CRED_ACQ msg=audit(1254836125.631:13): user pid=2020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=LOGIN msg=audit(1254836125.633:14): login pid=2020 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1 type=USER_ROLE_CHANGE msg=audit(1254836125.705:15): user pid=2020 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254836126.074:16): user pid=2020 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_LOGIN msg=audit(1254836126.075:17): user pid=2020 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=success' type=USER_AUTH msg=audit(1254836428.991:18): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254836428.997:19): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254836429.009:20): user pid=2698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254836429.015:21): user pid=2698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254836430.219:22): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254836430.229:23): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254836456.238:24): user pid=2777 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254836456.245:25): user pid=2777 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254836456.248:26): user pid=2777 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254836456.254:27): user pid=2777 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254836456.255:28): user pid=2777 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254836456.261:29): user pid=2777 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F6574632F4E6574776F726B4D616E616765722F646973706174636865722E642F39392D736574486F7374732065746830207570 terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254836456.266:30): user pid=2784 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_AUTH msg=audit(1254836458.308:31): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254836458.326:32): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_LOGIN msg=audit(1254836987.512:33): user pid=3006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="stepan": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_LOGIN msg=audit(1254836987.515:34): user pid=3006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="stepan": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_AUTH msg=audit(1254836991.692:35): user pid=3006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_ACCT msg=audit(1254836991.700:36): user pid=3006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=CRED_ACQ msg=audit(1254836991.703:37): user pid=3006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=LOGIN msg=audit(1254836991.704:38): login pid=3006 uid=0 old auid=4294967295 new auid=501 old ses=4294967295 new ses=2 type=USER_ROLE_CHANGE msg=audit(1254836991.767:39): user pid=3006 uid=0 auid=501 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed' type=USER_ROLE_CHANGE msg=audit(1254836991.768:40): user pid=3006 uid=0 auid=501 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254836991.773:41): user pid=3006 uid=0 auid=501 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=CRED_ACQ msg=audit(1254836991.778:42): user pid=3021 uid=0 auid=501 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_LOGIN msg=audit(1254836991.935:43): user pid=3006 uid=0 auid=501 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=/dev/pts/1 res=success' type=CRED_DISP msg=audit(1254837048.410:44): user pid=3006 uid=0 auid=501 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_END msg=audit(1254837048.412:45): user pid=3006 uid=0 auid=501 ses=2 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_AUTH msg=audit(1254837068.312:46): user pid=3140 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254837068.319:47): user pid=3140 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=ANOM_PROMISCUOUS msg=audit(1254837073.130:48): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1254837073.130:48): arch=c000003e syscall=16 success=yes exit=0 a0=11 a1=89a2 a2=7f649cd17dc0 a3=7f649cd17b50 items=0 ppid=1 pid=1950 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) type=USER_LOGIN msg=audit(1254837126.175:49): user pid=3359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="stepan": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_LOGIN msg=audit(1254837126.187:50): user pid=3359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="stepan": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_AUTH msg=audit(1254837130.490:51): user pid=3359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_ACCT msg=audit(1254837130.496:52): user pid=3359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=CRED_ACQ msg=audit(1254837130.504:53): user pid=3359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=LOGIN msg=audit(1254837130.504:54): login pid=3359 uid=0 old auid=4294967295 new auid=501 old ses=4294967295 new ses=3 type=USER_ROLE_CHANGE msg=audit(1254837130.567:55): user pid=3359 uid=0 auid=501 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed' type=USER_ROLE_CHANGE msg=audit(1254837130.568:56): user pid=3359 uid=0 auid=501 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254837130.573:57): user pid=3359 uid=0 auid=501 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=CRED_ACQ msg=audit(1254837130.576:58): user pid=3363 uid=0 auid=501 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_LOGIN msg=audit(1254837130.590:59): user pid=3359 uid=0 auid=501 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=/dev/pts/2 res=success' type=USER_AUTH msg=audit(1254837163.500:60): user pid=3423 uid=501 auid=501 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/2 res=failed' type=USER_AUTH msg=audit(1254837170.284:61): user pid=3430 uid=501 auid=501 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/2 res=failed' type=USER_AUTH msg=audit(1254837178.532:62): user pid=3440 uid=0 auid=501 ses=3 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=failed' type=CRED_DISP msg=audit(1254837189.450:63): user pid=3359 uid=0 auid=501 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_END msg=audit(1254837189.452:64): user pid=3359 uid=0 auid=501 ses=3 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_ACCT msg=audit(1254837661.719:65): user pid=3867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254837661.723:66): user pid=3867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254837661.723:67): login pid=3867 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 type=USER_START msg=audit(1254837661.758:68): user pid=3867 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254837662.647:69): user pid=3867 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254837662.648:70): user pid=3867 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_LOGIN msg=audit(1254838114.603:71): user pid=4112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="stepan": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_LOGIN msg=audit(1254838114.608:72): user pid=4112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="stepan": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_AUTH msg=audit(1254838117.021:73): user pid=4112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_ACCT msg=audit(1254838117.026:74): user pid=4112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=CRED_ACQ msg=audit(1254838117.068:75): user pid=4112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=LOGIN msg=audit(1254838117.069:76): login pid=4112 uid=0 old auid=4294967295 new auid=501 old ses=4294967295 new ses=5 type=USER_ROLE_CHANGE msg=audit(1254838117.128:77): user pid=4112 uid=0 auid=501 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed' type=USER_ROLE_CHANGE msg=audit(1254838117.129:78): user pid=4112 uid=0 auid=501 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254838117.135:79): user pid=4112 uid=0 auid=501 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=CRED_ACQ msg=audit(1254838117.141:80): user pid=4117 uid=0 auid=501 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_LOGIN msg=audit(1254838117.147:81): user pid=4112 uid=0 auid=501 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=/dev/pts/0 res=success' type=USER_AUTH msg=audit(1254838155.920:82): user pid=4372 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_ACCT msg=audit(1254838155.935:83): user pid=4372 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254838155.980:84): user pid=4372 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254838155.992:85): user pid=4372 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254838155.993:86): user pid=4372 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254838155.994:87): user pid=4372 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254838155.999:88): user pid=4388 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_AUTH msg=audit(1254838176.242:89): user pid=4531 uid=501 auid=501 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success' type=USER_ACCT msg=audit(1254838176.247:90): user pid=4531 uid=501 auid=501 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success' type=USER_START msg=audit(1254838176.276:91): user pid=4531 uid=501 auid=501 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success' type=CRED_ACQ msg=audit(1254838176.278:92): user pid=4531 uid=501 auid=501 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success' type=USER_AUTH msg=audit(1254839369.392:93): user pid=4639 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254839377.022:94): user pid=1836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=failed' type=USER_LOGIN msg=audit(1254839377.060:95): user pid=1836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=500 exe="/bin/login" hostname=? addr=? terminal=tty2 res=failed' type=USER_AUTH msg=audit(1254839380.819:96): user pid=1836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="?" exe="/bin/login" hostname=? addr=? terminal=tty2 res=failed' type=USER_LOGIN msg=audit(1254839380.820:97): user pid=1836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login acct="matje" exe="/bin/login" hostname=? addr=? terminal=tty2 res=failed' type=USER_AUTH msg=audit(1254839383.749:98): user pid=1836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_ACCT msg=audit(1254839383.760:99): user pid=1836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=LOGIN msg=audit(1254839383.761:100): login pid=1836 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=6 type=USER_ROLE_CHANGE msg=audit(1254839383.818:101): user pid=1836 uid=0 auid=500 ses=6 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_START msg=audit(1254839384.097:102): user pid=1836 uid=0 auid=500 ses=6 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=CRED_ACQ msg=audit(1254839384.099:103): user pid=1836 uid=0 auid=500 ses=6 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_LOGIN msg=audit(1254839384.100:104): user pid=1836 uid=0 auid=500 ses=6 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=500 exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=CRED_DISP msg=audit(1254840820.124:105): user pid=4531 uid=501 auid=501 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success' type=USER_END msg=audit(1254840820.126:106): user pid=4531 uid=501 auid=501 ses=5 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/0 res=success' type=USER_ACCT msg=audit(1254841261.765:107): user pid=5275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254841261.768:108): user pid=5275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254841261.769:109): login pid=5275 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 type=USER_START msg=audit(1254841261.777:110): user pid=5275 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254841262.235:111): user pid=5275 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254841262.235:112): user pid=5275 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254843141.215:113): user pid=4112 uid=0 auid=501 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_END msg=audit(1254843141.218:114): user pid=4112 uid=0 auid=501 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_LOGIN msg=audit(1254843147.036:115): user pid=5870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="stepan": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_LOGIN msg=audit(1254843147.038:116): user pid=5870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="stepan": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_ERR msg=audit(1254843148.689:117): user pid=5870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident acct="?" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=failed' type=USER_LOGIN msg=audit(1254843364.044:118): user pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="stepan": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_LOGIN msg=audit(1254843364.046:119): user pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="stepan": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_AUTH msg=audit(1254843367.189:120): user pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_ACCT msg=audit(1254843367.200:121): user pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=CRED_ACQ msg=audit(1254843367.203:122): user pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=LOGIN msg=audit(1254843367.203:123): login pid=6068 uid=0 old auid=4294967295 new auid=501 old ses=4294967295 new ses=8 type=USER_ROLE_CHANGE msg=audit(1254843367.244:124): user pid=6068 uid=0 auid=501 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed' type=USER_ROLE_CHANGE msg=audit(1254843367.244:125): user pid=6068 uid=0 auid=501 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254843367.254:126): user pid=6068 uid=0 auid=501 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=CRED_ACQ msg=audit(1254843367.257:127): user pid=6074 uid=0 auid=501 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_LOGIN msg=audit(1254843367.270:128): user pid=6068 uid=0 auid=501 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=/dev/pts/0 res=success' type=CRED_DISP msg=audit(1254843425.945:129): user pid=6068 uid=0 auid=501 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_END msg=audit(1254843425.946:130): user pid=6068 uid=0 auid=501 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_LOGIN msg=audit(1254843435.486:131): user pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="kasal": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_AUTH msg=audit(1254843441.225:132): user pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="?" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=failed' type=USER_LOGIN msg=audit(1254843441.225:133): user pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="kasal": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_AUTH msg=audit(1254843446.087:134): user pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="?" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=failed' type=USER_LOGIN msg=audit(1254843446.087:135): user pid=6181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="kasal": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_LOGIN msg=audit(1254843450.801:136): user pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="stepan": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_LOGIN msg=audit(1254843450.803:137): user pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="stepan": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_LOGIN msg=audit(1254843450.804:138): user pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="stepan": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_AUTH msg=audit(1254843452.534:139): user pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_ACCT msg=audit(1254843452.540:140): user pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=CRED_ACQ msg=audit(1254843452.543:141): user pid=6218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=LOGIN msg=audit(1254843452.544:142): login pid=6218 uid=0 old auid=4294967295 new auid=501 old ses=4294967295 new ses=9 type=USER_ROLE_CHANGE msg=audit(1254843452.581:143): user pid=6218 uid=0 auid=501 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed' type=USER_ROLE_CHANGE msg=audit(1254843452.582:144): user pid=6218 uid=0 auid=501 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254843452.587:145): user pid=6218 uid=0 auid=501 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=CRED_ACQ msg=audit(1254843452.590:146): user pid=6231 uid=0 auid=501 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_LOGIN msg=audit(1254843452.597:147): user pid=6218 uid=0 auid=501 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=/dev/pts/0 res=success' type=CRED_DISP msg=audit(1254843669.387:148): user pid=6218 uid=0 auid=501 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_END msg=audit(1254843669.389:149): user pid=6218 uid=0 auid=501 ses=9 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_AUTH msg=audit(1254844437.540:150): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254844437.546:151): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254844861.351:152): user pid=6878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254844861.358:153): user pid=6878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254844861.358:154): login pid=6878 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10 type=USER_START msg=audit(1254844861.363:155): user pid=6878 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254844861.528:156): user pid=6878 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254844861.529:157): user pid=6878 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254845276.786:158): user pid=7122 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254845276.793:159): user pid=7122 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254845276.795:160): user pid=7122 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254845276.802:161): user pid=7122 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254845276.802:162): user pid=7122 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254845276.803:163): user pid=7122 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F62696E2F6370202F7661722F6C6F672F6F70656E76706E2E6C6F67202F746D702F terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254845276.810:164): user pid=7129 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254845283.794:165): user pid=7154 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254845283.803:166): user pid=7154 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254845283.809:167): user pid=7154 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254845283.810:168): user pid=7154 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F62696E2F63686F776E206D6174656A3A6D6174656A202F746D702F6F70656E76706E2E6C6F67 terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254845283.813:169): user pid=7155 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_AUTH msg=audit(1254845962.181:170): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254845962.189:171): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254845962.674:172): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254845962.687:173): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254848282.403:174): user pid=7996 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254848461.590:175): user pid=8024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254848461.591:176): user pid=8024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254848461.592:177): login pid=8024 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11 type=USER_START msg=audit(1254848461.596:178): user pid=8024 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254848461.802:179): user pid=8024 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254848461.803:180): user pid=8024 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254849975.478:181): user pid=8404 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254851424.571:182): user pid=8787 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254852061.844:183): user pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254852061.848:184): user pid=9062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254852061.849:185): login pid=9062 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12 type=USER_START msg=audit(1254852061.854:186): user pid=9062 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254852062.055:187): user pid=9062 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254852062.055:188): user pid=9062 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254855661.120:189): user pid=9766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254855661.130:190): user pid=9766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254855661.130:191): login pid=9766 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13 type=USER_START msg=audit(1254855661.134:192): user pid=9766 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254855661.348:193): user pid=9766 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254855661.348:194): user pid=9766 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254859261.431:195): user pid=10301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254859261.433:196): user pid=10301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254859261.434:197): login pid=10301 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14 type=USER_START msg=audit(1254859261.438:198): user pid=10301 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254859261.618:199): user pid=10301 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254859261.620:200): user pid=10301 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254861251.103:201): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254861251.109:202): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254862861.694:203): user pid=11179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254862861.696:204): user pid=11179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254862861.696:205): login pid=11179 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15 type=USER_START msg=audit(1254862861.701:206): user pid=11179 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254862861.880:207): user pid=11179 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254862861.880:208): user pid=11179 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254893450.543:209): user pid=11722 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=CRED_DISP msg=audit(1254893504.314:210): user pid=1836 uid=0 auid=500 ses=6 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_END msg=audit(1254893504.318:211): user pid=1836 uid=0 auid=500 ses=6 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_AUTH msg=audit(1254893556.973:212): user pid=13201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_ACCT msg=audit(1254893556.978:213): user pid=13201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=LOGIN msg=audit(1254893556.979:214): login pid=13201 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=16 type=USER_ROLE_CHANGE msg=audit(1254893557.016:215): user pid=13201 uid=0 auid=500 ses=16 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_START msg=audit(1254893557.219:216): user pid=13201 uid=0 auid=500 ses=16 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=CRED_ACQ msg=audit(1254893557.219:217): user pid=13201 uid=0 auid=500 ses=16 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_LOGIN msg=audit(1254893557.220:218): user pid=13201 uid=0 auid=500 ses=16 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=500 exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=CRED_DISP msg=audit(1254894203.709:219): user pid=13201 uid=0 auid=500 ses=16 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_END msg=audit(1254894203.716:220): user pid=13201 uid=0 auid=500 ses=16 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_AUTH msg=audit(1254894225.181:221): user pid=15436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_ACCT msg=audit(1254894225.189:222): user pid=15436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=LOGIN msg=audit(1254894225.190:223): login pid=15436 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17 type=USER_ROLE_CHANGE msg=audit(1254894225.228:224): user pid=15436 uid=0 auid=0 ses=17 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_START msg=audit(1254894225.276:225): user pid=15436 uid=0 auid=0 ses=17 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=CRED_ACQ msg=audit(1254894225.277:226): user pid=15436 uid=0 auid=0 ses=17 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_LOGIN msg=audit(1254894225.278:227): user pid=15436 uid=0 auid=0 ses=17 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=SYSTEM_RUNLEVEL msg=audit(1254894229.232:228): user pid=15587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='old-level=5 new-level=3: exe="/sbin/runlevel" hostname=? addr=? terminal=console res=success' type=ANOM_ABEND msg=audit(1254894229.384:229): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=2062 comm="seahorse-agent" sig=6 type=SYSTEM_RUNLEVEL msg=audit(1254894242.278:230): user pid=15764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='old-level=3 new-level=5: exe="/sbin/runlevel" hostname=? addr=? terminal=console res=success' type=CRED_DISP msg=audit(1254894243.196:231): user pid=15436 uid=0 auid=0 ses=17 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_END msg=audit(1254894243.201:232): user pid=15436 uid=0 auid=0 ses=17 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_AUTH msg=audit(1254894301.443:233): user pid=15954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=failed' type=USER_LOGIN msg=audit(1254894301.443:234): user pid=15954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty7 res=failed' type=USER_AUTH msg=audit(1254894304.436:235): user pid=15953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1254894304.441:236): user pid=15953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=CRED_ACQ msg=audit(1254894304.445:237): user pid=15953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=LOGIN msg=audit(1254894304.446:238): login pid=15953 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=18 type=USER_ROLE_CHANGE msg=audit(1254894304.484:239): user pid=15953 uid=0 auid=500 ses=18 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254894304.555:240): user pid=15953 uid=0 auid=500 ses=18 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_LOGIN msg=audit(1254894304.555:241): user pid=15953 uid=0 auid=500 ses=18 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty7 res=success' type=USER_ACCT msg=audit(1254895261.085:242): user pid=16556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254895261.088:243): user pid=16556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254895261.088:244): login pid=16556 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=19 type=USER_START msg=audit(1254895261.099:245): user pid=16556 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1254895261.291:246): user pid=16556 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254895261.291:247): user pid=16556 uid=0 auid=0 ses=19 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254895746.608:248): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254895746.613:249): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254895746.652:250): user pid=16754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254895746.687:251): user pid=16754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254895747.049:252): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254895747.054:253): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254895750.054:254): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254895750.062:255): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254895750.591:256): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254895750.596:257): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254898208.147:258): user pid=17162 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254899188.211:259): user pid=17553 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254900276.735:260): user pid=17794 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254900276.740:261): user pid=17794 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254900389.029:262): user pid=20940 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=USER_ACCT msg=audit(1254900389.035:263): user pid=20940 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=CRED_ACQ msg=audit(1254900389.038:264): user pid=20940 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_START msg=audit(1254900389.048:265): user pid=20940 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_END msg=audit(1254900389.048:266): user pid=20940 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_CMD msg=audit(1254900389.050:267): user pid=20940 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/rpmbuild" cmd=2F6574632F4E6574776F726B4D616E616765722F646973706174636865722E642F39392D736574486F7374732065746830207570 terminal=pts/3 res=success' type=USER_ROLE_CHANGE msg=audit(1254900389.126:268): user pid=21082 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=ANOM_ABEND msg=audit(1254900408.377:269): auid=500 uid=500 gid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=22196 comm="conftest" sig=6 type=ANOM_ABEND msg=audit(1254900450.984:270): auid=500 uid=500 gid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=23975 comm="conftest" sig=6 type=USER_ACCT msg=audit(1254902461.699:271): user pid=8091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254902461.703:272): user pid=8091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254902461.703:273): login pid=8091 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=20 type=USER_START msg=audit(1254902461.745:274): user pid=8091 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1254902462.013:275): avc: denied { read } for pid=8111 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254902462.013:275): avc: denied { open } for pid=8111 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254902462.013:275): avc: denied { sys_rawio } for pid=8111 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1254902462.013:275): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=8109 pid=8111 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1254902462.036:276): user pid=8091 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254902462.036:277): user pid=8091 uid=0 auid=0 ses=20 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=ANOM_ABEND msg=audit(1254905047.897:278): auid=500 uid=500 gid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=16123 comm="nautilus" sig=11 type=USER_ACCT msg=audit(1254906061.178:279): user pid=9618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254906061.182:280): user pid=9618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254906061.183:281): login pid=9618 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=21 type=USER_START msg=audit(1254906061.200:282): user pid=9618 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1254906061.330:283): avc: denied { read } for pid=9639 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254906061.330:283): avc: denied { open } for pid=9639 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254906061.330:283): avc: denied { sys_rawio } for pid=9639 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1254906061.330:283): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=9637 pid=9639 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1254906061.423:284): user pid=9618 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254906061.423:285): user pid=9618 uid=0 auid=0 ses=21 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254906644.870:286): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254906644.875:287): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254906741.660:288): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254906741.665:289): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254906741.866:290): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254906741.870:291): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254909164.367:292): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254909164.400:293): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254909661.528:294): user pid=10788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254909661.531:295): user pid=10788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254909661.532:296): login pid=10788 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=22 type=USER_START msg=audit(1254909661.536:297): user pid=10788 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1254909661.684:298): avc: denied { read } for pid=10810 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254909661.684:298): avc: denied { open } for pid=10810 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254909661.684:298): avc: denied { sys_rawio } for pid=10810 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1254909661.684:298): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=10808 pid=10810 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1254909661.705:299): user pid=10788 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254909661.706:300): user pid=10788 uid=0 auid=0 ses=22 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254911846.897:301): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254911846.902:302): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254913261.814:303): user pid=13024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254913261.817:304): user pid=13024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254913261.817:305): login pid=13024 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=23 type=USER_START msg=audit(1254913261.823:306): user pid=13024 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1254913261.980:307): avc: denied { read } for pid=13045 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254913261.980:307): avc: denied { open } for pid=13045 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254913261.980:307): avc: denied { sys_rawio } for pid=13045 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1254913261.980:307): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=13043 pid=13045 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1254913261.999:308): user pid=13024 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254913261.999:309): user pid=13024 uid=0 auid=0 ses=23 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1254916861.060:310): user pid=13516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254916861.062:311): user pid=13516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254916861.063:312): login pid=13516 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=24 type=USER_START msg=audit(1254916861.067:313): user pid=13516 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1254916861.158:314): avc: denied { sys_rawio } for pid=13537 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1254916861.158:314): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=13535 pid=13537 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1254916861.256:315): user pid=13516 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254916861.257:316): user pid=13516 uid=0 auid=0 ses=24 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254920144.810:317): user pid=13841 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254920461.343:318): user pid=13901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254920461.347:319): user pid=13901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254920461.347:320): login pid=13901 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=25 type=USER_START msg=audit(1254920461.353:321): user pid=13901 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1254920461.437:322): avc: denied { read } for pid=13922 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254920461.437:322): avc: denied { open } for pid=13922 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254920461.437:322): avc: denied { sys_rawio } for pid=13922 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1254920461.437:322): arch=c000003e syscall=2 success=yes exit=3 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=13920 pid=13922 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1254920461.456:323): user pid=13901 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254920461.456:324): user pid=13901 uid=0 auid=0 ses=25 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254920551.013:325): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254920551.023:326): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254922880.522:327): user pid=14691 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=failed' type=USER_AUTH msg=audit(1254922897.707:328): user pid=14691 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254922897.718:329): user pid=14691 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=CRED_ACQ msg=audit(1254922897.720:330): user pid=14691 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_START msg=audit(1254922897.725:331): user pid=14691 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_END msg=audit(1254922897.725:332): user pid=14691 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/0 res=success' type=USER_CMD msg=audit(1254922897.726:333): user pid=14691 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp" cmd=2F62696E2F72706D202D5576682063686D7365652D6465627567696E666F2D312E302E372D312E666331322E7838365F36342E72706D2063686D7365652D312E302E372D312E666331322E7838365F36342E72706D terminal=pts/0 res=success' type=USER_ROLE_CHANGE msg=audit(1254922897.732:334): user pid=14701 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success' type=USER_ACCT msg=audit(1254924061.563:335): user pid=15145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254924061.567:336): user pid=15145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254924061.567:337): login pid=15145 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=26 type=USER_START msg=audit(1254924061.572:338): user pid=15145 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1254924061.688:339): avc: denied { read } for pid=15165 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254924061.688:339): avc: denied { open } for pid=15165 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254924061.688:339): avc: denied { sys_rawio } for pid=15165 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1254924061.688:339): arch=c000003e syscall=2 success=yes exit=3 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=15163 pid=15165 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1254924061.708:340): user pid=15145 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254924061.708:341): user pid=15145 uid=0 auid=0 ses=26 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254925680.967:342): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254925680.973:343): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254927661.788:344): user pid=16521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254927661.792:345): user pid=16521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254927661.792:346): login pid=16521 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=27 type=USER_START msg=audit(1254927661.796:347): user pid=16521 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1254927661.909:348): avc: denied { read } for pid=16541 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254927661.909:348): avc: denied { open } for pid=16541 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254927661.909:348): avc: denied { sys_rawio } for pid=16541 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1254927661.909:348): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=16539 pid=16541 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1254927661.942:349): user pid=16521 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254927661.943:350): user pid=16521 uid=0 auid=0 ses=27 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254929550.089:351): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254929550.093:352): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254935076.941:353): user pid=18302 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254949309.497:354): user pid=18919 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254980435.465:355): user pid=19460 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254980488.716:356): user pid=15881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_ACCT msg=audit(1254980488.722:357): user pid=15881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=LOGIN msg=audit(1254980488.723:358): login pid=15881 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=28 type=USER_ROLE_CHANGE msg=audit(1254980488.816:359): user pid=15881 uid=0 auid=500 ses=28 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_START msg=audit(1254980489.099:360): user pid=15881 uid=0 auid=500 ses=28 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=CRED_ACQ msg=audit(1254980489.100:361): user pid=15881 uid=0 auid=500 ses=28 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_LOGIN msg=audit(1254980489.101:362): user pid=15881 uid=0 auid=500 ses=28 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=500 exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=CRED_DISP msg=audit(1254980523.565:363): user pid=15881 uid=0 auid=500 ses=28 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_END msg=audit(1254980523.568:364): user pid=15881 uid=0 auid=500 ses=28 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_AUTH msg=audit(1254981280.279:365): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254981280.286:366): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254981280.313:367): user pid=22784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254981280.318:368): user pid=22784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254981281.100:369): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254981281.105:370): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254981284.361:371): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254981284.370:372): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254981284.476:373): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254981284.489:374): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254981661.183:375): user pid=22878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254981661.187:376): user pid=22878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254981661.187:377): login pid=22878 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=29 type=USER_START msg=audit(1254981661.192:378): user pid=22878 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1254981661.290:379): avc: denied { read } for pid=22897 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254981661.290:379): avc: denied { open } for pid=22897 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254981661.290:379): avc: denied { sys_rawio } for pid=22897 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1254981661.290:379): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=22895 pid=22897 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=29 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1254981661.303:380): user pid=22878 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254981661.303:381): user pid=22878 uid=0 auid=0 ses=29 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254985376.973:382): user pid=23253 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254986132.626:383): user pid=23563 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254986599.370:384): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254986599.418:385): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254986616.586:386): user pid=23714 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254986616.600:387): user pid=23714 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254986743.546:388): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254986743.558:389): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1254986746.770:390): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254986746.775:391): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=ADD_USER msg=audit(1254986983.001:392): user pid=24293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="gdm" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' type=ADD_USER msg=audit(1254986983.002:393): user pid=24293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="gdm" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' type=AVC msg=audit(1254987106.475:394): avc: denied { read } for pid=2012 comm="polkitd" name="meminfo" dev=proc ino=4026532008 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file type=AVC msg=audit(1254987106.475:394): avc: denied { open } for pid=2012 comm="polkitd" name="meminfo" dev=proc ino=4026532008 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file type=SYSCALL msg=audit(1254987106.475:394): arch=c000003e syscall=2 success=yes exit=7 a0=3162b40332 a1=0 a2=1b6 a3=2 items=0 ppid=1 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="polkitd" exe="/usr/libexec/polkit-1/polkitd" subj=system_u:system_r:policykit_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1254987106.476:395): avc: denied { getattr } for pid=2012 comm="polkitd" path="/proc/meminfo" dev=proc ino=4026532008 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=file type=SYSCALL msg=audit(1254987106.476:395): arch=c000003e syscall=5 success=yes exit=0 a0=7 a1=7fff4445fed0 a2=7fff4445fed0 a3=2 items=0 ppid=1 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="polkitd" exe="/usr/libexec/polkit-1/polkitd" subj=system_u:system_r:policykit_t:s0-s0:c0.c1023 key=(null) type=USER_AUTH msg=audit(1254987111.766:396): user pid=24421 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254987111.770:397): user pid=24421 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254988861.750:398): user pid=26909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254988861.754:399): user pid=26909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254988861.754:400): login pid=26909 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=30 type=USER_START msg=audit(1254988861.851:401): user pid=26909 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1254988862.222:402): avc: denied { read } for pid=26930 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254988862.222:402): avc: denied { open } for pid=26930 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254988862.222:402): avc: denied { sys_rawio } for pid=26930 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1254988862.222:402): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=26928 pid=26930 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=30 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1254988862.236:403): user pid=26909 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254988862.236:404): user pid=26909 uid=0 auid=0 ses=30 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254988865.518:405): user pid=26946 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1254992322.776:406): user pid=30111 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254992461.407:407): user pid=30117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254992461.412:408): user pid=30117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254992461.413:409): login pid=30117 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=31 type=USER_START msg=audit(1254992461.492:410): user pid=30117 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1254992461.801:411): avc: denied { read } for pid=30138 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254992461.801:411): avc: denied { open } for pid=30138 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254992461.801:411): avc: denied { sys_rawio } for pid=30138 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1254992461.801:411): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=30136 pid=30138 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=31 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1254992461.821:412): user pid=30117 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254992461.821:413): user pid=30117 uid=0 auid=0 ses=31 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254992470.105:414): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254992470.134:415): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=ANOM_ABEND msg=audit(1254992728.647:416): auid=500 uid=500 gid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=22747 comm="thunderbird-bin" sig=11 type=USER_AUTH msg=audit(1254993399.466:417): user pid=30436 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_ACCT msg=audit(1254993399.472:418): user pid=30436 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1254993399.492:419): user pid=30436 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1254993399.559:420): user pid=30436 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1254993399.561:421): user pid=30436 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1254993399.566:422): user pid=30436 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej" cmd=2F6574632F4E6574776F726B4D616E616765722F646973706174636865722E642F39392D736574486F7374732065746830207570 terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1254993399.582:423): user pid=30443 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_LOGIN msg=audit(1254994152.996:424): user pid=30587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="stepan": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_LOGIN msg=audit(1254994152.998:425): user pid=30587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="stepan": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.5 terminal=sshd res=failed' type=USER_AUTH msg=audit(1254994156.016:426): user pid=30587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_ACCT msg=audit(1254994156.031:427): user pid=30587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=CRED_ACQ msg=audit(1254994156.063:428): user pid=30587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=LOGIN msg=audit(1254994156.063:429): login pid=30587 uid=0 old auid=4294967295 new auid=501 old ses=4294967295 new ses=32 type=USER_ROLE_CHANGE msg=audit(1254994156.132:430): user pid=30587 uid=0 auid=501 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed' type=USER_ROLE_CHANGE msg=audit(1254994156.132:431): user pid=30587 uid=0 auid=501 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1254994156.142:432): user pid=30587 uid=0 auid=501 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=CRED_ACQ msg=audit(1254994156.151:433): user pid=30595 uid=0 auid=501 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_LOGIN msg=audit(1254994156.186:434): user pid=30587 uid=0 auid=501 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='uid=501: exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=/dev/pts/3 res=success' type=USER_AUTH msg=audit(1254994299.668:435): user pid=30768 uid=501 auid=501 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/3 res=success' type=USER_ACCT msg=audit(1254994299.674:436): user pid=30768 uid=501 auid=501 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/3 res=success' type=USER_START msg=audit(1254994299.679:437): user pid=30768 uid=501 auid=501 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/3 res=success' type=CRED_ACQ msg=audit(1254994299.680:438): user pid=30768 uid=501 auid=501 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/3 res=success' type=CRED_DISP msg=audit(1254994310.653:439): user pid=30768 uid=501 auid=501 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/3 res=success' type=USER_END msg=audit(1254994310.654:440): user pid=30768 uid=501 auid=501 ses=32 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/bin/su" hostname=? addr=? terminal=pts/3 res=success' type=USER_AUTH msg=audit(1254995451.322:441): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254995451.328:442): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1254996061.932:443): user pid=31462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254996061.936:444): user pid=31462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254996061.936:445): login pid=31462 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=33 type=USER_START msg=audit(1254996061.940:446): user pid=31462 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1254996062.134:447): avc: denied { read } for pid=31482 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254996062.134:447): avc: denied { open } for pid=31482 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254996062.134:447): avc: denied { sys_rawio } for pid=31482 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1254996062.134:447): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=31481 pid=31482 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=33 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1254996062.204:448): user pid=31462 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254996062.204:449): user pid=31462 uid=0 auid=0 ses=33 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1254999107.614:450): user pid=32153 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1254999661.422:451): user pid=32307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1254999661.425:452): user pid=32307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1254999661.426:453): login pid=32307 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=34 type=USER_START msg=audit(1254999661.431:454): user pid=32307 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1254999661.617:455): avc: denied { read } for pid=32327 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254999661.617:455): avc: denied { open } for pid=32327 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1254999661.617:455): avc: denied { sys_rawio } for pid=32327 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1254999661.617:455): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=32326 pid=32327 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=34 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1254999661.633:456): user pid=32307 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1254999661.633:457): user pid=32307 uid=0 auid=0 ses=34 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1255003261.856:458): user pid=2311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255003261.858:459): user pid=2311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255003261.858:460): login pid=2311 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=35 type=USER_START msg=audit(1255003261.862:461): user pid=2311 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1255003262.282:462): avc: denied { read } for pid=2332 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255003262.282:462): avc: denied { open } for pid=2332 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255003262.282:462): avc: denied { sys_rawio } for pid=2332 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1255003262.282:462): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=2330 pid=2332 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=35 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1255003262.332:463): user pid=2311 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255003262.334:464): user pid=2311 uid=0 auid=0 ses=35 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1255004635.263:465): user pid=30587 uid=0 auid=501 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_END msg=audit(1255004635.266:466): user pid=30587 uid=0 auid=501 ses=32 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="stepan" exe="/usr/sbin/sshd" hostname=192.168.1.5 addr=192.168.1.5 terminal=ssh res=success' type=USER_AUTH msg=audit(1255005707.829:467): user pid=3178 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=USER_ACCT msg=audit(1255005707.850:468): user pid=3178 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=CRED_ACQ msg=audit(1255005707.852:469): user pid=3178 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_START msg=audit(1255005707.861:470): user pid=3178 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_END msg=audit(1255005707.882:471): user pid=3178 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_CMD msg=audit(1255005707.884:472): user pid=3178 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/rpmbuild" cmd=2F7573722F62696E2F79756D20696E7374616C6C2073706565782D646576656C terminal=pts/3 res=success' type=USER_ROLE_CHANGE msg=audit(1255005707.889:473): user pid=3185 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=USER_AUTH msg=audit(1255006183.059:474): user pid=20405 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=USER_ACCT msg=audit(1255006183.065:475): user pid=20405 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=CRED_ACQ msg=audit(1255006183.083:476): user pid=20405 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_START msg=audit(1255006183.088:477): user pid=20405 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_END msg=audit(1255006183.090:478): user pid=20405 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_CMD msg=audit(1255006183.095:479): user pid=20405 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/rpmbuild" cmd=2F62696E2F72706D202D5576682052504D532F7838365F36342F6C696E70686F6E652D6465627567696E666F2D332E312E322D312E302E67697432303039313030382E312E666331322E7838365F36342E72706D2052504D532F7838365F36342F6C696E70686F6E652D646576656C2D332E312E322D312E302E67697432303039313030382E312E666331322E7838365F36342E72706D2052504D532F7838365F36342F6C696E70686F6E652D332E312E322D312E302E67697432303039313030382E312E666331322E7838365F36342E72706D terminal=pts/3 res=success' type=USER_ROLE_CHANGE msg=audit(1255006183.100:480): user pid=20412 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=USER_ACCT msg=audit(1255006861.463:481): user pid=20617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255006861.467:482): user pid=20617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255006861.467:483): login pid=20617 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=36 type=USER_START msg=audit(1255006861.473:484): user pid=20617 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1255006861.848:485): avc: denied { read } for pid=20636 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255006861.848:485): avc: denied { open } for pid=20636 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255006861.848:485): avc: denied { sys_rawio } for pid=20636 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1255006861.848:485): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=20635 pid=20636 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=36 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1255006861.872:486): user pid=20617 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255006861.872:487): user pid=20617 uid=0 auid=0 ses=36 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1255007747.771:488): user pid=21065 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1255007747.789:489): user pid=21065 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=ANOM_PROMISCUOUS msg=audit(1255007811.078:490): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 type=SYSCALL msg=audit(1255007811.078:490): arch=c000003e syscall=3 success=yes exit=0 a0=12 a1=7fff5171c930 a2=8 a3=1 items=0 ppid=1 pid=3157 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe=2F7573722F62696E2F71656D752D6B766D202864656C6574656429 subj=system_u:system_r:svirt_t:s0:c679,c835 key=(null) type=USER_AUTH msg=audit(1255010237.703:491): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255010237.708:492): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255010462.059:493): user pid=22020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255010462.061:494): user pid=22020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255010462.062:495): login pid=22020 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=37 type=USER_START msg=audit(1255010462.066:496): user pid=22020 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1255010462.344:497): avc: denied { read } for pid=22040 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255010462.344:497): avc: denied { open } for pid=22040 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255010462.344:497): avc: denied { sys_rawio } for pid=22040 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1255010462.344:497): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=22039 pid=22040 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=37 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1255010462.364:498): user pid=22020 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255010462.364:499): user pid=22020 uid=0 auid=0 ses=37 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=ANOM_ABEND msg=audit(1255010468.599:500): auid=500 uid=500 gid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=21512 comm="thunderbird-bin" sig=11 type=AVC msg=audit(1255010476.325:501): avc: denied { signull } for pid=1777 comm="abrtd" scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:system_r:setroubleshootd_t:s0-s0:c0.c1023 tclass=process type=SYSCALL msg=audit(1255010476.325:501): arch=c000003e syscall=62 success=yes exit=0 a0=561b a1=0 a2=6f1 a3=1 items=0 ppid=1 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="abrtd" exe=2F7573722F7362696E2F6162727464202864656C6574656429 subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_AVC msg=audit(1255010490.164:502): user pid=1382 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.PolicyKit1.Authority member=CheckAuthorization dest=org.freedesktop.PolicyKit1 spid=22062 tpid=2012 scontext=system_u:system_r:abrt_t:s0 tcontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tclass=dbus : exe="/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' type=AVC msg=audit(1255010490.165:503): avc: denied { getattr } for pid=2012 comm="polkitd" path="/proc/22062" dev=proc ino=1223262 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dir type=SYSCALL msg=audit(1255010490.165:503): arch=c000003e syscall=4 success=yes exit=0 a0=7fff444637e0 a1=7fff44463750 a2=7fff44463750 a3=1 items=0 ppid=1 pid=2012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="polkitd" exe="/usr/libexec/polkit-1/polkitd" subj=system_u:system_r:policykit_t:s0-s0:c0.c1023 key=(null) type=USER_AVC msg=audit(1255010490.201:504): user pid=1382 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_return dest=:1.779 spid=2012 tpid=22062 scontext=system_u:system_r:policykit_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0 tclass=dbus : exe="/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' type=USER_AUTH msg=audit(1255010514.218:505): user pid=22074 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1255010514.222:506): user pid=22074 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=CRED_ACQ msg=audit(1255010514.273:507): user pid=22074 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1255010514.293:508): user pid=22074 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1255010514.295:509): user pid=22074 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1255010514.299:510): user pid=22074 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1255010514.303:511): user pid=22081 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_AUTH msg=audit(1255012614.837:512): user pid=22953 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1255012614.842:513): user pid=22953 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=ANOM_PROMISCUOUS msg=audit(1255012641.445:514): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1255012641.445:514): arch=c000003e syscall=16 success=yes exit=0 a0=11 a1=89a2 a2=7f7b71279dc0 a3=7f7b71279b50 items=0 ppid=1 pid=24223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) type=ANOM_PROMISCUOUS msg=audit(1255013352.979:515): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 type=SYSCALL msg=audit(1255013352.979:515): arch=c000003e syscall=3 success=yes exit=0 a0=12 a1=7fff34588f50 a2=8 a3=1 items=0 ppid=1 pid=23000 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/bin/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c569,c585 key=(null) type=USER_AUTH msg=audit(1255013798.888:516): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255013798.915:517): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255013798.931:518): user pid=24273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255013798.938:519): user pid=24273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255013800.891:520): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255013800.896:521): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255013820.250:522): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255013820.267:523): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255014061.660:524): user pid=24383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255014061.665:525): user pid=24383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255014061.665:526): login pid=24383 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=38 type=USER_START msg=audit(1255014061.770:527): user pid=24383 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1255014062.430:528): avc: denied { read } for pid=24404 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255014062.430:528): avc: denied { open } for pid=24404 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255014062.430:528): avc: denied { sys_rawio } for pid=24404 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1255014062.430:528): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=24402 pid=24404 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=38 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1255014062.456:529): user pid=24383 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255014062.456:530): user pid=24383 uid=0 auid=0 ses=38 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1255014277.964:531): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255014277.969:532): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255014277.989:533): user pid=24273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255014277.993:534): user pid=24273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255014278.323:535): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255014278.328:536): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255015486.812:537): user pid=25476 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1255015486.822:538): user pid=25476 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=CRED_ACQ msg=audit(1255015486.874:539): user pid=25476 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1255015486.883:540): user pid=25476 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1255015486.884:541): user pid=25476 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1255015486.887:542): user pid=25476 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1255015486.890:543): user pid=25483 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_AUTH msg=audit(1255016651.766:544): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255016651.794:545): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255016866.695:546): user pid=26452 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1255016866.699:547): user pid=26452 uid=500 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=ANOM_PROMISCUOUS msg=audit(1255016895.417:548): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1255016895.417:548): arch=c000003e syscall=16 success=yes exit=0 a0=11 a1=89a2 a2=7f7b6fe77dc0 a3=3162d7b14c items=0 ppid=1 pid=24225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) type=USER_AUTH msg=audit(1255017376.052:549): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255017376.057:550): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=ANOM_PROMISCUOUS msg=audit(1255017641.785:551): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 type=SYSCALL msg=audit(1255017641.785:551): arch=c000003e syscall=3 success=yes exit=0 a0=12 a1=7fffe3646430 a2=8 a3=1 items=0 ppid=1 pid=26500 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/bin/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c331,c387 key=(null) type=USER_AUTH msg=audit(1255017644.913:552): user pid=27471 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1255017644.918:553): user pid=27471 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=CRED_ACQ msg=audit(1255017644.969:554): user pid=27471 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1255017644.986:555): user pid=27471 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1255017644.988:556): user pid=27471 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1255017644.995:557): user pid=27471 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1255017644.998:558): user pid=27477 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1255017661.635:559): user pid=27515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255017661.639:560): user pid=27515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255017661.640:561): login pid=27515 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=39 type=USER_START msg=audit(1255017661.644:562): user pid=27515 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1255017662.024:563): avc: denied { read } for pid=27535 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255017662.024:563): avc: denied { open } for pid=27535 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255017662.024:563): avc: denied { sys_rawio } for pid=27535 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1255017662.024:563): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=27533 pid=27535 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=39 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1255017662.040:564): user pid=27515 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255017662.040:565): user pid=27515 uid=0 auid=0 ses=39 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=ANOM_PROMISCUOUS msg=audit(1255017679.849:566): dev=vnet0 prom=256 old_prom=0 auid=500 uid=0 gid=0 ses=18 type=SYSCALL msg=audit(1255017679.849:566): arch=c000003e syscall=16 success=yes exit=0 a0=11 a1=89a2 a2=7f38e4986dc0 a3=7f38e4986b50 items=0 ppid=1 pid=27577 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) type=ANOM_PROMISCUOUS msg=audit(1255017758.010:567): dev=vnet1 prom=256 old_prom=0 auid=500 uid=0 gid=0 ses=18 type=SYSCALL msg=audit(1255017758.010:567): arch=c000003e syscall=16 success=yes exit=0 a0=11 a1=89a2 a2=7f38e5d88dc0 a3=3162d7b14c items=0 ppid=1 pid=27575 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=unconfined_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) type=ANOM_PROMISCUOUS msg=audit(1255017831.014:568): dev=vnet0 prom=0 old_prom=256 auid=500 uid=107 gid=107 ses=18 type=ANOM_PROMISCUOUS msg=audit(1255017835.699:569): dev=vnet1 prom=0 old_prom=256 auid=500 uid=107 gid=107 ses=18 type=USER_AUTH msg=audit(1255019966.359:570): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255019966.370:571): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255019966.527:572): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255019966.532:573): user pid=1684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255020094.120:574): user pid=28445 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1255020094.126:575): user pid=28445 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=CRED_ACQ msg=audit(1255020094.130:576): user pid=28445 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1255020094.141:577): user pid=28445 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1255020094.143:578): user pid=28445 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1255020094.144:579): user pid=28445 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1255020094.157:580): user pid=28452 uid=0 auid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1255021261.627:581): user pid=29009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255021261.657:582): user pid=29009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255021261.657:583): login pid=29009 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=40 type=USER_START msg=audit(1255021261.888:584): user pid=29009 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1255021263.013:585): avc: denied { read } for pid=29032 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255021263.013:585): avc: denied { open } for pid=29032 comm="mcelog" name="mem" dev=tmpfs ino=3749 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255021263.013:585): avc: denied { sys_rawio } for pid=29032 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1255021263.013:585): arch=c000003e syscall=2 success=yes exit=3 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=29030 pid=29032 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=40 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1255021263.031:586): user pid=29009 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255021263.031:587): user pid=29009 uid=0 auid=0 ses=40 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=ANOM_ABEND msg=audit(1255022112.590:588): auid=500 uid=500 gid=500 ses=18 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=16122 comm="mutter" sig=6 type=SYSTEM_SHUTDOWN msg=audit(1255022123.517:589): user pid=29396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:consolekit_t:s0-s0:c0.c1023 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=? res=success' type=SYSTEM_RUNLEVEL msg=audit(1255022124.037:590): user pid=29404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='old-level=5 new-level=0: exe="/sbin/runlevel" hostname=? addr=? terminal=console res=success' type=DAEMON_END msg=audit(1255022149.817:8129): auditd normal halt, sending auid=0 pid=29633 subj=system_u:system_r:initrc_t:s0 res=success type=DAEMON_START msg=audit(1255022471.395:5326): auditd start, ver=2.0.1 format=raw kernel=2.6.31.1-58.fc12.x86_64 auid=4294967295 pid=2099 subj=system_u:system_r:auditd_t:s0 res=success type=SYSCALL msg=audit(1255022471.503:32578): arch=c000003e syscall=59 success=yes exit=0 a0=1e0eed0 a1=1e0e6c0 a2=1e0f370 a3=8 items=2 ppid=2094 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="touch" exe="/bin/touch" subj=system_u:system_r:initrc_t:s0 key=(null) type=EXECVE msg=audit(1255022471.503:32578): argc=2 a0="touch" a1="/var/lock/subsys/auditd" type=CWD msg=audit(1255022471.503:32578): cwd="/" type=PATH msg=audit(1255022471.503:32578): item=0 name="/bin/touch" inode=108176 dev=fd:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 type=PATH msg=audit(1255022471.503:32578): item=1 name=(null) inode=3412 dev=fd:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 type=SYSCALL msg=audit(1255022471.508:32579): arch=c000003e syscall=2 success=yes exit=3 a0=316261a620 a1=0 a2=1 a3=0 items=1 ppid=2094 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="touch" exe="/bin/touch" subj=system_u:system_r:initrc_t:s0 key=(null) type=CWD msg=audit(1255022471.508:32579): cwd="/" type=PATH msg=audit(1255022471.508:32579): item=0 name="/etc/ld.so.cache" inode=20506 dev=fd:01 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:ld_so_cache_t:s0 type=SYSCALL msg=audit(1255022471.509:32580): arch=c000003e syscall=2 success=yes exit=3 a0=7f94222d018d a1=0 a2=0 a3=2 items=1 ppid=2094 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="touch" exe="/bin/touch" subj=system_u:system_r:initrc_t:s0 key=(null) type=CWD msg=audit(1255022471.509:32580): cwd="/" type=PATH msg=audit(1255022471.509:32580): item=0 name="/lib64/librt.so.1" inode=348822 dev=fd:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 type=SYSCALL msg=audit(1255022471.511:32581): arch=c000003e syscall=2 success=yes exit=3 a0=7f94222dd3aa a1=0 a2=0 a3=7fff93b47fd8 items=1 ppid=2094 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="touch" exe="/bin/touch" subj=system_u:system_r:initrc_t:s0 key=(null) type=CWD msg=audit(1255022471.511:32581): cwd="/" type=PATH msg=audit(1255022471.511:32581): item=0 name="/lib64/libc.so.6" inode=13053 dev=fd:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 type=SYSCALL msg=audit(1255022471.512:32582): arch=c000003e syscall=2 success=yes exit=3 a0=7f94222d0b1d a1=0 a2=0 a3=7fff93b47fa8 items=1 ppid=2094 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="touch" exe="/bin/touch" subj=system_u:system_r:initrc_t:s0 key=(null) type=CWD msg=audit(1255022471.512:32582): cwd="/" type=PATH msg=audit(1255022471.512:32582): item=0 name="/lib64/libpthread.so.0" inode=348821 dev=fd:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 type=SYSCALL msg=audit(1255022471.513:32583): arch=c000003e syscall=2 success=yes exit=6 a0=7fa3091c2a82 a1=0 a2=1b6 a3=2 items=1 ppid=2099 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="audispd" exe="/sbin/audispd" subj=system_u:system_r:audisp_t:s0 key=(null) type=CWD msg=audit(1255022471.513:32583): cwd="/" type=PATH msg=audit(1255022471.513:32583): item=0 name="/etc/localtime" inode=7580 dev=fd:01 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:locale_t:s0 type=SYSCALL msg=audit(1255022471.514:32584): arch=c000003e syscall=2 success=yes exit=3 a0=3162b459b0 a1=0 a2=3162d7b010 a3=3162a82970 items=1 ppid=2094 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="touch" exe="/bin/touch" subj=system_u:system_r:initrc_t:s0 key=(null) type=CWD msg=audit(1255022471.514:32584): cwd="/" type=PATH msg=audit(1255022471.514:32584): item=0 name="/usr/lib/locale/locale-archive" inode=352250 dev=fd:01 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:locale_t:s0 type=SYSCALL msg=audit(1255022471.514:32585): arch=c000003e syscall=2 success=yes exit=5 a0=7fa309849537 a1=90800 a2=0 a3=7fff8b40d0f0 items=1 ppid=2099 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="audispd" exe="/sbin/audispd" subj=system_u:system_r:audisp_t:s0 key=(null) type=CWD msg=audit(1255022471.514:32585): cwd="/" type=PATH msg=audit(1255022471.514:32585): item=0 name="/etc/audisp/plugins.d/" inode=37736 dev=fd:01 mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:etc_t:s0 type=SYSCALL msg=audit(1255022471.515:32586): arch=c000003e syscall=2 success=yes exit=3 a0=7fff93b48f20 a1=941 a2=1b6 a3=3162d7b14c items=2 ppid=2094 pid=2103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="touch" exe="/bin/touch" subj=system_u:system_r:initrc_t:s0 key=(null) type=CWD msg=audit(1255022471.515:32586): cwd="/" type=PATH msg=audit(1255022471.515:32586): item=0 name="/var/lock/subsys/" inode=1712 dev=fd:01 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:var_lock_t:s0 type=PATH msg=audit(1255022471.515:32586): item=1 name="/var/lock/subsys/auditd" inode=3161 dev=fd:01 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:var_lock_t:s0 type=SYSCALL msg=audit(1255022471.517:32587): arch=c000003e syscall=2 success=yes exit=3 a0=1e05080 a1=241 a2=1b6 a3=0 items=1 ppid=2094 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditd" exe="/bin/bash" subj=system_u:system_r:initrc_t:s0 key=(null) type=CWD msg=audit(1255022471.517:32587): cwd="/" type=PATH msg=audit(1255022471.517:32587): item=0 name="/dev/null" inode=2614 dev=00:10 mode=020666 ouid=0 ogid=0 rdev=01:03 obj=system_u:object_r:null_device_t:s0 type=SYSCALL msg=audit(1255022471.527:32588): arch=c000003e syscall=2 success=yes exit=7 a0=7fff8b40d3e0 a1=0 a2=7fff8b40d405 a3=fffffff1 items=1 ppid=2099 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="audispd" exe="/sbin/audispd" subj=system_u:system_r:audisp_t:s0 key=(null) type=CWD msg=audit(1255022471.527:32588): cwd="/" type=PATH msg=audit(1255022471.527:32588): item=0 name="/etc/audisp/plugins.d/sedispatch.conf" inode=80373 dev=fd:01 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:etc_t:s0 type=SYSCALL msg=audit(1255022471.517:32589): arch=c000003e syscall=59 success=yes exit=0 a0=1dce7c0 a1=1e0b9a0 a2=1e0f370 a3=0 items=2 ppid=2094 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/sbin/auditctl" subj=system_u:system_r:auditctl_t:s0 key=(null) type=EXECVE msg=audit(1255022471.517:32589): argc=3 a0="/sbin/auditctl" a1="-R" a2="/etc/audit/audit.rules" type=CWD msg=audit(1255022471.517:32589): cwd="/" type=PATH msg=audit(1255022471.517:32589): item=0 name="/sbin/auditctl" inode=352582 dev=fd:01 mode=0100750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:auditctl_exec_t:s0 type=PATH msg=audit(1255022471.517:32589): item=1 name=(null) inode=3412 dev=fd:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 type=SYSCALL msg=audit(1255022471.551:32590): arch=c000003e syscall=2 success=no exit=-2 a0=7fff7c79d550 a1=0 a2=0 a3=7fff7c79d7e8 items=1 ppid=2038 pid=2070 auid=4294967295 uid=42 gid=42 euid=42 suid=42 fsuid=42 egid=42 sgid=42 fsgid=42 tty=(none) ses=4294967295 comm="gdm-simple-gree" exe="/usr/libexec/gdm-simple-greeter" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) type=CWD msg=audit(1255022471.551:32590): cwd="/var/gdm" type=PATH msg=audit(1255022471.551:32590): item=0 name="/usr/lib64/tls/libcroco-0.6.so.3" type=SYSCALL msg=audit(1255022471.551:32591): arch=c000003e syscall=2 success=yes exit=22 a0=7fff7c79d550 a1=0 a2=0 a3=ffffffff items=1 ppid=2038 pid=2070 auid=4294967295 uid=42 gid=42 euid=42 suid=42 fsuid=42 egid=42 sgid=42 fsgid=42 tty=(none) ses=4294967295 comm="gdm-simple-gree" exe="/usr/libexec/gdm-simple-greeter" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) type=CWD msg=audit(1255022471.551:32591): cwd="/var/gdm" type=PATH msg=audit(1255022471.551:32591): item=0 name="/usr/lib64/libcroco-0.6.so.3" inode=44516 dev=fd:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 type=SYSCALL msg=audit(1255022471.565:32592): arch=c000003e syscall=2 success=yes exit=7 a0=7fff8b40d3e0 a1=0 a2=7fff8b40d401 a3=fffffff5 items=1 ppid=2099 pid=2101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="audispd" exe="/sbin/audispd" subj=system_u:system_r:audisp_t:s0 key=(null) type=SYSCALL msg=audit(1255022471.565:32593): arch=c000003e syscall=2 success=yes exit=3 a0=316261a620 a1=0 a2=1 a3=0 items=1 ppid=2094 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/sbin/auditctl" subj=system_u:system_r:auditctl_t:s0 key=(null) type=CWD msg=audit(1255022471.565:32592): cwd="/" type=PATH msg=audit(1255022471.565:32592): item=0 name="/etc/audisp/plugins.d/syslog.conf" inode=347564 dev=fd:01 mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:etc_t:s0 type=CWD msg=audit(1255022471.565:32593): cwd="/" type=PATH msg=audit(1255022471.565:32593): item=0 name="/etc/ld.so.cache" inode=20506 dev=fd:01 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:ld_so_cache_t:s0 type=SYSCALL msg=audit(1255022471.566:32594): arch=c000003e syscall=2 success=yes exit=3 a0=7f2c26e48b1d a1=0 a2=0 a3=2 items=1 ppid=2094 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/sbin/auditctl" subj=system_u:system_r:auditctl_t:s0 key=(null) type=CWD msg=audit(1255022471.566:32594): cwd="/" type=PATH msg=audit(1255022471.566:32594): item=0 name="/lib64/libpthread.so.0" inode=348821 dev=fd:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 type=SYSCALL msg=audit(1255022471.567:32595): arch=c000003e syscall=2 success=yes exit=3 a0=7f2c26e553aa a1=0 a2=0 a3=7fffa3d8d1a8 items=1 ppid=2094 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/sbin/auditctl" subj=system_u:system_r:auditctl_t:s0 key=(null) type=CWD msg=audit(1255022471.567:32595): cwd="/" type=PATH msg=audit(1255022471.567:32595): item=0 name="/lib64/libc.so.6" inode=13053 dev=fd:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 type=SYSCALL msg=audit(1255022471.573:32596): arch=c000003e syscall=2 success=yes exit=4 a0=7fffa3d8df19 a1=0 a2=40b170 a3=40 items=1 ppid=2094 pid=2104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/sbin/auditctl" subj=system_u:system_r:auditctl_t:s0 key=(null) type=CWD msg=audit(1255022471.573:32596): cwd="/" type=PATH msg=audit(1255022471.573:32596): item=0 name="/etc/audit/audit.rules" inode=52921 dev=fd:01 mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:auditd_etc_t:s0 type=CONFIG_CHANGE msg=audit(1255022471.576:32597): auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 op="remove rule" key=(null) list=4 res=1 type=CONFIG_CHANGE msg=audit(1255022471.576:32598): audit_backlog_limit=320 old=256 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 type=USER_AUTH msg=audit(1255022475.200:32599): user pid=2132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=failed' type=USER_LOGIN msg=audit(1255022475.200:32600): user pid=2132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=failed' type=USER_AUTH msg=audit(1255022477.753:32601): user pid=2131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1255022477.760:32602): user pid=2131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=CRED_ACQ msg=audit(1255022477.866:32603): user pid=2131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=LOGIN msg=audit(1255022477.867:32604): login pid=2131 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1 type=USER_ROLE_CHANGE msg=audit(1255022477.914:32605): user pid=2131 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1255022478.252:32606): user pid=2131 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_LOGIN msg=audit(1255022478.254:32607): user pid=2131 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=success' type=USER_AUTH msg=audit(1255024207.944:32608): user pid=3600 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1255024861.162:32609): user pid=3732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255024861.167:32610): user pid=3732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255024861.168:32611): login pid=3732 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 type=USER_START msg=audit(1255024861.173:32612): user pid=3732 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1255024861.352:32613): avc: denied { read } for pid=3751 comm="mcelog" name="mem" dev=tmpfs ino=3668 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255024861.352:32613): avc: denied { open } for pid=3751 comm="mcelog" name="mem" dev=tmpfs ino=3668 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255024861.352:32613): avc: denied { sys_rawio } for pid=3751 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1255024861.352:32613): arch=c000003e syscall=2 success=yes exit=3 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=3749 pid=3751 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1255024861.369:32614): user pid=3732 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255024861.370:32615): user pid=3732 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1255026778.392:32616): user pid=4231 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1255026910.788:32617): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255026910.794:32618): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255026944.896:32619): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255026944.903:32620): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255027442.273:32621): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255027442.279:32622): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255027607.316:32623): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255027607.322:32624): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255028461.548:32625): user pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255028461.550:32626): user pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255028461.550:32627): login pid=4513 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 type=USER_START msg=audit(1255028461.554:32628): user pid=4513 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1255028461.635:32629): avc: denied { read } for pid=4532 comm="mcelog" name="mem" dev=tmpfs ino=3668 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255028461.635:32629): avc: denied { open } for pid=4532 comm="mcelog" name="mem" dev=tmpfs ino=3668 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255028461.635:32629): avc: denied { sys_rawio } for pid=4532 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1255028461.635:32629): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=4530 pid=4532 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=3 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1255028461.654:32630): user pid=4513 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255028461.656:32631): user pid=4513 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1255032061.760:32632): user pid=4799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255032061.763:32633): user pid=4799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255032061.764:32634): login pid=4799 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 type=USER_START msg=audit(1255032061.768:32635): user pid=4799 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1255032061.849:32636): avc: denied { read } for pid=4818 comm="mcelog" name="mem" dev=tmpfs ino=3668 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255032061.849:32636): avc: denied { open } for pid=4818 comm="mcelog" name="mem" dev=tmpfs ino=3668 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255032061.849:32636): avc: denied { sys_rawio } for pid=4818 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1255032061.849:32636): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=4816 pid=4818 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1255032061.875:32637): user pid=4799 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255032061.875:32638): user pid=4799 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1255034824.795:32639): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255034824.801:32640): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255035661.980:32641): user pid=5494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255035661.984:32642): user pid=5494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255035661.984:32643): login pid=5494 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5 type=USER_START msg=audit(1255035661.989:32644): user pid=5494 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1255035662.070:32645): avc: denied { read } for pid=5513 comm="mcelog" name="mem" dev=tmpfs ino=3668 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255035662.070:32645): avc: denied { open } for pid=5513 comm="mcelog" name="mem" dev=tmpfs ino=3668 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255035662.070:32645): avc: denied { sys_rawio } for pid=5513 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1255035662.070:32645): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=5511 pid=5513 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=5 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1255035662.094:32646): user pid=5494 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255035662.095:32647): user pid=5494 uid=0 auid=0 ses=5 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_ACCT msg=audit(1255039261.200:32648): user pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255039261.203:32649): user pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255039261.203:32650): login pid=6372 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6 type=USER_START msg=audit(1255039261.208:32651): user pid=6372 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1255039261.325:32652): avc: denied { read } for pid=6392 comm="mcelog" name="mem" dev=tmpfs ino=3668 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255039261.325:32652): avc: denied { open } for pid=6392 comm="mcelog" name="mem" dev=tmpfs ino=3668 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1255039261.325:32652): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=6390 pid=6392 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=6 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1255039261.384:32653): user pid=6372 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255039261.384:32654): user pid=6372 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1255070272.340:32655): user pid=7105 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1255071254.066:32656): user pid=9820 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1255071661.126:32657): user pid=9872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255071661.130:32658): user pid=9872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255071661.130:32659): login pid=9872 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 type=USER_START msg=audit(1255071661.136:32660): user pid=9872 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1255071661.222:32661): avc: denied { read } for pid=9890 comm="mcelog" name="mem" dev=tmpfs ino=3668 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255071661.222:32661): avc: denied { open } for pid=9890 comm="mcelog" name="mem" dev=tmpfs ino=3668 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255071661.222:32661): avc: denied { sys_rawio } for pid=9890 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1255071661.222:32661): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=9889 pid=9890 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=7 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1255071661.284:32662): user pid=9872 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255071661.284:32663): user pid=9872 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1255072352.862:32664): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255072352.871:32665): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255072702.687:32666): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255072702.693:32667): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255075261.385:32668): user pid=10654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255075261.388:32669): user pid=10654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255075261.388:32670): login pid=10654 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=8 type=USER_START msg=audit(1255075261.393:32671): user pid=10654 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1255075261.468:32672): avc: denied { read } for pid=10673 comm="mcelog" name="mem" dev=tmpfs ino=3668 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255075261.468:32672): avc: denied { open } for pid=10673 comm="mcelog" name="mem" dev=tmpfs ino=3668 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255075261.468:32672): avc: denied { sys_rawio } for pid=10673 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1255075261.468:32672): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=10671 pid=10673 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1255075261.481:32673): user pid=10654 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255075261.482:32674): user pid=10654 uid=0 auid=0 ses=8 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1255078093.703:32675): user pid=11257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255078093.709:32676): user pid=11257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255078093.714:32677): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255078093.730:32678): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255078094.053:32679): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255078094.060:32680): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255078097.154:32681): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255078097.168:32682): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255078097.296:32683): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255078097.303:32684): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255078861.610:32685): user pid=11446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255078861.612:32686): user pid=11446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255078861.613:32687): login pid=11446 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=9 type=USER_START msg=audit(1255078861.618:32688): user pid=11446 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=AVC msg=audit(1255078861.836:32689): avc: denied { read } for pid=11467 comm="mcelog" name="mem" dev=tmpfs ino=3668 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255078861.836:32689): avc: denied { open } for pid=11467 comm="mcelog" name="mem" dev=tmpfs ino=3668 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file type=AVC msg=audit(1255078861.836:32689): avc: denied { sys_rawio } for pid=11467 comm="mcelog" capability=17 scontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dmesg_t:s0-s0:c0.c1023 tclass=capability type=SYSCALL msg=audit(1255078861.836:32689): arch=c000003e syscall=2 success=yes exit=0 a0=409e28 a1=0 a2=1000 a3=d items=0 ppid=11465 pid=11467 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="mcelog" exe="/usr/sbin/mcelog" subj=system_u:system_r:dmesg_t:s0-s0:c0.c1023 key=(null) type=CRED_DISP msg=audit(1255078861.864:32690): user pid=11446 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255078861.864:32691): user pid=11446 uid=0 auid=0 ses=9 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1255081257.704:32692): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255081257.710:32693): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255081456.041:32694): user pid=13664 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1255081456.048:32695): user pid=13664 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1255081876.641:32696): user pid=13985 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=failed' type=USER_AUTH msg=audit(1255081880.291:32697): user pid=13992 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1255081880.297:32698): user pid=13992 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=MAC_POLICY_LOAD msg=audit(1255082002.516:32699): policy loaded auid=4294967295 ses=4294967295 type=SYSCALL msg=audit(1255082002.516:32699): arch=c000003e syscall=1 success=yes exit=0 a0=4 a1=7f288b6b3000 a2=3ee8cd a3=7fff442e5da0 items=0 ppid=14508 pid=14509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="load_policy" exe="/sbin/load_policy" subj=system_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null) type=ADD_USER msg=audit(1255082023.817:32700): user pid=14654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="dbus" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' type=ADD_USER msg=audit(1255082023.817:32701): user pid=14654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:useradd_t:s0-s0:c0.c1023 msg='op=adding user acct="dbus" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=failed' type=DAEMON_CONFIG msg=audit(1255082099.345:9440) config changed, auid=0 pid=14964 subj=system_u:system_r:initrc_t:s0 res=success type=USER_ACCT msg=audit(1255082462.184:32702): user pid=15779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255082462.191:32703): user pid=15779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255082462.193:32704): login pid=15779 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10 type=USER_START msg=audit(1255082462.237:32705): user pid=15779 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1255082462.580:32706): user pid=15779 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255082462.580:32707): user pid=15779 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=ANOM_ABEND msg=audit(1255084454.308:32708): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 pid=15867 comm="firefox" sig=11 type=AVC msg=audit(1255084464.228:32709): avc: denied { read } for pid=16236 comm="eu-unstrip" name="libjetpack.so" dev=dm-9 ino=1328477 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:mozilla_home_t:s0 tclass=file type=AVC msg=audit(1255084464.228:32709): avc: denied { open } for pid=16236 comm="eu-unstrip" name="libjetpack.so" dev=dm-9 ino=1328477 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:mozilla_home_t:s0 tclass=file type=SYSCALL msg=audit(1255084464.228:32709): arch=c000003e syscall=2 success=yes exit=223 a0=22b2b70 a1=0 a2=0 a3=6633343865363134 items=0 ppid=1895 pid=16236 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4294967295 comm="eu-unstrip" exe="/usr/bin/eu-unstrip" subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_AUTH msg=audit(1255084552.062:32710): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255084552.068:32711): user pid=1756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=SYSTEM_SHUTDOWN msg=audit(1255084560.266:32712): user pid=16280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:consolekit_t:s0-s0:c0.c1023 msg='init: exe="/sbin/shutdown" hostname=? addr=? terminal=? res=success' type=SYSTEM_RUNLEVEL msg=audit(1255084560.779:32713): user pid=16288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t:s0 msg='old-level=5 new-level=6: exe="/sbin/runlevel" hostname=? addr=? terminal=console res=success' type=DAEMON_END msg=audit(1255084578.500:5327): auditd normal halt, sending auid=0 pid=16513 subj=system_u:system_r:initrc_t:s0 res=success type=DAEMON_START msg=audit(1255085375.622:5797): auditd start, ver=2.0.1 format=raw kernel=2.6.31.1-58.fc12.x86_64 auid=4294967295 pid=1194 subj=system_u:system_r:auditd_t:s0 res=success type=SYSCALL msg=audit(1255085375.731:9427): arch=c000003e syscall=59 success=yes exit=0 a0=2475740 a1=2474f30 a2=2475be0 a3=8 items=2 ppid=1191 pid=1200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="touch" exe="/bin/touch" subj=system_u:system_r:initrc_t:s0 key=(null) type=EXECVE msg=audit(1255085375.731:9427): argc=2 a0="touch" a1="/var/lock/subsys/auditd" type=CWD msg=audit(1255085375.731:9427): cwd="/" type=PATH msg=audit(1255085375.731:9427): item=0 name="/bin/touch" inode=108176 dev=fd:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:bin_t:s0 type=PATH msg=audit(1255085375.731:9427): item=1 name=(null) inode=3412 dev=fd:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 type=SYSCALL msg=audit(1255085375.737:9428): arch=c000003e syscall=2 success=yes exit=3 a0=316261a620 a1=0 a2=1 a3=0 items=1 ppid=1191 pid=1200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="touch" exe="/bin/touch" subj=system_u:system_r:initrc_t:s0 key=(null) type=CWD msg=audit(1255085375.737:9428): cwd="/" type=PATH msg=audit(1255085375.737:9428): item=0 name="/etc/ld.so.cache" inode=12580 dev=fd:01 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_cache_t:s0 type=SYSCALL msg=audit(1255085375.739:9429): arch=c000003e syscall=2 success=yes exit=3 a0=7f22cf3ac055 a1=0 a2=0 a3=2 items=1 ppid=1191 pid=1200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="touch" exe="/bin/touch" subj=system_u:system_r:initrc_t:s0 key=(null) type=CWD msg=audit(1255085375.739:9429): cwd="/" type=PATH msg=audit(1255085375.739:9429): item=0 name="/lib64/librt.so.1" inode=348822 dev=fd:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 type=SYSCALL msg=audit(1255085375.741:9430): arch=c000003e syscall=2 success=yes exit=3 a0=7f22cf3b9295 a1=0 a2=0 a3=7fffae4ec268 items=1 ppid=1191 pid=1200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="touch" exe="/bin/touch" subj=system_u:system_r:initrc_t:s0 key=(null) type=CWD msg=audit(1255085375.741:9430): cwd="/" type=PATH msg=audit(1255085375.741:9430): item=0 name="/lib64/libc.so.6" inode=13053 dev=fd:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 type=SYSCALL msg=audit(1255085375.744:9431): arch=c000003e syscall=2 success=yes exit=3 a0=7f22cf3ac9e5 a1=0 a2=0 a3=7fffae4ec238 items=1 ppid=1191 pid=1200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="touch" exe="/bin/touch" subj=system_u:system_r:initrc_t:s0 key=(null) type=CWD msg=audit(1255085375.744:9431): cwd="/" type=PATH msg=audit(1255085375.744:9431): item=0 name="/lib64/libpthread.so.0" inode=348821 dev=fd:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 type=SYSCALL msg=audit(1255085375.747:9432): arch=c000003e syscall=2 success=yes exit=3 a0=3162b459b0 a1=0 a2=3162d7b010 a3=3162a827f0 items=1 ppid=1191 pid=1200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="touch" exe="/bin/touch" subj=system_u:system_r:initrc_t:s0 key=(null) type=CWD msg=audit(1255085375.747:9432): cwd="/" type=PATH msg=audit(1255085375.747:9432): item=0 name="/usr/lib/locale/locale-archive" inode=352250 dev=fd:01 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:locale_t:s0 type=SYSCALL msg=audit(1255085375.748:9433): arch=c000003e syscall=2 success=yes exit=3 a0=7fffae4ede9b a1=941 a2=1b6 a3=3162d7b14c items=2 ppid=1191 pid=1200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="touch" exe="/bin/touch" subj=system_u:system_r:initrc_t:s0 key=(null) type=CWD msg=audit(1255085375.748:9433): cwd="/" type=PATH msg=audit(1255085375.748:9433): item=0 name="/var/lock/subsys/" inode=1712 dev=fd:01 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:var_lock_t:s0 type=PATH msg=audit(1255085375.748:9433): item=1 name="/var/lock/subsys/auditd" inode=212 dev=fd:01 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:var_lock_t:s0 type=SYSCALL msg=audit(1255085375.750:9434): arch=c000003e syscall=2 success=yes exit=3 a0=246b910 a1=241 a2=1b6 a3=0 items=1 ppid=1191 pid=1201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="S11auditd" exe="/bin/bash" subj=system_u:system_r:initrc_t:s0 key=(null) type=CWD msg=audit(1255085375.750:9434): cwd="/" type=PATH msg=audit(1255085375.750:9434): item=0 name="/dev/null" inode=2614 dev=00:10 mode=020666 ouid=0 ogid=0 rdev=01:03 obj=system_u:object_r:null_device_t:s0 type=SYSCALL msg=audit(1255085375.750:9435): arch=c000003e syscall=59 success=yes exit=0 a0=24364a0 a1=2472210 a2=2475be0 a3=0 items=2 ppid=1191 pid=1201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/sbin/auditctl" subj=system_u:system_r:auditctl_t:s0 key=(null) type=EXECVE msg=audit(1255085375.750:9435): argc=3 a0="/sbin/auditctl" a1="-R" a2="/etc/audit/audit.rules" type=CWD msg=audit(1255085375.750:9435): cwd="/" type=PATH msg=audit(1255085375.750:9435): item=0 name="/sbin/auditctl" inode=352582 dev=fd:01 mode=0100750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:auditctl_exec_t:s0 type=PATH msg=audit(1255085375.750:9435): item=1 name=(null) inode=3412 dev=fd:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0 type=SYSCALL msg=audit(1255085375.781:9436): arch=c000003e syscall=2 success=yes exit=3 a0=316261a620 a1=0 a2=1 a3=0 items=1 ppid=1191 pid=1201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/sbin/auditctl" subj=system_u:system_r:auditctl_t:s0 key=(null) type=CWD msg=audit(1255085375.781:9436): cwd="/" type=PATH msg=audit(1255085375.781:9436): item=0 name="/etc/ld.so.cache" inode=12580 dev=fd:01 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_cache_t:s0 type=SYSCALL msg=audit(1255085375.782:9437): arch=c000003e syscall=2 success=yes exit=3 a0=7f09565bf9e5 a1=0 a2=0 a3=2 items=1 ppid=1191 pid=1201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/sbin/auditctl" subj=system_u:system_r:auditctl_t:s0 key=(null) type=CWD msg=audit(1255085375.782:9437): cwd="/" type=PATH msg=audit(1255085375.782:9437): item=0 name="/lib64/libpthread.so.0" inode=348821 dev=fd:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 type=SYSCALL msg=audit(1255085375.783:9438): arch=c000003e syscall=2 success=yes exit=3 a0=7f09565cc295 a1=0 a2=0 a3=7fff7f807958 items=1 ppid=1191 pid=1201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/sbin/auditctl" subj=system_u:system_r:auditctl_t:s0 key=(null) type=CWD msg=audit(1255085375.783:9438): cwd="/" type=PATH msg=audit(1255085375.783:9438): item=0 name="/lib64/libc.so.6" inode=13053 dev=fd:01 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:lib_t:s0 type=SYSCALL msg=audit(1255085375.787:9439): arch=c000003e syscall=2 success=yes exit=4 a0=7fff7f809e94 a1=0 a2=40b170 a3=40 items=1 ppid=1191 pid=1201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/sbin/auditctl" subj=system_u:system_r:auditctl_t:s0 key=(null) type=CWD msg=audit(1255085375.787:9439): cwd="/" type=PATH msg=audit(1255085375.787:9439): item=0 name="/etc/audit/audit.rules" inode=52921 dev=fd:01 mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:auditd_etc_t:s0 type=CONFIG_CHANGE msg=audit(1255085375.791:9440): auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 op="remove rule" key=(null) list=4 res=1 type=CONFIG_CHANGE msg=audit(1255085375.792:9441): audit_backlog_limit=320 old=256 auid=4294967295 ses=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 type=LABEL_LEVEL_CHANGE msg=audit(1255085381.192:9442): user pid=1371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=USER_AUTH msg=audit(1255085401.198:9443): user pid=1929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=failed' type=USER_LOGIN msg=audit(1255085401.200:9444): user pid=1929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=failed' type=USER_AUTH msg=audit(1255085403.889:9445): user pid=1928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_ACCT msg=audit(1255085403.899:9446): user pid=1928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=CRED_ACQ msg=audit(1255085403.966:9447): user pid=1928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=LOGIN msg=audit(1255085403.969:9448): login pid=1928 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=1 type=USER_ROLE_CHANGE msg=audit(1255085404.028:9449): user pid=1928 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1255085404.402:9450): user pid=1928 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=:0 res=success' type=USER_LOGIN msg=audit(1255085404.402:9451): user pid=1928 uid=0 auid=500 ses=1 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/libexec/gdm-session-worker" hostname=? addr=? terminal=/dev/tty1 res=success' type=USER_ACCT msg=audit(1255086062.118:9452): user pid=2647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255086062.123:9453): user pid=2647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255086062.123:9454): login pid=2647 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=2 type=USER_START msg=audit(1255086062.128:9455): user pid=2647 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1255086062.503:9456): user pid=2647 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255086062.504:9457): user pid=2647 uid=0 auid=0 ses=2 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1255086728.964:9458): user pid=2693 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1255086851.230:9459): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255086851.244:9460): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255087220.945:9461): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255087220.952:9462): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=ANOM_ABEND msg=audit(1255088061.502:9463): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 pid=2768 comm="firefox" sig=11 type=AVC msg=audit(1255088070.634:9464): avc: denied { read } for pid=3198 comm="eu-unstrip" name="libjetpack.so" dev=dm-9 ino=1328477 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:mozilla_home_t:s0 tclass=file type=AVC msg=audit(1255088070.634:9464): avc: denied { read open } for pid=3198 comm="eu-unstrip" name="libjetpack.so" dev=dm-9 ino=1328477 scontext=system_u:system_r:abrt_t:s0 tcontext=unconfined_u:object_r:mozilla_home_t:s0 tclass=file type=SYSCALL msg=audit(1255088070.634:9464): arch=c000003e syscall=2 success=yes exit=0 a0=222d860 a1=0 a2=0 a3=6633343865363134 items=0 ppid=1740 pid=3198 auid=4294967295 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=4294967295 comm="eu-unstrip" exe="/usr/bin/eu-unstrip" subj=system_u:system_r:abrt_t:s0 key=(null) type=USER_AUTH msg=audit(1255088238.220:9465): user pid=3314 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_ACCT msg=audit(1255088238.226:9466): user pid=3314 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=CRED_ACQ msg=audit(1255088238.229:9467): user pid=3314 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1255088238.237:9468): user pid=3314 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1255088238.237:9469): user pid=3314 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1255088238.239:9470): user pid=3314 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1255088238.244:9471): user pid=3320 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=MAC_POLICY_LOAD msg=audit(1255088342.274:9472): policy loaded auid=500 ses=1 type=SYSCALL msg=audit(1255088342.274:9472): arch=c000003e syscall=1 success=yes exit=0 a0=4 a1=7f1b23668000 a2=3ee8d9 a3=7fff9c5b15c0 items=0 ppid=3383 pid=3384 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts2 ses=1 comm="load_policy" exe="/sbin/load_policy" subj=unconfined_u:unconfined_r:load_policy_t:s0-s0:c0.c1023 key=(null) type=ANOM_ABEND msg=audit(1255088412.321:9473): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_execmem_t:s0-s0:c0.c1023 pid=3404 comm="firefox" sig=11 type=CRED_ACQ msg=audit(1255088430.576:9474): user pid=3522 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_START msg=audit(1255088430.585:9475): user pid=3522 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_END msg=audit(1255088430.586:9476): user pid=3522 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/2 res=success' type=USER_CMD msg=audit(1255088430.587:9477): user pid=3522 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/2 res=success' type=USER_ROLE_CHANGE msg=audit(1255088430.590:9478): user pid=3523 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/2 res=success' type=USER_AUTH msg=audit(1255088744.833:9479): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255088744.848:9480): user pid=3659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255088744.848:9481): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255088744.859:9482): user pid=3659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255088745.298:9483): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255088745.305:9484): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255089661.612:9485): user pid=4081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255089661.616:9486): user pid=4081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255089661.617:9487): login pid=4081 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=3 type=USER_START msg=audit(1255089661.622:9488): user pid=4081 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1255089661.796:9489): user pid=4081 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255089661.798:9490): user pid=4081 uid=0 auid=0 ses=3 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1255090713.950:9491): user pid=4973 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1255090713.960:9492): user pid=4973 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=ANOM_PROMISCUOUS msg=audit(1255090866.108:9493): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1255090866.108:9493): arch=c000003e syscall=16 success=yes exit=0 a0=13 a1=89a2 a2=7f6fcf635dc0 a3=7f6fcf635b50 items=0 ppid=1 pid=1861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) type=USER_AUTH msg=audit(1255091081.329:9494): user pid=5549 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=USER_ACCT msg=audit(1255091081.338:9495): user pid=5549 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=CRED_ACQ msg=audit(1255091081.340:9496): user pid=5549 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_START msg=audit(1255091081.345:9497): user pid=5549 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_END msg=audit(1255091081.346:9498): user pid=5549 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_CMD msg=audit(1255091081.351:9499): user pid=5549 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/.mozilla" cmd=2F7573722F62696E2F79756D206C697374202A686F73746E616D652A terminal=pts/3 res=success' type=USER_ROLE_CHANGE msg=audit(1255091081.355:9500): user pid=5558 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=ANOM_PROMISCUOUS msg=audit(1255091408.733:9501): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 type=SYSCALL msg=audit(1255091408.733:9501): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=7fffed66e280 a2=8 a3=1 items=0 ppid=1 pid=5190 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/bin/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c981,c1010 key=(null) type=ANOM_PROMISCUOUS msg=audit(1255091555.076:9502): dev=vnet0 prom=256 old_prom=0 auid=4294967295 uid=0 gid=0 ses=4294967295 type=SYSCALL msg=audit(1255091555.076:9502): arch=c000003e syscall=16 success=yes exit=0 a0=13 a1=89a2 a2=7f6fd0036dc0 a3=3162d7b14c items=0 ppid=1 pid=1860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="libvirtd" exe="/usr/sbin/libvirtd" subj=system_u:system_r:virtd_t:s0-s0:c0.c1023 key=(null) type=USER_ACCT msg=audit(1255093262.061:9503): user pid=8964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255093262.064:9504): user pid=8964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255093262.075:9505): login pid=8964 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=4 type=USER_START msg=audit(1255093262.191:9506): user pid=8964 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1255093262.651:9507): user pid=8964 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255093262.652:9508): user pid=8964 uid=0 auid=0 ses=4 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1255095171.833:9509): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255095171.865:9510): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255096572.059:9511): user pid=13564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.225 addr=192.168.122.225 terminal=ssh res=success' type=USER_ACCT msg=audit(1255096572.065:9512): user pid=13564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.225 addr=192.168.122.225 terminal=ssh res=success' type=CRED_ACQ msg=audit(1255096572.128:9513): user pid=13564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.225 addr=192.168.122.225 terminal=ssh res=success' type=LOGIN msg=audit(1255096572.131:9514): login pid=13564 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=5 type=USER_ROLE_CHANGE msg=audit(1255096572.278:9515): user pid=13564 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed' type=USER_ROLE_CHANGE msg=audit(1255096572.279:9516): user pid=13564 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1255096572.354:9517): user pid=13564 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.225 addr=192.168.122.225 terminal=ssh res=success' type=CRED_REFR msg=audit(1255096572.359:9518): user pid=13575 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.225 addr=192.168.122.225 terminal=ssh res=success' type=CRED_DISP msg=audit(1255096573.349:9519): user pid=13564 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.225 addr=192.168.122.225 terminal=ssh res=success' type=USER_END msg=audit(1255096573.350:9520): user pid=13564 uid=0 auid=0 ses=5 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.225 addr=192.168.122.225 terminal=ssh res=success' type=USER_AUTH msg=audit(1255096654.611:9521): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255096654.616:9522): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255096861.873:9523): user pid=13976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255096861.876:9524): user pid=13976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255096861.876:9525): login pid=13976 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=6 type=USER_START msg=audit(1255096861.934:9526): user pid=13976 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1255096862.832:9527): user pid=13976 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255096862.833:9528): user pid=13976 uid=0 auid=0 ses=6 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1255099379.877:9529): user pid=17020 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1255100461.969:9530): user pid=18500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255100461.970:9531): user pid=18500 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255100461.971:9532): login pid=18500 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=7 type=USER_START msg=audit(1255100461.975:9533): user pid=18500 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1255100462.137:9534): user pid=18500 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255100462.138:9535): user pid=18500 uid=0 auid=0 ses=7 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=ANOM_PROMISCUOUS msg=audit(1255101044.678:9536): dev=vnet0 prom=0 old_prom=256 auid=4294967295 uid=107 gid=107 ses=4294967295 type=SYSCALL msg=audit(1255101044.678:9536): arch=c000003e syscall=3 success=yes exit=0 a0=14 a1=7fffa4b93e30 a2=8 a3=1 items=0 ppid=1 pid=6157 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-kvm" exe="/usr/bin/qemu-kvm" subj=system_u:system_r:svirt_t:s0:c557,c558 key=(null) type=ANOM_ABEND msg=audit(1255101258.820:9537): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=19407 comm="gvfsd-obexftp" sig=6 type=ANOM_ABEND msg=audit(1255101435.612:9538): auid=500 uid=500 gid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 pid=19507 comm="gvfsd-obexftp" sig=6 type=USER_AUTH msg=audit(1255101665.392:9539): user pid=19651 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1255101665.397:9540): user pid=19651 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1255102545.302:9541): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255102545.307:9542): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255102857.165:9543): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255102857.170:9544): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255102857.490:9545): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255102857.496:9546): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255102860.538:9547): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255102860.543:9548): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_AUTH msg=audit(1255102860.625:9549): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255102860.630:9550): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_LOGIN msg=audit(1255103484.952:9551): user pid=20624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="marketa": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.4 terminal=sshd res=failed' type=USER_LOGIN msg=audit(1255103501.154:9552): user pid=20631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='acct="matej": exe="/usr/sbin/sshd" hostname=? addr=192.168.1.4 terminal=sshd res=failed' type=USER_AUTH msg=audit(1255103501.176:9553): user pid=20631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/usr/sbin/sshd" hostname=192.168.1.4 addr=192.168.1.4 terminal=ssh res=success' type=USER_ACCT msg=audit(1255103501.189:9554): user pid=20631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/usr/sbin/sshd" hostname=192.168.1.4 addr=192.168.1.4 terminal=ssh res=success' type=CRED_ACQ msg=audit(1255103501.192:9555): user pid=20631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/sbin/sshd" hostname=192.168.1.4 addr=192.168.1.4 terminal=ssh res=success' type=LOGIN msg=audit(1255103501.193:9556): login pid=20631 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=8 type=USER_ROLE_CHANGE msg=audit(1255103501.273:9557): user pid=20631 uid=0 auid=500 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=?: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=failed' type=USER_ROLE_CHANGE msg=audit(1255103501.273:9558): user pid=20631 uid=0 auid=500 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success' type=USER_START msg=audit(1255103501.278:9559): user pid=20631 uid=0 auid=500 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/usr/sbin/sshd" hostname=192.168.1.4 addr=192.168.1.4 terminal=ssh res=success' type=CRED_ACQ msg=audit(1255103501.282:9560): user pid=20635 uid=0 auid=500 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/sbin/sshd" hostname=192.168.1.4 addr=192.168.1.4 terminal=ssh res=success' type=USER_AUTH msg=audit(1255107921.144:9561): user pid=21087 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1255113203.980:9562): user pid=21430 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=failed' type=USER_AUTH msg=audit(1255113210.571:9563): user pid=21435 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1255113278.490:9564): user pid=1798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_ACCT msg=audit(1255113278.497:9565): user pid=1798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=LOGIN msg=audit(1255113278.499:9566): login pid=1798 uid=0 old auid=4294967295 new auid=500 old ses=4294967295 new ses=9 type=USER_ROLE_CHANGE msg=audit(1255113278.580:9567): user pid=1798 uid=0 auid=500 ses=9 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_START msg=audit(1255113278.839:9568): user pid=1798 uid=0 auid=500 ses=9 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=CRED_ACQ msg=audit(1255113278.839:9569): user pid=1798 uid=0 auid=500 ses=9 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_LOGIN msg=audit(1255113278.840:9570): user pid=1798 uid=0 auid=500 ses=9 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=login id=500 exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=CRED_DISP msg=audit(1255113282.008:9571): user pid=1798 uid=0 auid=500 ses=9 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_END msg=audit(1255113282.010:9572): user pid=1798 uid=0 auid=500 ses=9 subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="matej" exe="/bin/login" hostname=? addr=? terminal=tty2 res=success' type=USER_AUTH msg=audit(1255117569.838:9573): user pid=24893 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1255117977.780:9574): user pid=25165 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1255118461.341:9575): user pid=28212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255118461.343:9576): user pid=28212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255118461.343:9577): login pid=28212 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=10 type=USER_START msg=audit(1255118461.347:9578): user pid=28212 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1255118461.450:9579): user pid=28212 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255118461.451:9580): user pid=28212 uid=0 auid=0 ses=10 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1255119753.256:9581): user pid=28602 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=failed' type=USER_AUTH msg=audit(1255119757.483:9582): user pid=28606 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1255119867.657:9583): user pid=31742 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1255119867.662:9584): user pid=31742 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=CRED_ACQ msg=audit(1255119867.665:9585): user pid=31742 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1255119867.676:9586): user pid=31742 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1255119867.677:9587): user pid=31742 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1255119867.682:9588): user pid=31742 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1255119867.685:9589): user pid=31748 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_AUTH msg=audit(1255122800.531:9590): user pid=32558 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1255123864.990:9591): user pid=32600 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1255123875.191:9592): user pid=32649 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1255123875.195:9593): user pid=32649 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=CRED_ACQ msg=audit(1255123875.198:9594): user pid=32649 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1255123875.205:9595): user pid=32649 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1255123875.206:9596): user pid=32649 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1255123875.207:9597): user pid=32649 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd="/bin/bash" terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1255123875.211:9598): user pid=32654 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_AUTH msg=audit(1255124317.408:9599): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255124317.413:9600): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255125661.670:9601): user pid=573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255125661.673:9602): user pid=573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255125661.673:9603): login pid=573 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=11 type=USER_START msg=audit(1255125661.677:9604): user pid=573 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1255125661.752:9605): user pid=573 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255125661.753:9606): user pid=573 uid=0 auid=0 ses=11 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1255127304.253:9607): user pid=20631 uid=0 auid=500 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="matej" exe="/usr/sbin/sshd" hostname=192.168.1.4 addr=192.168.1.4 terminal=ssh res=success' type=USER_END msg=audit(1255127304.258:9608): user pid=20631 uid=0 auid=500 ses=8 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="matej" exe="/usr/sbin/sshd" hostname=192.168.1.4 addr=192.168.1.4 terminal=ssh res=success' type=USER_AUTH msg=audit(1255128703.184:9609): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255128703.189:9610): user pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="matej" exe="/usr/libexec/dovecot/dovecot-auth" hostname=127.0.0.1 addr=127.0.0.1 terminal=dovecot res=success' type=USER_ACCT msg=audit(1255129261.618:9611): user pid=977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255129261.621:9612): user pid=977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255129261.621:9613): login pid=977 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=12 type=USER_START msg=audit(1255129261.626:9614): user pid=977 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1255129261.706:9615): user pid=977 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255129261.707:9616): user pid=977 uid=0 auid=0 ses=12 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1255159316.952:9617): user pid=1573 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1255161661.947:9618): user pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255161661.948:9619): user pid=5156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255161661.949:9620): login pid=5156 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=13 type=USER_START msg=audit(1255161661.952:9621): user pid=5156 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1255161662.030:9622): user pid=5156 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255161662.030:9623): user pid=5156 uid=0 auid=0 ses=13 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1255163497.313:9624): user pid=5259 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1255165261.114:9625): user pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255165261.115:9626): user pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255165261.116:9627): login pid=5675 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=14 type=USER_START msg=audit(1255165261.120:9628): user pid=5675 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1255165261.190:9629): user pid=5675 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255165261.190:9630): user pid=5675 uid=0 auid=0 ses=14 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1255194738.528:9631): user pid=6108 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1255196585.861:9632): user pid=9749 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1255197661.607:9633): user pid=10162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255197661.610:9634): user pid=10162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255197661.610:9635): login pid=10162 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=15 type=USER_START msg=audit(1255197661.614:9636): user pid=10162 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1255197661.693:9637): user pid=10162 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255197661.693:9638): user pid=10162 uid=0 auid=0 ses=15 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1255199956.208:9639): user pid=11216 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1255199956.213:9640): user pid=11216 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/libexec/polkit-1/polkit-agent-helper-1" hostname=? addr=? terminal=? res=success' type=LABEL_LEVEL_CHANGE msg=audit(1255200171.767:9641): user pid=11538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=normalni uri=ipp://192.168.1.5/printers/tiskatko banners=none,none range=unknown: exe="/usr/sbin/cupsd" hostname=bradford.ceplovi.cz addr=127.0.0.1 terminal=? res=success' type=USER_ACCT msg=audit(1255201261.878:9642): user pid=11585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255201261.887:9643): user pid=11585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255201261.888:9644): login pid=11585 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=16 type=USER_START msg=audit(1255201261.944:9645): user pid=11585 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1255201262.149:9646): user pid=11585 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255201262.149:9647): user pid=11585 uid=0 auid=0 ses=16 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1255204143.033:9648): user pid=11717 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1255210577.747:9649): user pid=12320 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_ACCT msg=audit(1255212061.709:9650): user pid=16278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_ACQ msg=audit(1255212061.712:9651): user pid=16278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=LOGIN msg=audit(1255212061.713:9652): login pid=16278 uid=0 old auid=4294967295 new auid=0 old ses=4294967295 new ses=17 type=USER_START msg=audit(1255212061.716:9653): user pid=16278 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=CRED_DISP msg=audit(1255212061.801:9654): user pid=16278 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_END msg=audit(1255212061.802:9655): user pid=16278 uid=0 auid=0 ses=17 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success' type=USER_AUTH msg=audit(1255213527.481:9656): user pid=17036 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=USER_ACCT msg=audit(1255213527.486:9657): user pid=17036 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=CRED_ACQ msg=audit(1255213527.488:9658): user pid=17036 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_START msg=audit(1255213527.493:9659): user pid=17036 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_END msg=audit(1255213527.493:9660): user pid=17036 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_CMD msg=audit(1255213527.494:9661): user pid=17036 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/archiv/2009/projekty/jetpack" cmd=2F7573722F62696E2F79756D206C6973742078756C72756E6E65722A646576656C terminal=pts/3 res=success' type=USER_ROLE_CHANGE msg=audit(1255213527.502:9662): user pid=17043 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=CRED_ACQ msg=audit(1255213600.889:9663): user pid=17070 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_START msg=audit(1255213600.893:9664): user pid=17070 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_END msg=audit(1255213600.894:9665): user pid=17070 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/3 res=success' type=USER_CMD msg=audit(1255213600.895:9666): user pid=17070 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/matej/archiv/2009/projekty/jetpack" cmd=2F7573722F62696E2F79756D206C697374202A73756E626972642A terminal=pts/3 res=success' type=USER_ROLE_CHANGE msg=audit(1255213600.897:9667): user pid=17072 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/3 res=success' type=USER_AUTH msg=audit(1255246126.413:9668): user pid=17785 uid=500 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:unix_chkpwd acct="matej" exe="/sbin/unix_chkpwd" hostname=? addr=? terminal=? res=success' type=USER_AUTH msg=audit(1255246453.339:9669): user pid=21546 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=USER_ACCT msg=audit(1255246453.343:9670): user pid=21546 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=CRED_ACQ msg=audit(1255246453.346:9671): user pid=21546 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1255246453.351:9672): user pid=21546 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1255246453.351:9673): user pid=21546 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1255246453.354:9674): user pid=21546 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/udev-bug" cmd=2F62696E2F6370202F7661722F6C6F672F6D65737361676573202E terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1255246453.358:9675): user pid=21552 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success' type=CRED_ACQ msg=audit(1255246461.675:9676): user pid=21553 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_START msg=audit(1255246461.680:9677): user pid=21553 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_END msg=audit(1255246461.680:9678): user pid=21553 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=bradford addr=127.0.0.1 terminal=/dev/pts/1 res=success' type=USER_CMD msg=audit(1255246461.681:9679): user pid=21553 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/tmp/udev-bug" cmd=2F62696E2F6370202F7661722F6C6F672F61756469742F61756469742E6C6F67202E terminal=pts/1 res=success' type=USER_ROLE_CHANGE msg=audit(1255246461.684:9680): user pid=21554 uid=0 auid=500 ses=1 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='newrole: old-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 new-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023: exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/1 res=success'