type=DAEMON_START msg=audit(1172714606.978:8177) auditd start, ver=1.4.2, format=raw, auid=4294967295 pid=2225 res=success, auditd pid=2225 type=CONFIG_CHANGE msg=audit(1172714607.077:19): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1 type=CONFIG_CHANGE msg=audit(1172714607.077:20): audit_enabled=1 old=0 by auid=4294967295 res=1 type=CONFIG_CHANGE msg=audit(1172714607.520:21): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1 type=CONFIG_CHANGE msg=audit(1172714607.521:22): audit_backlog_limit=256 old=64 by auid=4294967295 res=1 type=AVC msg=audit(1172714609.640:23): avc: denied { getattr } for pid=2287 comm="mcstransd" name="/" dev=selinuxfs ino=540 scontext=system_u:system_r:setrans_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=filesystem type=SYSCALL msg=audit(1172714609.640:23): arch=40000003 syscall=268 success=no exit=-13 a0=d99d8a a1=54 a2=bfc30d40 a3=bfc30d40 items=0 ppid=2286 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mcstransd" exe="/sbin/mcstransd" subj=system_u:system_r:setrans_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1172714611.889:24): avc: denied { getattr } for pid=2329 comm="setroubleshootd" name="/" dev=selinuxfs ino=540 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:security_t:s0 tclass=filesystem type=SYSCALL msg=audit(1172714611.889:24): arch=40000003 syscall=268 success=no exit=-13 a0=2d0d8a a1=54 a2=bfb4af30 a3=bfb4af30 items=0 ppid=1 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="setroubleshootd" exe="/usr/bin/python" subj=system_u:system_r:setroubleshootd_t:s0 key=(null) type=AVC msg=audit(1172714616.631:25): avc: denied { getattr } for pid=2460 comm="ifconfig" name="/" dev=selinuxfs ino=540 scontext=system_u:system_r:ifconfig_t:s0 tcontext=system_u:object_r:security_t:s0 tclass=filesystem type=SYSCALL msg=audit(1172714616.631:25): arch=40000003 syscall=268 success=no exit=-13 a0=e86d8a a1=54 a2=bff8f420 a3=bff8f420 items=0 ppid=2435 pid=2460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ifconfig" exe="/sbin/ifconfig" subj=system_u:system_r:ifconfig_t:s0 key=(null) type=AVC msg=audit(1172714617.216:26): avc: denied { getattr } for pid=2500 comm="ifconfig" name="/" dev=selinuxfs ino=540 scontext=system_u:system_r:ifconfig_t:s0 tcontext=system_u:object_r:security_t:s0 tclass=filesystem type=SYSCALL msg=audit(1172714617.216:26): arch=40000003 syscall=268 success=no exit=-13 a0=6a3d8a a1=54 a2=bfacef50 a3=bfacef50 items=0 ppid=2482 pid=2500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ifconfig" exe="/sbin/ifconfig" subj=system_u:system_r:ifconfig_t:s0 key=(null) type=AVC msg=audit(1172714619.200:27): avc: denied { getattr } for pid=2573 comm="mount" name="/" dev=selinuxfs ino=540 scontext=system_u:system_r:mount_t:s0 tcontext=system_u:object_r:security_t:s0 tclass=filesystem type=SYSCALL msg=audit(1172714619.200:27): arch=40000003 syscall=268 success=no exit=-13 a0=328d8a a1=54 a2=bffb94a0 a3=bffb94a0 items=0 ppid=2552 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mount" exe="/bin/mount" subj=system_u:system_r:mount_t:s0 key=(null) type=AVC msg=audit(1172714620.853:28): avc: denied { getattr } for pid=2600 comm="mount" name="/" dev=selinuxfs ino=540 scontext=system_u:system_r:mount_t:s0 tcontext=system_u:object_r:security_t:s0 tclass=filesystem type=SYSCALL msg=audit(1172714620.853:28): arch=40000003 syscall=268 success=no exit=-13 a0=144d8a a1=54 a2=bf8de580 a3=bf8de580 items=0 ppid=2597 pid=2600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mount" exe="/bin/mount" subj=system_u:system_r:mount_t:s0 key=(null) type=AVC msg=audit(1172714620.859:29): avc: denied { getattr } for pid=2601 comm="umount" name="/" dev=selinuxfs ino=540 scontext=system_u:system_r:mount_t:s0 tcontext=system_u:object_r:security_t:s0 tclass=filesystem type=SYSCALL msg=audit(1172714620.859:29): arch=40000003 syscall=268 success=no exit=-13 a0=b74d8a a1=54 a2=bf972d90 a3=bf972d90 items=0 ppid=2597 pid=2601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="umount" exe="/bin/umount" subj=system_u:system_r:mount_t:s0 key=(null) type=AVC msg=audit(1172714621.574:30): avc: denied { getattr } for pid=2603 comm="mount" name="/" dev=selinuxfs ino=540 scontext=system_u:system_r:mount_t:s0 tcontext=system_u:object_r:security_t:s0 tclass=filesystem type=SYSCALL msg=audit(1172714621.574:30): arch=40000003 syscall=268 success=no exit=-13 a0=123d8a a1=54 a2=bfdeb280 a3=bfdeb280 items=0 ppid=2597 pid=2603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="mount" exe="/bin/mount" subj=system_u:system_r:mount_t:s0 key=(null) type=AVC msg=audit(1172714621.581:31): avc: denied { getattr } for pid=2604 comm="umount" name="/" dev=selinuxfs ino=540 scontext=system_u:system_r:mount_t:s0 tcontext=system_u:object_r:security_t:s0 tclass=filesystem type=SYSCALL msg=audit(1172714621.581:31): arch=40000003 syscall=268 success=no exit=-13 a0=e6dd8a a1=54 a2=bfc70220 a3=bfc70220 items=0 ppid=2597 pid=2604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="umount" exe="/bin/umount" subj=system_u:system_r:mount_t:s0 key=(null) type=LABEL_LEVEL_CHANGE msg=audit(1172714631.834:32): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=HP5MP uri=hp:/par/HP_LaserJet_5MP?device=/dev/parport0 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=? res=success)' type=LABEL_LEVEL_CHANGE msg=audit(1172714632.094:33): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp_LaserJet_1300 uri=hal:///org/freedesktop/Hal/devices/usb_device_3f0_1017_00CNCB954325_if0_printer_noserial banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=? res=success)' type=LABEL_LEVEL_CHANGE msg=audit(1172714632.232:34): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Innopath uri=file:/dev/null banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=? res=success)' type=LABEL_LEVEL_CHANGE msg=audit(1172714632.233:35): user pid=2677 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Local uri=file:/dev/null banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=? res=success)' type=USER_ERR msg=audit(1172714649.286:36): user pid=3248 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)' type=USER_AUTH msg=audit(1172714663.308:37): user pid=3322 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=tbl : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' type=USER_ACCT msg=audit(1172714663.309:38): user pid=3322 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=tbl : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' type=CRED_ACQ msg=audit(1172714663.310:39): user pid=3322 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=tbl : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' type=LOGIN msg=audit(1172714663.315:40): login pid=3322 uid=0 old auid=4294967295 new auid=500 type=USER_START msg=audit(1172714663.845:41): user pid=3322 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=tbl : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)' type=USER_LOGIN msg=audit(1172714663.847:42): user pid=3322 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=:0 res=success)' type=USER_AUTH msg=audit(1172714750.042:43): user pid=3898 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' type=USER_ACCT msg=audit(1172714750.042:44): user pid=3898 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' type=USER_START msg=audit(1172714750.343:45): user pid=3898 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' type=CRED_ACQ msg=audit(1172714750.343:46): user pid=3898 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)' type=USER_AUTH msg=audit(1172714885.904:47): user pid=4049 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' type=USER_ACCT msg=audit(1172714885.905:48): user pid=4049 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' type=USER_START msg=audit(1172714885.968:49): user pid=4049 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)' type=CRED_ACQ msg=audit(1172714885.969:50): user pid=4049 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'